Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,224
CVE-linked
1,856
Programs
342
New This Week
5
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
Program filter: ibb✕
Module ngx_http_auth_basic_module is broken and allowing all password after specific length
Internet Bug Bounty Cryptographic Issues - Generic (CWE-310)
Unknown
2016-05-30
Padding oracle in AES-NI CBC MAC check (CVE-2016-2107)
Internet Bug Bounty Cryptographic Issues - Generic (CWE-310)CVE-2016-2107
Unknown
2016-05-19
Null pointer deref (segfault) in stream_context_get_default
Internet Bug Bounty
Unknown
2016-05-17
Integer overflow in ZipArchive::getFrom*
Internet Bug Bounty Memory Corruption - Generic (CWE-119)
Unknown
2016-05-05
ASN.1 BIO excessive memory allocation (CVE-2016-2109)
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)CVE-2016-2109
Unknown
2016-05-03
Potential double free in EVP_DigestInit_ex
Internet Bug Bounty Memory Corruption - Generic (CWE-119)
Unknown
2016-05-03
EBCDIC overread (CVE-2016-2176)
Internet Bug Bounty Memory Corruption - Generic (CWE-119)CVE-2016-2176
Unknown
2016-05-03
EVP_EncryptUpdate overflow (CVE-2016-2106)
Internet Bug Bounty Memory Corruption - Generic (CWE-119)CVE-2016-2106
Unknown
2016-05-03
EVP_EncodeUpdate overflow (CVE-2016-2105)
Internet Bug Bounty Memory Corruption - Generic (CWE-119)CVE-2016-2105
Unknown
2016-05-03
Insufficient shell characters filtering leads to (potentially remote) code execution (CVE-2016-3714)
Internet Bug Bounty CVE-2016-3714
Unknown
2016-05-03
Python 2.7 strop.replace Integer Overflow
Internet Bug Bounty Memory Corruption - Generic (CWE-119)
Unknown
2016-05-02
php_snmp_error() Format String Vulnerability
Internet Bug Bounty Code Injection (CWE-94)
Unknown
2016-05-01
BN_mod_exp may produce incorrect results on x86_64 (CVE-2015-3193)
Internet Bug Bounty Cryptographic Issues - Generic (CWE-310)CVE-2015-3193
Unknown
2016-04-12
Perl 5.22 VDir::MapPathA/W Out-of-bounds Reads and Buffer Over-reads
Internet Bug Bounty Memory Corruption - Generic (CWE-119)
Unknown
2016-03-31
OpenSSL Key Recovery Attack on DH small subgroups (CVE-2016-0701)
Internet Bug Bounty Cryptographic Issues - Generic (CWE-310)CVE-2016-0701
Unknown
2016-03-28
b2i_PVK_bio heap corruption
Internet Bug Bounty Memory Corruption - Generic (CWE-119)
Unknown
2016-03-28
BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption (CVE-2016-0797)
Internet Bug Bounty Memory Corruption - Generic (CWE-119)CVE-2016-0797
Unknown
2016-03-27
CVE-2016-0799 memory issues in BIO_*printf functions
Internet Bug Bounty Memory Corruption - Generic (CWE-119)CVE-2016-0799
Unknown
2016-03-27
Use After Free in sortWithSortKeys()
Internet Bug Bounty Memory Corruption - Generic (CWE-119)
Unknown
2016-01-20
Format string vulnerability in zend_throw_or_error()
Internet Bug Bounty Code Injection (CWE-94)
Unknown
2016-01-10
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud583—
Shopify464—
curl442—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239—