Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:cyph3r_nitroLink to Submitters Profile:https://hackerone.com/cyph3r_nitro Report Title:Vulnerability Report: Public Exposure of Security Audit...
Account Takeover via Password Reset Token and Insecure Email Change Handling Account Takeover via Password Reset Token and Insecure Email...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:ejejohnLink to Submitters Profile:https://hackerone.com/ejejohn Report Title:Security check upReport Link:https://hackerone.com/reports/3269761Date Submitted:24 July 2025...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:catenacyberLink to Submitters Profile:https://hackerone.com/catenacyber Report Title:Use after free (or assert triggered) with...
Company Name: GitLab Company HackerOne URL: https://hackerone.com/gitlab Submitted By:timothyleungLink to Submitters Profile:https://hackerone.com/timothyleung Report Title:Mint Oauth2 access token for targeted userReport...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:nyymiLink to Submitters Profile:https://hackerone.com/nyymi Report Title:GnuTLS CURLINFO_TLS_SESSION / CURLINFO_TLS_SSL_PTR type confusionReport Link:https://hackerone.com/reports/3261248Date...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:lyb_unaffiliatedLink to Submitters Profile:https://hackerone.com/lyb_unaffiliated Report Title:on the implications of permitting procedural cullingReport...
Company Name: AWS VDP Company HackerOne URL: https://hackerone.com/aws_vdp Submitted By:muhammad_kasimLink to Submitters Profile:https://hackerone.com/muhammad_kasim Report Title:XSS on Amazon Aquisition: elementalReport Link:https://hackerone.com/reports/3205667Date...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:cmeister2Link to Submitters Profile:https://hackerone.com/cmeister2 Report Title:curl ASSERTs when accessing an LDAP URLReport...
CVE-2025-4388 Reflected XSS in marketplace-app-manager-web. CVE-2025-4388 Reflected XSS in marketplace-app-manager-web. Researcher: Renatto Engagement: National Aeronautics and Space Administration (NASA) -...
HTTP Verb Tampering Leads to Authorization Bypass on /archive/exist/team/ Directory HTTP Verb Tampering Leads to Authorization Bypass on /archive/exist/team/ Directory...
Company Name: 1Password - Enterprise Password Manager Company HackerOne URL: https://hackerone.com/1password Submitted By:sudosu001Link to Submitters Profile:https://hackerone.com/sudosu001 Report Title:API Key Exposed...
Company Name: MainWP Company HackerOne URL: https://hackerone.com/mainwp Submitted By:rishail01Link to Submitters Profile:https://hackerone.com/rishail01 Report Title:Reflected XSS in "Create Category" Functionality of...
Company Name: MainWP Company HackerOne URL: https://hackerone.com/mainwp Submitted By:rishail01Link to Submitters Profile:https://hackerone.com/rishail01 Report Title:Stored Cross-Site Scripting (XSS) in "Add Contact"...
Company Name: MainWP Company HackerOne URL: https://hackerone.com/mainwp Submitted By:rishail01Link to Submitters Profile:https://hackerone.com/rishail01 Report Title:Reflected XSS in "Cost Tracker" Notes FieldReport...
Company Name: HackerOne Company HackerOne URL: https://hackerone.com/security Submitted By:boy_child_Link to Submitters Profile:https://hackerone.com/boy_child_ Report Title:Account takeover of existing HackerOne accounts through...
Company Name: MainWP Company HackerOne URL: https://hackerone.com/mainwp Submitted By:rishail01Link to Submitters Profile:https://hackerone.com/rishail01 Report Title:Reflected XSS in "Manage Tags" Notes FieldReport...
Company Name: Weblate Company HackerOne URL: https://hackerone.com/weblate Submitted By:micael1Link to Submitters Profile:https://hackerone.com/micael1 Report Title:exposure of personal IP address via emailReport...
Reflected XSS on oceandata.sci.gsfc.nasa.gov Reflected XSS on oceandata.sci.gsfc.nasa.gov Researcher: FebriHp Engagement: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:brobagazzzxLink to Submitters Profile:https://hackerone.com/brobagazzzx Report Title:Use-After-Free in OpenSSL Keylog Callback via SSL_get_ex_data()...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:mr_tufanLink to Submitters Profile:https://hackerone.com/mr_tufan Report Title:Arbitrary File Read via file:// Protocol in...
Company Name: Lichess Company HackerOne URL: https://hackerone.com/lichess Submitted By:psfauziLink to Submitters Profile:https://hackerone.com/psfauzi Report Title:CSRF at Network featureReport Link:https://hackerone.com/reports/3230359Date Submitted:08 July...
Company Name: IBM Company HackerOne URL: https://hackerone.com/ibm Submitted By:devireLink to Submitters Profile:https://hackerone.com/devire Report Title:Information disclosure identified on IBM endpoint Report...
Company Name: curl Company HackerOne URL: https://hackerone.com/curl Submitted By:voggerloopsLink to Submitters Profile:https://hackerone.com/voggerloops Report Title:Authorization Header Leak via --location-trusted in CurlReport...
