The unofficial HackerOne disclosure Timeline

b'Lovable VDP' disclosed a bug submitted by b'd0maxploit'
b'Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable AI)'

04 Nov 2025 timeline

b'Lovable VDP' disclosed a bug submitted by b'd0maxploit'
b'Improper Authorization Leads to Editor can toggle admin-only workspace features (Lovable Cloud)'

04 Nov 2025 timeline

b'Mozilla' disclosed a bug submitted by b'xhacking_z'
b'Microsoft `x-apikey` Exposed in Mozilla CI Public Logs'

03 Nov 2025 timeline

b'curl' disclosed a bug submitted by b'hackerpllim'
b'HackerOne'

03 Nov 2025 timeline

b'curl' disclosed a bug submitted by b'hackerpllim'
b'Hi Hacker'

03 Nov 2025 timeline

b'curl' disclosed a bug submitted by b'oliverkremer'
b'Directory Traversal Vulnerability in cURL via Content-Disposition Header Processing'

01 Nov 2025 timeline

b'Hiro' disclosed a bug submitted by b'craxermgr'
b'No Confirmation Email For Email Change'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'craxermgr'
b'Information Disclosure'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'vyshnav_nk'
b'REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITY'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'myskar'
b'Missing restriction on string size of Full Name at browser.blockstack.org'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'myskar'
b'Can view all username leaked in https://core.blockstack.org'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'droop3r'
b'Invalidate active sessions after password change'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'0x1_aulia'
b'blockstack.org - is vulnerable to (CVE-2016-2183, CVE-2016-6329)'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'frozensolid'
b'Blockstack Browser For Mac leaks "Core API Password" to 3rd parties'

31 Oct 2025 timeline

b'Hiro' disclosed a bug submitted by b'anonymous--1000'
b'Logout Bypass Vulnerability in Hiro.so'

31 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'sagorhawlader'
b'Buffer over-read,, Missing NUL termination in addvariable() causes undefined behavior'

31 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'abdullah-107'
b'SOCKS5 Heap Buffer Overflow via Malicious HTTP Redirect with Oversized Hostname'

31 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'exploitguru101'
b'Logical Flaw in curl_url_set Leads to Inconsistent Query Parameter Encoding'

29 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'tjbecker_theori'
b'Memory leak in Curl_auth_create_ntlm_type3_message'

28 Oct 2025 timeline

b'curl' disclosed a bug submitted by b'geeknik'
b'curls persistence files inherit world-readable/writable perms from umask, leaking and tampering with cookies/HSTS/Alt-Svc caches'

28 Oct 2025 timeline

1 ... 32 33 34 35 36 ... 774

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.