The Race Condition That Paid Its Own Bounty
Medium2026-10-30
Web
Not rated
BUG BOUNTY WRITEUPS
Race conditions writeups
Sending requests at the same moment to break limits: redeeming a code twice, beating rate limits, double spending.
42 reports and writeups from 2024 to 2026. 23 carry a severity from the disclosing platform, 5 of them rated High or Critical. Last updated 2026-10-30.
Latest Race conditions reports
Search and filter all writeupsKeep-alive socket process a response that was written before the request was sent
HackerOneNode.js2026-10-23
Web
Medium
CVE-2026-87863: HSTS response erases persisted entries
HackerOnecurl2026-10-14
Web
Not rated
node:sqlite SQLTagStore Iterator Replay Lets Attacker Re-Execute Victim-Bound Writes Indefinitely
HackerOneNode.js2026-08-28
Web
Medium
curl_share TOCTOU > RCE via Curl_llist _dtor Function Pointer Hijack
HackerOnecurl2026-08-26
Web
Critical
libcurl cache updates follow symlinks and truncate their targets
HackerOnecurl2026-08-14
Web
Low
Exceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation process
HackerOneSingleStore2026-07-01
Web
Low
HTTP Response Queue Poisoning via TOCTOU Race Condition in `http.Agent`
HackerOneNode.js2026-06-25
Web
Low
Memory Corruption via TOCTOU Race in SharedArrayBuffer UTF-8 Decode (`StringBytes::Encode`)
HackerOneNode.js2026-05-23
Binary
High
curl --skip-existing has a TOCTOU race that lets a post-check symlink redirect the later download write
HackerOnecurl2026-05-20
Web
Medium
Data race in Curl_dnscache_add_negative() corrupts shared DNS cache — heap corruption and double-free when using CURLOPT_SHARE with CURL_LOCK_DATA_DNS
HackerOnecurl2026-04-04
Binary
Medium
Use-After-Free race condition in url_move_hostname() via shared connection pool
HackerOnecurl2026-03-31
Binary
Medium
Timeout-based race conditions make Uint8Array/Buffer.alloc non-zerofilled
HackerOneNode.js2026-02-12
Web
High
[SFTP] TOCTOU Race Condition in Upload Resume Logic Leads to Arbitrary File Append
HackerOnecurl2025-11-24
Web
Medium
Exceeding the limit of Workspaces via Race Condition
HackerOneSingleStore2025-10-06
Web
Medium
Race condition on global `gss_context` during SOCKS5 GSS-API negotiation in libcurl
HackerOnecurl2025-09-26
Web, API
Medium
TOCTOU Race Condition in HTTP/2 Connection Reuse Leads to Certificate Validation Bypass
HackerOnecurl2025-09-11
Web
High
Email Verification Bypass via Race Condition
HackerOneMalwarebytes2025-08-15
Web
Not rated
Exceed the maximum number of subscribers using Race Condition
HackerOneSingleStore2025-08-12
Web
Low
Not a Vuln: Race Condition Allows Creation of Multiple Organizations with the Same Name
HackerOneWakaTime2025-07-14
Web
Not rated
MozillaVPN: Elevation of Privilege via a Race Condition Vulnerability
HackerOneMozilla2025-07-03
Web
Medium
Race condition on add 1 free domain
HackerOneAutomattic2025-05-09
Web
Medium
Race Condition in Folder Creation Allows Bypassing Folder Limit
HackerOneDust2025-04-29
Web
Medium
CVE-2025-0665: eventfd double close
HackerOnecurl2025-02-07
Web
Low
Bypassing HackerOne 2FA due to race condition
HackerOneHackerOne2024-10-30
Web
Medium
Race condition leads to add more than 5 email at Data breaches monitor system at https://stage.firefoxmonitor.nonprod.cloudops.mozgcp.net
HackerOneMozilla2024-10-18
Web, Cloud
Low
Race Condition on Create API Function
HackerOneEnjin2024-10-15
Web, API
Not rated
ArtiPACKED: Hacking Giants Through a Race Condition in GitHub Actions Artifacts
Researcher blogGitHub, Google (Firebase), Microsoft2024-08-13
Web, Source Code
Not rated
Race Condition About The User Version and Ignored
Medium2024-08-06
Web
Not rated
Beyond the Limit: Expanding single-packet race condition with a first sequence sync for breaking the 65,535 byte limit
Researcher blog2024-08-02
Web
Not rated
Firmware Security: Alcatel-Lucent ALE-DeskPhone
Researcher blogAlcatel-Lucent2024-07-12
Binary
Not rated
A Race to the Bottom - Database Transactions Undermining Your AppSec
Researcher blog2024-07-11
Web
Not rated
You Can’t Always Win Racing the (Key)cloak
Researcher blogKeycloak2024-07-01
Web
Not rated
regreSSHion: Remote Unauthenticated Code Execution Vulnerability in OpenSSH server
Researcher blogOpenSSH2024-07-01
Web
Not rated
How i Almost got 2K$ through a Race condition
Medium2024-04-12
Web
Not rated
Why you shouldn't use a commercial VPN: Amateur hour with Windscribe
Researcher blogWindscribe2024-04-12
Web
Not rated
The Fast and the Curious: Finding a Race Condition in Worldcoin
MediumTools for Humanity (Worldcoin)2024-04-08$3,000 bounty
Web3
Not rated
Web
Not rated
Race Condition Enables Bypassing Verification Check
HackerOneTools for Humanity2024-04-04$3,000 bounty
Web
High
500$: MFA bypass By Race Condition
Medium2024-01-28$500 bounty
Web
Not rated
1 Program, 4 Business Logic Bugs and Cashing in 2300$.
InfoSec Write-ups2024-01-17$2,300 bounty
Web
Not rated
Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation Vulnerability (CVE-2023-6546)
GitHub2024-01-16
Linux, Binary
Not rated
Every entry links to the original report or article. Secure Hyperloop doesn't copy the content. Severity comes from the disclosing platform (HackerOne). Writeups without a platform rating show "Not rated". The index has 2,810 items in total.