BugCrowd Bug Bounty Disclosure: P5 - Account Takeover via Password Reset Token and Insecure Email Change Handling - David007 - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-account-takeover-via-password-reset-token-and-insecure-email-change-handling/

BugCrowd Bug Bounty Disclosure: P3 - CVE-2025-4388 Reflected XSS in marketplace-app-manager-web. - Renatto - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-cve-2025-4388-reflected-xss-in-marketplace-app-manager-web/

BugCrowd Bug Bounty Disclosure: P2 - HTTP Verb Tampering Leads to Authorization Bypass on /archive/exist/team/ Directory - Mon3m - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-http-verb-tampering-leads-to-authorization-bypass-on-archive-exist-team-directory/

BugCrowd Bug Bounty Disclosure: P5 - Reflected XSS on oceandata.sci.gsfc.nasa.gov - FebriHp - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-reflected-xss-on-oceandata-sci-gsfc-nasa-gov/

BugCrowd Bug Bounty Disclosure: P5 - Confidental Information of NASA found - arjanchaudharyy - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-confidental-information-of-nasa-found/

BugCrowd Bug Bounty Disclosure: P3 - RXSS at `https://skyview.gsfc.nasa.gov/current/cgi/vo/sia.pl` - GxbNt - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-rxss-at-https-skyview-gsfc-nasa-gov-current-cgi-vo-sia-pl/

BugCrowd Bug Bounty Disclosure: P3 - NASA-User Owned PDF Publicly Exposed with Full Edit Rights — Risk of Deletion and PII Disclosure - - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-nasa-user-owned-pdf-publicly-exposed-with-full-edit-rights-risk-of-deletion-and-pii-disclosure/

BugCrowd Bug Bounty Disclosure: P5 - Sensitive NASA Equipment Inventory Disclosed via Public Endpoint on www3.nasa.gov - candykhaba - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-sensitive-nasa-equipment-inventory-disclosed-via-public-endpoint-on-www3-nasa-gov/

BugCrowd Bug Bounty Disclosure: P3 - Exposed NASA/JPL Credentials and Emails via Public Pastebin Leak - JustAKids - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-exposed-nasa-jpl-credentials-and-emails-via-public-pastebin-leak/

BugCrowd Bug Bounty Disclosure: P5 - RXSS On https://www1-2-pz.sewp.nasa.gov/ - asjadbutt - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-rxss-on-https-www1-2-pz-sewp-nasa-gov/

BugCrowd Bug Bounty Disclosure: P5 - Apollo 13 Onboard Voice Transcription for Potential Data Exposure - suyashksawant - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-apollo-13-onboard-voice-transcription-for-potential-data-exposure/

BugCrowd Bug Bounty Disclosure: P2 - Unauthenticated Remote Code Execution (CVE-2025-4428) - Ironsoul74 - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-unauthenticated-remote-code-execution-cve-2025-4428/

BugCrowd Bug Bounty Disclosure: P5 - Host Header Injection on Password-Reset Functionality Causes Unauthorized Redirect to Attacker-Controlled Domain Where a Users Could be Tricked into Entering Account Credentials for Account Takeover or PII Leak - Imshadab18 - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-host-header-injection-on-password-reset-functionality-causes-unauthorized-redirect-to-attacker-controlled-domain-where-a-users-could-be-tricked-into-entering-account-cred/

BugCrowd Bug Bounty Disclosure: P3 - Exposed Python Script with Hardcoded SFTP Credentials, Internal IPs, and Sensitive Data Access - unknown_soldier - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-exposed-python-script-with-hardcoded-sftp-credentials-internal-ips-and-sensitive-data-access/

BugCrowd Bug Bounty Disclosure: P5 - Stored XSS in NASA ASRS Maintenance Form – Payload Executes on Print Page - RootVaibhav - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-stored-xss-in-nasa-asrs-maintenance-form-payload-executes-on-print-page/

BugCrowd Bug Bounty Disclosure: P5 - an confidential pdf regarding technical memorandom - SahilGadhe - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-an-confidential-pdf-regarding-technical-memorandom/

BugCrowd Bug Bounty Disclosure: P5 - EXIF Geolocation Data Not Stripped in NASA CDSCC Image - Exposure of Sensitive Location (Canberra Deep Space Communication Complex) - Faxcel - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-exif-geolocation-data-not-stripped-in-nasa-cdscc-image-exposure-of-sensitive-location-canberra-deep-space-communication-complex/

BugCrowd Bug Bounty Disclosure: P5 - Reflected XSS on esto.nasa.gov allows arbitrary JavaScript execution and redirection - Faxcel - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-reflected-xss-on-esto-nasa-gov-allows-arbitrary-javascript-execution-and-redirection/

BugCrowd Bug Bounty Disclosure: P5 - Improper Access Control: Authenticated Resource Exposed via Wayback Machine Archive- Nasa sheets& docs - RootVaibhav - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-improper-access-control-authenticated-resource-exposed-via-wayback-machine-archive-nasa-sheets-docs/

BugCrowd Bug Bounty Disclosure: P3 - Hardcoded API Key Found in Public NASA GitHub Repository - Uma_Maheshwar_Ayyala - https://www.redpacketsecurity.com/bugcrowd-bugbounty-disclosure-hardcoded-api-key-found-in-public-nasa-github-repository/