The unofficial HackerOne disclosure Timeline

b'curl' disclosed a bug submitted by b'z2_'
b'CVE-2025-5399: WebSocket endless loop'

04 Jun 2025 timeline

b'Lichess' disclosed a bug submitted by b'oblivionsage'
b'Server-Side Request Forgery (SSRF) via Game Export API'

03 Jun 2025 timeline

b'Mozilla' disclosed a bug submitted by b'z3phyrus'
b'IDOR: Account Deletion via Session Misbinding Attacker Can Delete Victim Account'

03 Jun 2025 timeline

b'HackerOne' disclosed a bug submitted by b'w2w'
b'Public GitHub repositories for multiple HackerOne managed triage team profiles contain private HackerOne reports information'

31 May 2025 timeline

b'8x8 Bounty' disclosed a bug submitted by b'kauenavarro'
b'Information Disclosure of metrics fax.wavecell.com/metrics'

30 May 2025 timeline

b'Omise' disclosed a bug submitted by b'vulnerability_is_here'
b'Facebook Username Takeover via Broken Link in Footer'

30 May 2025 timeline

b'Internet Bug Bounty' disclosed a bug submitted by b'saurabhb'
b'Apache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cli'

29 May 2025 timeline

b'Fastify' disclosed a bug submitted by b'oblivionsage'
b'Remote Code Execution via unsafe usage of `reply.view({ raw })` in @fastify/view (EJS template engine)'

28 May 2025 timeline

b'curl' disclosed a bug submitted by b'kurohiro'
b'CVE-2025-5025: No QUIC certificate pinning with wolfSSL'

28 May 2025 timeline

b'curl' disclosed a bug submitted by b'kurohiro'
b'CVE-2025-4947: QUIC certificate check skip with wolfSSL'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the bedrock Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoint for the EventBridge Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Global Accelerator Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Health Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Amazon Pinpoint SMS and Voice, version 2 Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints'

28 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Neptune Graph Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

27 May 2025 timeline

b'AWS VDP' disclosed a bug submitted by b'nick_frichette_dd'
b'Non-Production API Endpoints for the Route 53 Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration'

27 May 2025 timeline

b'Mars' disclosed a bug submitted by b'bughunter0x7'
b'unauthorized access and add user and change personal information all users'

27 May 2025 timeline

1 ... 46 47 48 49 50 ... 776

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.