The unofficial HackerOne disclosure Timeline

b'Sony' disclosed a bug submitted by b'trapedev'
b'Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks'

08 Jul 2025 timeline

b'IBM' disclosed a bug submitted by b'devire'
b'Information disclosure identified on IBM endpoint. '

08 Jul 2025 timeline

b'Lichess' disclosed a bug submitted by b'psfauzi'
b'CSRF at Network feature'

08 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'curl --continue-at confusion'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'haithamzakaria'
b'Information Disclosure at : https://curl.se/.mailmap'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'rono_07'
b'information disclosure '

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'nyymi'
b'netrc crlf injection'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'mdakh404'
b'curl mishandles `%0c%0b` sequences in HTTP responses leading to CRLF confusions, Headers and Cookies Injection'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'aadityaathehacker'
b'Arbitrary File Deletion Vulnerability in curl Source Code via os.unlink()'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'spongebhav'
b'-H with space prefix leads to previous header injection when used with --proxy'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'bulter'
b'OS Command Injection (subprocess Module Usage)'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'tefa_'
b'Git repository found'

07 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'extramayoextracheeseextrafries'
b'Integer Overflow Risk in HTTP/2 Proxy Window Size Calculations'

07 Jul 2025 timeline

b'Nintendo' disclosed a bug submitted by b'crazy_man123'
b'[MK8DX] Improper ranking/replay file parsing'

06 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'zzq1015'
b'TLS Cipher Misconfiguration in HTTP/3/QUIC Support'

06 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'skrcprst'
b"CRLF injection in libcurl's SMTP client via --mail-from and --mail-rcpt allows SMTP command smuggling"

03 Jul 2025 timeline

b'Mozilla' disclosed a bug submitted by b'northsea'
b'MozillaVPN: Elevation of Privilege via a Logic Vulnerability'

03 Jul 2025 timeline

b'Mozilla' disclosed a bug submitted by b'northsea'
b'MozillaVPN: Elevation of Privilege via a Race Condition Vulnerability'

03 Jul 2025 timeline

b'Mozilla' disclosed a bug submitted by b'martinvw'
b'Subdomain takeover on live.firefox.com'

03 Jul 2025 timeline

b'curl' disclosed a bug submitted by b'stogusho'
b"curl doesn't hide credentials in /proc/XXX/cmdline provided via CLI arguments"

03 Jul 2025 timeline

1 ... 42 43 44 45 46 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.