TGViewer
Hackerone Reports Hackerone Reports @hackeronereports · 242 subscribers
Post #923 50
🎯 New Report #3622877: HTTP Request Smuggling via Unsanitized Hop-by-Hop Headers
🔺Severity: High
👽 Reporter: 1nsomnia1102
⭐️ Reputation: 197
🛠 State: resolved
💼 Team: Cloudflare Public Bug Bounty
💵 Bounty: 1500
🕐 Submitted: 2026-03-23
⏰ Disclosed: 2026-09-14 04:57:45
📝 Summary: A vulnerability was found in Pingora that could allow HTTP request smuggling through improper handling of hop-by-hop headers. The issue was fixed in Pingora 0.9.0.
📂 Report JSON File: 3622877
@hackeronereports
More from @hackeronereports
  1. Oct 15, 2026🎯 New Report #3972558: Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB a…
  2. Oct 15, 2026🎯 New Report #3938927: An organization admin can create an attacker-controlled organizati…
  3. Oct 15, 2026🎯 New Report #3770768: [Switch Remote stack buffer overflow in the LDN/LP2P DHCP server l…
  4. Oct 14, 2026🎯 New Report #4071064: Unauthenticated self-registration on ████████ grants full access t…
  5. Oct 14, 2026🎯 New Report #4022462: Uncaught RecursionError crash in translation-finder (deep director…
  6. Oct 14, 2026🎯 New Report #3988961: Stored XSS on the public Pontoon dashboards: the latest-activity t…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →