The unofficial HackerOne disclosure Timeline

b'Node.js' disclosed a bug submitted by b'oblivionsage'
b'Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()'

15 Jul 2025 timeline

b'HackerOne' disclosed a bug submitted by b'mrmax4o4'
b"Banned user still has access to their deleted account via HackerOne's API using their API key"

14 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'tryhackplanet'
b'Disk Space Exhaustion leading to a Denial of Service (DoS)'

14 Jul 2025 timeline

b'WakaTime' disclosed a bug submitted by b'ctrl_cipher'
b'Not a Vuln: Race Condition Allows Creation of Multiple Organizations with the Same Name'

14 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'tryhackplanet'
b'Uncontrolled File Write/Arbitrary File Creation '

13 Jul 2025 timeline

b'MainWP' disclosed a bug submitted by b'rishail01'
b'Reflected XSS in "Client Notes" Field'

13 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'youssef111'
b'HTTP Request Smuggling Vulnerability Analysis - cURL Security Report'

13 Jul 2025 timeline

b'Khan Academy' disclosed a bug submitted by b'a0xtrojan'
b'Leaked reused password for a few Khan Academy users'

12 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'monkey_dee'
b'Default Minimum TLS Version Set to TLS v1.0 (Cryptographic Weakness)'

10 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'brobagazzzx'
b'Use-After-Free in OpenSSL Keylog Callback via SSL_get_ex_data() in libcurl'

09 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'mr_tufan'
b'Arbitrary File Read via file:// Protocol in cURL'

09 Jul 2025 timeline

b'TikTok' disclosed a bug submitted by b'eneri'
b'Chain Vulnerability lead to Full Control Group Live Accounts & Undeletable Creator'

08 Jul 2025 timeline

b'Ruby' disclosed a bug submitted by b'ooooooo_q'
b'ReDoS in IPAddr'

08 Jul 2025 timeline

b'Ruby' disclosed a bug submitted by b'ooooooo_q'
b'ReDoS in Psych'

08 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'haydradz'
b'access notes without permission'

08 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'haydradz'
b'Disclosure of email addresses'

08 Jul 2025 timeline

b'Sony' disclosed a bug submitted by b'trapedev'
b'Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks'

08 Jul 2025 timeline

b'IBM' disclosed a bug submitted by b'devire'
b'Information disclosure identified on IBM endpoint. '

08 Jul 2025 timeline

b'Lichess' disclosed a bug submitted by b'psfauzi'
b'CSRF at Network feature'

08 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'curl --continue-at confusion'

07 Jul 2025 timeline

1 ... 35 36 37 38 39 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.