Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:exploitguru101Link to Submitters Profile:https://hackerone.com/exploitguru101 Report Title:Logical Flaw in curl_url_set Leads to Inconsistent...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:geeknikLink to Submitters Profile:https://hackerone.com/geeknik Report Title:curls persistence files inherit world-readable/writable perms from...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:max_from_secmateLink to Submitters Profile:https://hackerone.com/max_from_secmate Report Title:libcurl MQTT PUBLISH length overflow (heap overflow)Report...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:tjbecker_theoriLink to Submitters Profile:https://hackerone.com/tjbecker_theori Report Title:Memory leak in Curl_auth_create_ntlm_type3_messageReport Link:https://hackerone.com/reports/3393539Date Submitted:28 October...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:sippysirLink to Submitters Profile:https://hackerone.com/sippysir Report Title:CURLX_SET_BINMODE(NULL) can call fileno(NULL) and cause undefined...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:nyymiLink to Submitters Profile:https://hackerone.com/nyymi Report Title:Cookie exposure due to unexpected file permission...
Company Name: Revive Adserver Company HackerOne URL: https://hackerone.com/revive_adserver Submitted By:kanon4Link to Submitters Profile:https://hackerone.com/kanon4 Report Title:Error-Based & Time-Based SQL Injection in...
Company Name: Revive Adserver Company HackerOne URL: https://hackerone.com/revive_adserver Submitted By:env_bakLink to Submitters Profile:https://hackerone.com/env_bak Report Title:Reflected Cross-Site Scripting (XSS) in Revive...
Company Name: SingleStore Company HackerOne URL: https://hackerone.com/singlestore Submitted By:axolot23Link to Submitters Profile:https://hackerone.com/axolot23 Report Title:2FA bypass possible on hXXps://authsvcsinglestorecomReport Link:https://hackerone.com/reports/3329361Date Submitted:22...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:aybandaLink to Submitters Profile:https://hackerone.com/aybanda Report Title:Buffer Overflow in WebSocket Handshake (lib/wsc:1287)Report Link:https://hackerone.com/reports/3392174Date...
Company Name: PlayStation Company HackerOne URL: https://hackerone.com/playstation Submitted By:theflow0Link to Submitters Profile:https://hackerone.com/theflow0 Report Title:Blu-ray Disc Java Sandbox Escape via two...
Company Name: Discourse Company HackerOne URL: https://hackerone.com/discourse Submitted By:theteatoastLink to Submitters Profile:https://hackerone.com/theteatoast Report Title:Application Level DoS - Large Markdown Payload...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:spolu-dustLink to Submitters Profile:https://hackerone.com/spolu-dust Report Title:SMTP Command Injection Vulnerability in libcurl 8160...
Company Name: Nextcloud Company HackerOne URL: https://hackerone.com/nextcloud Submitted By:darooLink to Submitters Profile:https://hackerone.com/daroo Report Title:Path Traversal Vulnerability in Nextcloud Tables Enables...
internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov) internal IP Disclosure via Public DNS Record (blue.guest.hq.nasa.gov) Researcher: Theekshana_kusal Engagement: National...
open redirect vulnerability occurring at https://keycloak.shared-services.staging.appdat.jsc.nasa.gov/ open redirect vulnerability occurring at https://keycloak.shared-services.staging.appdat.jsc.nasa.gov/ Researcher: uko3211 Engagement: National Aeronautics and Space Administration...
Publicly editable Google Slides linked from nasa.gov enables unauthorized content modification (content integrity & brand abuse risk Publicly editable Google...
Sensitive NASA Jira & Employee Data Exposure via Public JSFiddle Sensitive NASA Jira & Employee Data Exposure via Public JSFiddle...
Directory Listing Vulnerability Directory Listing Vulnerability Researcher: Vinit06 Engagement: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program Disclosed...
Company Name: Brave Software Company HackerOne URL: https://hackerone.com/brave Submitted By:mingijungLink to Submitters Profile:https://hackerone.com/mingijung Report Title:SameSite restrictions are lifted, and SameSite:Strict...
Company Name: Dynatrace Company HackerOne URL: https://hackerone.com/dynatrace Submitted By:remiecLink to Submitters Profile:https://hackerone.com/remiec Report Title:OneAgent Unprivileged NTLM User CoercionReport Link:https://hackerone.com/reports/3313408Date Submitted:15...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:nyymiLink to Submitters Profile:https://hackerone.com/nyymi Report Title:Missing enforcement of SFTP quote syntax can...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:giant_anteaterLink to Submitters Profile:https://hackerone.com/giant_anteater Report Title:Apple SecTrust legacy path accepts untrusted certificates...
Company Name: PortSwigger Web Security Company HackerOne URL: https://hackerone.com/portswigger Submitted By:farmerLink to Submitters Profile:https://hackerone.com/farmer Report Title:DNS Rebinding SSRF in Burp...
