BugCrowd Bug Bounty Disclosure: P5 - Public Exposure of Internal Calibration Planning File on heasarc.gsfc.nasa.gov (XMM-Newton) - JustAKids

Public Exposure of Internal Calibration Planning File on heasarc.gsfc.nasa.gov (XMM-Newton)

Researcher: JustAKids

Engagement: National Aeronautics and Space Administration (NASA) – Vulnerability Disclosure Program

Disclosed at: 2025-05-13T18:52:15Z

Priority: P5

Status: Informational

Summary

This data is for public use

Activity Feed

Actor	Details	Timestamp (UTC)
Martin	Martin published	2025-05-13T18:52:15Z
JustAKids	JustAKids sent a: message	2025-05-03T15:27:53Z
JustAKids	JustAKids sent a: message	2025-05-03T14:57:28Z
JustAKids	JustAKids sent a: message	2025-05-03T01:31:37Z
JustAKids	JustAKids requested	2025-05-03T01:31:24Z
teapot_bugcrowd	teapot_bugcrowd changed the state to to informational	2025-05-02T19:01:28Z
teapot_bugcrowd	teapot_bugcrowd sent a: message	2025-05-02T19:01:27Z
JustAKids	JustAKids created the submission	2025-05-02T17:36:32Z

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

Buy Me A Coffee

Patreon

To keep up to date follow us on the below channels.

Tags: bug bounty, BugCrowd, OSINT

BugCrowd Bug Bounty Disclosure: P5 – Public Exposure of Internal Calibration Planning File on heasarc.gsfc.nasa.gov (XMM-Newton) – JustAKids

Public Exposure of Internal Calibration Planning File on heasarc.gsfc.nasa.gov (XMM-Newton)

Summary

Activity Feed

[AKIRA] – Ransomware Victim: Av Alumitran

[Palo Alto Networks Security Advisories] PAN-SA-2025-0010 Informational Bulletin: No Impact of the Marvin Attack onPAN-OS

[Palo Alto Networks Security Advisories] CVE-2025-0133 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability inGlobalProtect Gateway and Portal

[Palo Alto Networks Security Advisories] CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session ExpirationVulnerability in the Web Interface

[Palo Alto Networks Security Advisories] CVE-2025-0136 PAN-OS: Unencrypted Data Transfer when using AES-128-CCM onIntel-based hardware devices

Summary

Activity Feed

You may have missed

[AKIRA] – Ransomware Victim: Av Alumitran

[Palo Alto Networks Security Advisories] PAN-SA-2025-0010 Informational Bulletin: No Impact of the Marvin Attack onPAN-OS

[Palo Alto Networks Security Advisories] CVE-2025-0133 PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability inGlobalProtect Gateway and Portal

[Palo Alto Networks Security Advisories] CVE-2025-0138 Prisma Cloud Compute Edition: Insufficient Session ExpirationVulnerability in the Web Interface

[Palo Alto Networks Security Advisories] CVE-2025-0136 PAN-OS: Unencrypted Data Transfer when using AES-128-CCM onIntel-based hardware devices