Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,219
CVE-linked
1,854
Programs
342
New This Week
9
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
CVE-2024-2398: HTTP/2 push headers memory-leak
curl Uncontrolled Resource Consumption (CWE-400)CVE-2024-2398
Medium
2024-03-27
Denial of Service by resource exhaustion in fetch() brotli decoding
Node.js Uncontrolled Resource Consumption (CWE-400)CVE-2024-22025
Medium
2024-03-16
DoS in bigdecimal's sqrt function due to miscalculation of loop iterations
Ruby Uncontrolled Resource Consumption (CWE-400)
Medium
2023-12-20
CVE-2023-46695: Potential denial of service vulnerability in UsernameField on Windows
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)CVE-2023-46695
Medium
2023-11-29
Inviting excessive long email addresses to a calendar event makes the server unresponsive
Nextcloud Uncontrolled Resource Consumption (CWE-400)CVE-2023-45150
Medium
2023-10-16
Missing Function Level Access Control in Mozilla formula containsRegular Expression Denial of Service (CVE-2023-25166)
Mozilla Uncontrolled Resource Consumption (CWE-400)CVE-2023-25166
Medium
2023-09-27
Dos in Form Submission at https://nextcloud.com/instant-trial/
Nextcloud Uncontrolled Resource Consumption (CWE-400)
Medium
2023-09-26
node.js process aborts when processing x509 certs with invalid public key information
Node.js Uncontrolled Resource Consumption (CWE-400)CVE-2023-30588
Medium
2023-07-20
Possible DOS in app with crashing `exceptions_app`
Ruby on Rails Uncontrolled Resource Consumption (CWE-400)
Medium
2023-06-28
Maliciously crafted message can cause Rocket.Chat server to stop responding
Rocket.Chat Uncontrolled Resource Consumption (CWE-400)CVE-2023-28356
Medium
2023-05-09
Reference fetch can saturate the server bandwidth for 10 seconds
Nextcloud Uncontrolled Resource Consumption (CWE-400)CVE-2023-28644
Medium
2023-04-29
CVE-2023-28755: ReDoS vulnerability in URI
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)CVE-2023-28755
Medium
2023-04-26
Potential DoS vulnerability in Django in multipart parser
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)CVE-2023-24580
Medium
2023-03-20
JSON RPC methods for debugging enabled by default allow DoS
Rootstock Labs Uncontrolled Resource Consumption (CWE-400)
Medium
2023-02-27
DoS via markdown API from unauthenticated user
GitHub Uncontrolled Resource Consumption (CWE-400)CVE-2022-39209
Medium
2022-12-13
potential denial of service attack via the locale parameter
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)CVE-2022-41323
Medium
2022-11-28
Database resource exhaustion for logged-in users via sharee recommendations with circles
Nextcloud Uncontrolled Resource Consumption (CWE-400)CVE-2022-39330
Medium
2022-11-26
DoS via Playbook
Mattermost Uncontrolled Resource Consumption (CWE-400)CVE-2022-4019
Medium
2022-11-23
DoS via Automatic Response Message
Mattermost Uncontrolled Resource Consumption (CWE-400)CVE-2022-4044
Medium
2022-11-23
DOS via move_issue
GitLab Uncontrolled Resource Consumption (CWE-400)
Medium
2022-11-04
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud582—
Shopify464—
curl439—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239 $9,895