Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,262
CVE-linked
1,866
Programs
343
New This Week
0
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 658 Improper Authentication - Generic 654 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
Program filter: ibb✕
Python vulnerability: reading arbitrary process memory
Internet Bug Bounty CVE-2014-4616
Unknown
2014-06-20
Flash Sandbox Bypass
Internet Bug Bounty Information Disclosure (CWE-200)CVE-2014-0535
Unknown
2014-06-19
Uncontrolled Resource Consumption with XMPP-Layer Compression
Internet Bug Bounty Uncontrolled Resource Consumption (CWE-400)
Unknown
2014-04-20
Flash local-with-fileaccess Sandbox Bypass
Internet Bug Bounty Information Disclosure (CWE-200)CVE-2014-0508
Unknown
2014-04-17
Security bypass could lead to information disclosure
Internet Bug Bounty
Unknown
2014-04-08
TLS heartbeat read overrun
Internet Bug Bounty CVE-2014-0160
Unknown
2014-04-07
Integer overflow in strop.expandtabs
Internet Bug Bounty
Unknown
2014-03-31
SPDY heap buffer overflow
Internet Bug Bounty CVE-2014-0133
Unknown
2014-03-24
SPDY memory corruption
Internet Bug Bounty CVE-2014-0088
Unknown
2014-03-24
Same Origin Security Bypass Vulnerability
Internet Bug Bounty CVE-2014-0503
Unknown
2014-03-11
TLS Triple Handshake Attack
Internet Bug Bounty
Unknown
2014-03-03
Flash double free vulnerability leads to code execution
Internet Bug Bounty Memory Corruption - Generic (CWE-119)CVE-2014-0502
Unknown
2014-02-27
PHP Heap Overflow Vulnerability in imagecrop()
Internet Bug Bounty CVE-2013-7226
Unknown
2014-02-06
Handling of jar: URIs bypasses AllowScriptAccess=never
Internet Bug Bounty CVE-2014-0491
Unknown
2014-01-14
PHP openssl_x509_parse() Memory Corruption Vulnerability
Internet Bug Bounty Code Injection (CWE-94)CVE-2013-6420
Unknown
2013-12-13
Flash type confusion vulnerability leads to code execution
Internet Bug Bounty CVE-2013-5331
Unknown
2013-12-10
OpenSSH: Memory corruption in AES-GCM support
Internet Bug Bounty CVE-2013-4548
Unknown
2013-11-07
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817 $2,257
HackerOne609—
Nextcloud584—
Shopify465—
curl464—
Node.js third-party modules307—
GitLab258—
X / xAI250 $7,000
Uber239—