BugCrowd Bug Bounty Disclosure: P5 - internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov) - Theekshana_kusal

internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov)

Researcher: Theekshana_kusal

Engagement: National Aeronautics and Space Administration (NASA) – Vulnerability Disclosure Program

Disclosed at: 2025-10-02T14:22:27Z

Priority: P5

Status: Informational

Summary

Site was decommissioned.

Activity Feed

Actor	Details	Timestamp (UTC)
Martin_NASA	Martin_NASA sent a: message	2025-10-02T14:23:36Z
Martin_NASA	Martin_NASA published	2025-10-02T14:22:27Z
Theekshana_kusal	Theekshana_kusal requested	2025-08-25T21:00:39Z
Theekshana_kusal	Theekshana_kusal sent a: message	2025-08-18T17:11:00Z
Mason357_Bugcrowd	Mason357_Bugcrowd sent a: message	2025-08-18T16:59:01Z
Mason357_Bugcrowd	Mason357_Bugcrowd changed the state to to informational	2025-08-18T16:58:56Z
Mason357_Bugcrowd	Mason357_Bugcrowd changed the severity to	2025-08-18T16:58:54Z
Theekshana_kusal	Theekshana_kusal created the submission	2025-08-17T17:02:44Z

Support Our Work

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.

AI APIs OSINT driven New features

Buy Me A Coffee Patreon

Tags: bug bounty, BugCrowd, OSINT

BugCrowd Bug Bounty Disclosure: P5 – internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov) – Theekshana_kusal

internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov)

Summary

Activity Feed

Support Our Work

BugCrowd Bug Bounty Disclosure: P4 – Sensitive NASA Jira & Employee Data Exposure via Public JSFiddle –

BugCrowd Bug Bounty Disclosure: P4 – Publicly editable Google Slides linked from nasa.gov enables unauthorized content modification (content integrity & brand abuse risk – Epenetus-Matias-Putra

BugCrowd Bug Bounty Disclosure: P4 – open redirect vulnerability occurring at https://keycloak.shared-services.staging.appdat.jsc.nasa.gov/ – uko3211