The unofficial HackerOne disclosure Timeline

b'Lichess' disclosed a bug submitted by b'albetisi'
b' Unauthorized Blogs Creation'

02 Sep 2025 timeline

b'curl' disclosed a bug submitted by b'9vvert'
b'Incorrect Parsing of IPv6 Zone ID in curl'

01 Sep 2025 timeline

b'Node.js' disclosed a bug submitted by b'codingthunder'
b'CWE-195 in ExternalMemoryAccounter::Increase()'

26 Aug 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'notnotnotveg'
b'AWS | Self Registration Internal LibreChat : Access to internal/proprietary LLMs'

25 Aug 2025 timeline

b'Autodesk' disclosed a bug submitted by b'who_am_i_'
b'Stored XSS in AREA tutorials'

25 Aug 2025 timeline

b'Omise' disclosed a bug submitted by b'mantu1738'
b'PII Exposure via Email Confirmation Link Email Embedded in Token & Leaked via Wayback Machine'

23 Aug 2025 timeline

b'Brave Software' disclosed a bug submitted by b'stellersjay'
b'Prompt Injection via GitHub Patch in Brave AI Chat (Leo)'

22 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'balajidev'
b'Missing Security Headers'

22 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'robert_min1'
b'curl leaks destination IP via glibc getaddrinfo() UDP connect, bypassing SOCKS5/Tor'

20 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'irene1hacker'
b'Curl parse_connect_to_string Heap-Overread Leading to Denial of Service via CURLOPT_CONNECT_TO'

20 Aug 2025 timeline

b'WakaTime' disclosed a bug submitted by b'pashaaaaaaaa'
b'Invalid'

19 Aug 2025 timeline

b'curl' disclosed a bug submitted by b'pelioro'
b'WebSocket Fragmentation DoS on Curl Client'

19 Aug 2025 timeline

b'Insightly' disclosed a bug submitted by b'akostak'
b'Email verification bypass via request to endpoint "accounts.insightly.com/signup/provisionuser"'

18 Aug 2025 timeline

b'Malwarebytes' disclosed a bug submitted by b'assassin_marcos'
b'No SPF/DMARC records on mb-cosmos.com'

18 Aug 2025 timeline

18 Aug 2025 disclosed a bug submitted by Title Heap Use-After-Free Vulnerability in `curl` Leading to Potential Code Execution'
b'

b'irene1hacker' timeline

b'Malwarebytes' disclosed a bug submitted by b'sijojohnson'
b'Email Verification Bypass via Race Condition'

15 Aug 2025 timeline

b'Malwarebytes' disclosed a bug submitted by b'mantu1738'
b'Replayable Password Change Request Across Sessions.'

15 Aug 2025 timeline

b'Malwarebytes' disclosed a bug submitted by b'tarun_sec'
b'Rails Debug Mode Enabled On ( https://44.208.145.207/testrail/files.md5 ) '

15 Aug 2025 timeline

b'Shopify' disclosed a bug submitted by b'sahill_chavda'
b'Staff with Restricted Permissions Could Access Customer Data After Company Removal'

15 Aug 2025 timeline

b'Shopify' disclosed a bug submitted by b'saltymermaid'
b'URL Path Manipulation Enables Cache Poisoning of Amazon Affiliate Products in Shopify Linkpop'

14 Aug 2025 timeline

1 ... 38 39 40 41 42 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.