U.S. Dept Of Defense · disclosed reports
Information Disclosure
146 disclosed reports · $500 paid · 139 valid · 3 informative · 2 duplicate · 2 not checked yet
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. A report opens its page here: our analysis where there is one, and the link to HackerOne. The status is HackerOne's own outcome; "access needed" is only what a title states.
Open U.S. Dept Of Defense on HackerOne- reports
- 146
- valid
- 139
- paid a bounty
- 1
Every one of the 146 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Public google drive link Exposes Military Orders Containing PII (Name, SSN etc..) and Operational Details
- Lack of rate limiting in https://███/PKI/PassReset.aspx leads to PII disclosure and potential account takeover
- [███████] Information disclosure due unauthenticated access to APIs and system browser functions
- Sensitive data exposure via /secure/███████ endpoint on ████████
- Local File Disclosure on the █████ (https://████████.edu/) leads to the full source code disclosure and credentials leak
- Information disclousure by clicking on the link shown in http://████████/
- Local File Inclusion vulnerability on an Army system allows downloading local files
- Pull Any Automated Record Brief
- [HTAF4-213] [Pre-submission] HTTPOnly session cookie exposure on the /csstest endpoint
- Gateway information leakage
- Leaked DB credentials on https://██████████.mil/███
- Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████
- Critical sensitive information Disclosure. [HtUS]
- Course Registration Form Allowing an attacker to dump all the candidate name who had enrolled for the course
- SSRF+XSS
- Splunk Sensitive Information Disclosure @████████
- Information Disclosure in API Endpoint /users
- Information Disclosure
- DoD internal documents are leaked to the public
- Trace.axd page leaks sensitive information
- ██████ SSN/EDPI
- Sensitive information disclosure [HtUS]
- SSRF on █████████ Allowing internal server data access
- [Partial] SSN & [PII] exposed through iPERMs Presentation Slide.
- Full Access to sonarQube and Docker
- critical information disclosure
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP