The unofficial HackerOne disclosure Timeline

b'8x8 Bounty' disclosed a bug submitted by b'kauenavarro'
b'Information Disclosure of metrics fax.wavecell.com/metrics'

30 May 2025 timeline

b'Omise' disclosed a bug submitted by b'vulnerability_is_here'
b'Facebook Username Takeover via Broken Link in Footer'

30 May 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb'
b'Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli'

29 May 2025 timeline

b'Fastify' disclosed a bug submitted by b'oblivionsage'
b'Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)'

28 May 2025 timeline

b'curl' disclosed a bug submitted by b'kurohiro'
b'CVE-2025-5025: No QUIC certificate pinning with wolfSSL'

28 May 2025 timeline

b'curl' disclosed a bug submitted by b'kurohiro'
b'CVE-2025-4947: QUIC certificate check skip with wolfSSL'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the bedrock Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoint for the EventBridge Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Global Accelerator Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Health Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Amazon Pinpoint SMS and Voice, version 2 Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Neptune Graph Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

27 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

27 May 2025 timeline

b'Mars' disclosed a bug submitted by b'bughunter0x7'
b'unauthorized access and add user and change personal information all users'

27 May 2025 timeline

b'Mars' disclosed a bug submitted by b'bughunter0x7'
b'Customer Data Exposure via Insecure Endpoint of coupon'

27 May 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nxczje'
b'Apache Airflow Sql injection by authenticated user'

27 May 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'nacl_123'
b'[SECURITY] CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet'

27 May 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'snhebrok'
b'TLS client authentication can be bypassed due to ticket resumption'

27 May 2025 timeline

1 ... 40 41 42 43 44 ... 769

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.