Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,219
CVE-linked
1,854
Programs
342
New This Week
10
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
Program filter: curl✕
--libcurl code injection via trigraphs
curl Code Injection (CWE-94)
Low
2022-04-24
Binary output bypass
curl Classic Buffer Overflow (CWE-120)
Low
2022-03-09
Occasional use-after-free in multi_done() libcurl-7.81.0
curl Use After Free (CWE-416)
Low
2022-03-09
CVE-2021-22925: TELNET stack contents disclosure again
curl Information Disclosure (CWE-200)CVE-2021-22925CVE-2021-22898
Low
2021-07-21
CVE-2021-22897: schannel cipher selection surprise
curl Business Logic Errors (CWE-840)CVE-2021-22897
Low
2021-05-26
CVE-2021-22890: TLS 1.3 session ticket proxy host mixup
curl Man-in-the-Middle (CWE-300)CVE-2021-22890
Low
2021-04-30
CVE-2021-22876: Automatic referer leaks credentials
curl CVE-2021-22876
Low
2021-04-30
CVE-2020-8284: trusting FTP PASV responses
curl Information Disclosure (CWE-200)CVE-2020-8284
Low
2021-02-09
huge COLUMNS causes progress-bar to buffer overflow
curl Classic Buffer Overflow (CWE-120)
Low
2021-02-08
Integer overflow at line 1603 in the src/operator.c file
curl Integer Overflow (CWE-190)
Low
2021-02-08
Buffer write overflow when forming dns over http request
curl Classic Buffer Overflow (CWE-120)
Low
2021-02-08
Potential invocation of qsort on uninitialized memory during cookie save
curl Memory Corruption - Generic (CWE-119)
Low
2021-02-08
use after free in cookie.c
curl Use After Free (CWE-416)
Low
2021-02-08
Race condition with CURL_LOCK_DATA_CONNECT can cause connections to be used at the same time
curl Use After Free (CWE-416)
Low
2021-01-08
Heap Buffer Overflow (READ of size 1) in ourWriteOut
curl Heap Overflow (CWE-122)
Low
2021-01-08
Curl_auth_create_plain_message integer overflow leads to heap buffer overflow
curl Incorrect Calculation of Buffer Size (CWE-131)CVE-2018-16839
Low
2021-01-08
Integer overflows in tool_operate.c at line 1541
curl Integer Overflow (CWE-190)
Low
2021-01-01
CVE-2019-5435: An integer overflow found in /lib/urlapi.c
curl Incorrect Calculation of Buffer Size (CWE-131)CVE-2019-5435CVE-2018-14618
Low
2020-12-05
CVE-2020-8231: Connect-only connections can use the wrong connection
curl Information Disclosure (CWE-200)CVE-2020-8231
Low
2020-11-05
Insecure Frame (External)
curl
Low
2019-11-01
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud582—
Shopify464—
curl439—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239 $9,895