Eternal · disclosed reports
Information Disclosure
8 disclosed reports · $1,550 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Eternal on HackerOne- reports
- 8
- paid a bounty
- 3
Every one of the 8 is a mark on the map. Named now: 1 to 8, most upvoted first.
- Information Disclosure through Sentry Instance ███████
- Base alpha version code exposure
- credentials leakage in public lead to view dev websites
- Instagram OAuth2 Implementation Leaks Access Token; Allows for Cross-Site Script Inclusion (XSSI)
- Phishing user to download malicious app could lead to leakage of User Access Token, Email, Name and Profile photo via exported RemoteService
- User Profiles Leak PII in HTML Document for Mobile Browser User Agents
- Visibility Robots.txt file
- Subdomain Takeover
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.