Company Name: Lichess Company HackerOne URL: https://hackerone.com/lichess Submitted By:oblivionsageLink to Submitters Profile:https://hackerone.com/oblivionsage Report Title:ImageId Format Injection in Image Upload EndpointReport...
Company Name: hostinger Company HackerOne URL: https://hackerone.com/hostinger Submitted By:aziz0x48Link to Submitters Profile:https://hackerone.com/aziz0x48 Report Title:1 Click Account Takeover via Auth Token...
Exposed NASA/JPL Credentials and Emails via Public Pastebin Leak Exposed NASA/JPL Credentials and Emails via Public Pastebin Leak Researcher: JustAKids...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:z2_Link to Submitters Profile:https://hackerone.com/z2_ Report Title:CVE-2025-5399: WebSocket endless loopReport Link:https://hackerone.com/reports/3168039Date Submitted:04 June...
Company Name: Insightly Company HackerOne URL: https://hackerone.com/insightly Submitted By:basant0x01Link to Submitters Profile:https://hackerone.com/basant0x01 Report Title:returnUrl= allow attacker to redirect users to...
Company Name: Mozilla Company HackerOne URL: https://hackerone.com/mozilla Submitted By:z3phyrusLink to Submitters Profile:https://hackerone.com/z3phyrus Report Title:IDOR: Account Deletion via Session Misbinding Attacker...
Company Name: Lichess Company HackerOne URL: https://hackerone.com/lichess Submitted By:oblivionsageLink to Submitters Profile:https://hackerone.com/oblivionsage Report Title:Server-Side Request Forgery (SSRF) via Game Export...
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:w2wLink to Submitters Profile:https://hackerone.com/w2w Report Title:Public GitHub repositories for multiple HackerOne managed...
RXSS On https://www1-2-pz.sewp.nasa.gov/ RXSS On https://www1-2-pz.sewp.nasa.gov/ Researcher: asjadbutt Engagement: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program Disclosed...
Apollo 13 Onboard Voice Transcription for Potential Data Exposure Apollo 13 Onboard Voice Transcription for Potential Data Exposure Researcher: suyashksawant...
Company Name: 8x8 Bounty Company HackerOne URL: https://hackerone.com/8x8-bounty Submitted By:kauenavarroLink to Submitters Profile:https://hackerone.com/kauenavarro Report Title:Information Disclosure of metrics faxwavecellcom/metricsReport Link:https://hackerone.com/reports/1365076Date...
Company Name: Omise Company HackerOne URL: https://hackerone.com/omise Submitted By:vulnerability_is_hereLink to Submitters Profile:https://hackerone.com/vulnerability_is_here Report Title:Facebook Username Takeover via Broken Link in...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:saurabhbLink to Submitters Profile:https://hackerone.com/saurabhb Report Title:Apache Airflow Fab Provider: Application...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Non-Production API Endpoints for the Global...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Non-Production API Endpoints for the Health...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Amazon Pinpoint SMS and Voice, version...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Non-Production API Endpoint for the EventBridge...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Amazon Kendra Intelligent Ranking Service Reporting...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:kurohiroLink to Submitters Profile:https://hackerone.com/kurohiro Report Title:CVE-2025-4947: QUIC certificate check skip with wolfSSLReport...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Non-Production API Endpoints for the bedrock-agent...
Company Name: Fastify Company HackerOne URL: https://hackerone.com/fastify Submitted By:oblivionsageLink to Submitters Profile:https://hackerone.com/oblivionsage Report Title:Remote Code Execution via unsafe usage of...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:kurohiroLink to Submitters Profile:https://hackerone.com/kurohiro Report Title:CVE-2025-5025: No QUIC certificate pinning with wolfSSLReport...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:nick_frichette_ddLink to Submitters Profile:https://hackerone.com/nick_frichette_dd Report Title:Non-Production API Endpoints for the bedrock...
Company Name: Internet Bug Bounty Company HackerOne URL: https://hackerone.com/ibb Submitted By:nxczjeLink to Submitters Profile:https://hackerone.com/nxczje Report Title:Apache Airflow Sql injection by...
