Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,221
CVE-linked
1,854
Programs
342
New This Week
7
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
API docs expose an active token for the sample domain theburritobot.com
Cloudflare Public Bug Bounty Information Disclosure (CWE-200)
High
2022-06-27
Registered users contact information disclosure on salesforce lightning endpoint https://disposal.gsa.gov
U.S. General Services Administration Information Disclosure (CWE-200)
High
2022-06-06
Enumerate class codes via yahoo dork - Can access any course under teacher - Sensitive information leaked
Khan Academy Information Disclosure (CWE-200)
High
2022-05-01
Workspace configuration metadata disclosure
Slack Information Disclosure (CWE-200)
High
2022-04-01
Insecure crossdomain.xml on https://vdc.mtnonline.com/
MTN Group Information Disclosure (CWE-200)
High
2022-03-20
PHP Info Exposing Secrets at https://radio.mtn.bj/info
MTN Group Information Disclosure (CWE-200)
High
2022-03-08
Information disclosure-Referer leak
Brave Software Information Disclosure (CWE-200)
High
2022-02-01
Wrong settings in ADF Faces leads to information disclosure
U.S. Dept Of Defense Information Disclosure (CWE-200)
High
2022-01-19
Просмотр закрытых фотографий
VK.com Information Disclosure (CWE-200)
High
2021-12-15
Recaptcha Secret key Leaked
Paragon Initiative Enterprises Information Disclosure (CWE-200)
High
2021-12-04
Corporate Jira credentials disclosed in public gist
Azbuka Vkusa Information Disclosure (CWE-200)
High
2021-11-15
critical file found etc/passwd on www.reddit.com
Reddit Information Disclosure (CWE-200)
High
2021-10-21
Tor Browser using --log or --verbose logs the exact connection time a client connects to any v2 domains.
Tor Information Disclosure (CWE-200)
High
2021-09-27
Information disclosure
Brave Software Information Disclosure (CWE-200)
High
2021-09-21
Big Picture web browser leaks login cookies and discloses sensitive information (may lead to account takeover)
Valve Information Disclosure (CWE-200)
High
2021-09-21
information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt
MTN Group Information Disclosure (CWE-200)
High
2021-08-20
Leaked JFrog Artifactory username and password exposed on GitHub - https://snapchat.jfrog.io
Snapchat Information Disclosure (CWE-200)
High
2021-08-12
Internal Gitlab Ticket Disclosure via External Slack Channels
HackerOne Information Disclosure (CWE-200)
High
2021-08-04
All private support requests to ███████ are being disclosed at https://███████
U.S. Dept Of Defense Information Disclosure (CWE-200)
High
2021-07-29
Exfiltrating a victim's exact location (to within 5m)
Bumble Information Disclosure (CWE-200)
High
2021-07-21
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud582—
Shopify464—
curl440—
Node.js third-party modules307—
GitLab258 $13,950
X / xAI250 $2,500
Uber239 $9,895