目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1310

100%

漏洞赏金情报

数据来源:HackerOne 公开披露报告 · 每 6 小时更新

浏览 HackerOne 平台公开披露的漏洞赏金报告,按严重程度、漏洞类型或目标项目筛选,关联 CVE 编号。

已披露报告
12,254
关联 CVE
1,865
参与项目数
343
近 7 天新增
7
Stored XSS Using Media
Automattic Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-11-26
Persistent XSS in share button
Infogram Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-11-23
Medium
2017-11-23
Authenticated Cross-site Scripting in Template Name
WordPress Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-11-18
Stored XSS On Wordpress Infogram plugin
Infogram Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-11-15
Medium
2017-11-12
Stored XSS in content when Graph is created via API
Infogram Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-11-07
stored xss in invited team member via email parameter
Shopify Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-11-03
Stored XSS on support.rockstargames.com
Rockstar Games Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-10-30
Medium
2017-10-18
Stored XSS on support.rockstargames.com
Rockstar Games Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-10-10
Medium
2017-09-18
Stored XSS Deleting Menu Links in the Shopify Admin
Shopify Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-09-08
Stored XSS in snapmatic comments
Rockstar Games Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-09-05
Medium
2017-09-05
Stored XSS in profile activity feed messages
Rockstar Games Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-08-28
Stored XSS at Moneybird
Moneybird Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-08-17
Medium
2017-07-27
Stored XSS in *.myshopify.com
Shopify Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2017-06-27
高频漏洞类型
最活跃项目
项目报告数最高赏金
U.S. Dept Of Defense896
Internet Bug Bounty817 $2,257
HackerOne609
Nextcloud584
Shopify464
curl459
Node.js third-party modules307
GitLab258
X / xAI250 $7,000
Uber239