H1 Disclosed - Public Disclosures (@h1Disclosed) header
H1 Disclosed - Public Disclosures (@h1Disclosed) profile picture

H1 Disclosed - Public Disclosures

@h1Disclosed

User friendly unofficial HackerOne public disclosures, keeps you updated about the recently disclosed bugs. Made With ♥ By Hackers For Hackers. - @rynosec

 127.0.0.1
ryno.sh
Joined September 2022
  • Tweets2.7K
  • Following2
  • Followers10.2K
2.4KMedia
Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)Photo by H1 Disclosed - Public Disclosures (@h1Disclosed)
H1 Disclosed - Public Disclosures retweeted
ROHIT (@rynosec) profile picture
ROHIT@rynosecJul 4
⚡ heap-use-after-free in curl_easy_cleanup() called from callback 👨🏻‍💻 carehi1324 ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/383357… #bugbounty #bugbountytips #cybersecurity #infosec
Image from ROHIT (@rynosec)
3
10
1,111
H1 Disclosed - Public Disclosures retweeted
ROHIT (@rynosec) profile picture
ROHIT@rynosecJul 4
⚡ Improper Input Validation — HTTP Response Parser Unconditionally Accepts Bare CR in Status Line 👨🏻‍💻 saif-01 ➟ Node.js 🟧 Medium 💰 None 🔗 hackerone.com/reports/364868… #bugbounty #bugbountytips #cybersecurity #infosec
Image from ROHIT (@rynosec)
3
14
991
H1 Disclosed - Public Disclosures retweeted
ROHIT (@rynosec) profile picture
ROHIT@rynosecJul 3
Since X moved to a pay-per-use API model, I'm building a custom workaround to keep @h1disclosed running I was tempted to hand this task to my Hermes agent, but honestly half the fun of these side projects is building them yourself. 🤖 Almost Done !! #bugbounty #cybersecurity
Image from ROHIT (@rynosec)
2
1
1
8
2,280
H1 Disclosed - Public Disclosures retweeted
ROHIT (@rynosec) profile picture
ROHIT@rynosecJun 20
Rewav📻: 24 hours of nostalgia. That's it. Listen here: radio.ryno.sh #radio
Image from ROHIT (@rynosec)
Abhishek ✨ (@ImAbhishek7_) profile pictureAbhishek ✨
@ImAbhishek7_Jun 19
Reason why FM Radio stations are shutting down
1
3
742
We are back 🦾 #bugbounty #bugbountytips #cybersecurity
ROHIT (@rynosec) profile pictureROHIT@rynosecJul 3
Since X moved to a pay-per-use API model, I'm building a custom workaround to keep @h1disclosed running I was tempted to hand this task to my Hermes agent, but honestly half the fun of these side projects is building them yourself. 🤖 Almost Done !! #bugbounty #cybersecurity
Image from ROHIT (@rynosec)
2
5
2,030
⚡ Connection reuse ignores haproxyprotocol and HAPROXY_CLIENT_IP settings, allowing PROXY context t... 👨🏻‍💻 7omoo ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/374113… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
774
⚡ Schannel custom-CA path skips Extended Key Usage enforcement 👨🏻‍💻 giant_anteater ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373499… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
3
750
⚡ HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiB 👨🏻‍💻 giant_anteater ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373494… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
565
⚡ Cross-repository IDOR in `/settings/security_analysis/bypass_reviewers` allows unauthorized deleg... 👨🏻‍💻 @ahacker1_h1 ➟ GitHub 🟧 Medium 💰 None 🔗 hackerone.com/reports/356025… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
19
1,115
⚡ HSTS multi-trailing-dot bypass-ish: possible incomplete fix for CVE-2022-30115 👨🏻‍💻 giant_anteater ➟ curl 🟧 Medium 💰 None 🔗 hackerone.com/reports/373398… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
1
511
⚡ rustls backend silently ignores CURLOPT_CRLFILE when native CA store is active 👨🏻‍💻 giant_anteater ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373493… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
2
494
⚡ libssh SFTP initialization ignores CURLOPT_TIMEOUT, hangs indefinitely 👨🏻‍💻 giant_anteater ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373508… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
2
5
640
⚡ cookie: case-insensitive path comparison in replace_existing() allows cookie eviction across dist... 👨🏻‍💻 giant_anteater ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373523… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
340
⚡ CURLOPT_HSTS_CTRL disables shared HSTS without share guard — use-after-free and double-free 👨🏻‍💻 giant_anteater ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373393… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
2
2
345
⚡ Unauthenticated File Upload to CDN 👨🏻‍💻 @ph0r3nsic ➟ Enjin 🟧 Medium 💰 None 🔗 hackerone.com/reports/358924… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
2
35
2,377
⚡ IDOR: autotranslate.translateMessage Full Message Content Leak 👨🏻‍💻 josan_george ➟ Rocket.Chat 🟧 Medium 💰 None 🔗 hackerone.com/reports/371368… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
20
1,813
⚡ NULL pointer dereference in libcurl URL API redirect_url() with CURLU_DEFAULT_SCHEME 👨🏻‍💻 mulan_dh ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373623… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
460
⚡ Trailing-dot IPv4 URL bypasses IP-address guard, allows wildcard DNS SAN match 👨🏻‍💻 giant_anteater ➟ curl ⬜ None 💰 None 🔗 hackerone.com/reports/373492… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
2
4
712
⚡ SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution 👨🏻‍💻 suul ➟ Nextcloud 🟥 High 💰 None 🔗 hackerone.com/reports/346299… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
451
⚡ Origin IP Exposed waf bypass 👨🏻‍💻 @r00tSid ➟ Yuga Labs 🟨 Low 💰 $250 🔗 hackerone.com/reports/182108… #bugbounty #bugbountytips #cybersecurity #infosec
Image from H1 Disclosed - Public Disclosures (@h1Disclosed)
1
1
7
600
Load more