Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,219
CVE-linked
1,854
Programs
342
New This Week
10
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
CVE-2017-8779 exploit on open rpcbind port could lead to remote DoS
Endless Group Uncontrolled Resource Consumption (CWE-400)CVE-2017-8779
Medium
2020-02-12
Nginx version is disclosed in HTTP response
Localize Uncontrolled Resource Consumption (CWE-400)CVE-2019-9511CVE-2019-9513CVE-2019-9516
None
2020-02-06
Denial Of Service in Strapi Framework using argument injection
Node.js third-party modules Uncontrolled Resource Consumption (CWE-400)CVE-2020-8123
Low
2020-01-28
Http response is not ended although underlying socket is already destroyed
Node.js Uncontrolled Resource Consumption (CWE-400)
Unknown
2020-01-15
xmlrpc.php FILE IS enable it can be used for conducting a Bruteforce attack and Denial of Service(DoS)
Ian Dunn Uncontrolled Resource Consumption (CWE-400)
None
2020-01-07
xmlrpc.php FILE IS enable it will used for Bruteforce attack and Denial of Service(DoS)
Nord Security Uncontrolled Resource Consumption (CWE-400)
Medium
2020-01-06
Bypass password reset rate limit protection at moneybird.com/passwords
Moneybird Uncontrolled Resource Consumption (CWE-400)
High
2019-12-22
Uncontrolled Resource Consumption in any Markdown field using Mermaid
GitLab Uncontrolled Resource Consumption (CWE-400)CVE-2019-15584CVE-2019-9220
Medium
2019-12-20
ActiveStorage throws exception when using whitespace as filename, may lead to denial of service of multiple pages
HackerOne Uncontrolled Resource Consumption (CWE-400)
Medium
2019-12-13
`rgb2hex` is vulnerable to ReDoS when parsing crafted invalid colors
Node.js third-party modules Uncontrolled Resource Consumption (CWE-400)
Medium
2019-12-13
Lodash "difference" (possibly others) Function Denial of Service Through Unvalidated Input
Node.js third-party modules Uncontrolled Resource Consumption (CWE-400)
Critical
2019-12-04
DoS attack via comment on Issue
GitLab Uncontrolled Resource Consumption (CWE-400)CVE-2019-15593
Low
2019-11-21
WEBrick::HTTPAuth::DigestAuth authentication is vulnerable to regular expression denial of service (ReDoS)
Ruby Uncontrolled Resource Consumption (CWE-400)
Low
2019-11-15
Exim handles BDAT data incorrectly and leads to crash/hang
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)CVE-2017-16944CVE-2017-16943
High
2019-11-12
PHP-FPM fpm_log.c memory leak and buffer overflow
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)
Unknown
2019-11-12
NULL Pointer Dereference at _gdScaleVert
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)
Unknown
2019-11-12
Potential infinite loop in gdImageCreateFromGifCtx!
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)CVE-2018-5711
High
2019-11-12
Assertion `len == 1' failed, process aborted while streaming ouput from remote server
PuTTY (European Commission - DIGIT) Uncontrolled Resource Consumption (CWE-400)
Medium
2019-11-03
Enable 2FA without verifying the email
Moneybird Uncontrolled Resource Consumption (CWE-400)
Medium
2019-10-25
DoS on PayPal via web cache poisoning
PayPal Uncontrolled Resource Consumption (CWE-400)
Medium
2019-10-23
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud582—
Shopify464—
curl439—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239 $9,895