TGViewer
Hackerone Reports Hackerone Reports @hackeronereports · 241 subscribers
Post #979 19
🎯 New Report #3189580: Password Reset Allows Reusing Old Password -- [AUTH-3820](https://hackerone.com/reports/3189580)
🔺Severity: None
👽 Reporter: ka reem2004
⭐️ Reputation: 46
🛠 State: resolved
💼 Team: Remitly
💵 Bounty: null
🕐 Submitted: 2025-06-12
⏰ Disclosed: 2026-10-12 18:34:54
📝 Summary: A password reset functionality was identified that accepted the user's current password as the new password without validation. The system did not reject or warn against reusing the same password during the reset process.
📂 Report JSON File: 3189580
@hackeronereports
More from @hackeronereports
  1. Oct 12, 2026🎯 New Report #3910393: Stack Buffer Overflow in MariaDB CONNECT storage engine when readi…
  2. Oct 12, 2026🎯 New Report #3662095: SQL Injection found on ibm.com subdomain 🔺Severity: Critical 👽 R…
  3. Oct 12, 2026🎯 New Report #3872248: Connector/C : heap out-of-bounds read when malicious server field…
  4. Oct 12, 2026🎯 New Report #3871977: Connector/ODBC: malicious server's long version string wraps size…
  5. Oct 12, 2026🎯 New Report #3871740: r2dbc-mariadb Parsec auth: server-controlled PBKDF2 iteration coun…
  6. Oct 12, 2026🎯 New Report #3801107: Unauthenticated disclosure of private and hidden forum content in…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →