Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,262
CVE-linked
1,866
Programs
343
New This Week
0
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 658 Improper Authentication - Generic 654 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
Program filter: ibb✕
CVE-2022-40604: Apache Airflow: Format String Vulnerability
Internet Bug Bounty Use of Externally-Controlled Format String (CWE-134)CVE-2022-40604
Critical
2025-01-18
JWT audience claim is not verified
Internet Bug Bounty Missing Critical Step in Authentication (CWE-304)CVE-2023-22482
Critical
2023-04-16
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.50
Internet Bug Bounty Path Traversal: '.../...//' (CWE-35)CVE-2021-42013
Critical
2021-11-19
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) (CVE-2021-42013)
Internet Bug Bounty Path Traversal (CWE-22)CVE-2021-41773CVE-2021-42013
Critical
2021-11-19
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
Internet Bug Bounty Path Traversal (CWE-22)CVE-2021-41773
Critical
2021-11-09
HTTP Smuggling multiple issues in Squid 3.x & squid 4.x
Internet Bug Bounty HTTP Response Splitting (CWE-113)CVE-2019-18678CVE-2020-15811CVE-2020-8449
Critical
2021-08-26
UrnState Heap Overflow
Internet Bug Bounty Classic Buffer Overflow (CWE-120)CVE-2019-12526
Critical
2021-08-26
URN Request bypass ACL Checks
Internet Bug Bounty Improper Access Control - Generic (CWE-284)CVE-2019-12523
Critical
2021-08-26
Cache Manager ACL Bypass
Internet Bug Bounty Authentication Bypass Using an Alternate Path or Channel (CWE-288)CVE-2019-12524
Critical
2021-08-26
Squid as reverse proxy RCE and data leak
Internet Bug Bounty Classic Buffer Overflow (CWE-120)
Critical
2021-08-26
CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()
Internet Bug Bounty Heap Overflow (CWE-122)CVE-2020-10938
Critical
2021-08-22
Several protocol parsers in before 4.9.2 could cause a buffer overflow in util-print.c:bittok2str_internal()
Internet Bug Bounty Classic Buffer Overflow (CWE-120)
Critical
2021-08-22
Negative size parameter in mb_split
Internet Bug Bounty Buffer Underflow (CWE-124)CVE-2019-9025
Critical
2020-11-09
Heap overflow in utf32be_mbc_to_code
Internet Bug Bounty Heap Overflow (CWE-122)CVE-2019-9023
Critical
2020-11-09
Use after free and out of bounds read in xmlrpc_decode()
Internet Bug Bounty Use After Free (CWE-416)CVE-2019-9020
Critical
2020-11-09
Out of Bounds Memory Read in php_jpg_get16
Internet Bug Bounty Buffer Over-read (CWE-126)CVE-2019-11040
Critical
2020-11-09
CVE-2019-11043: a buffer underflow in fpm_main.c can lead to RCE in php-fpm
Internet Bug Bounty Buffer Underflow (CWE-124)CVE-2019-11043
Critical
2020-11-09
efree() on uninitialized Heap data in imagescale leads to use-after-free
Internet Bug Bounty Use After Free (CWE-416)CVE-2016-10166
Critical
2020-10-10
heap buffer overflow in phar_detect_phar_fname_ext
Internet Bug Bounty Buffer Over-read (CWE-126)CVE-2019-9021
Critical
2020-10-10
Uninitialized read in exif_process_IFD_in_TIFF
Internet Bug Bounty Classic Buffer Overflow (CWE-120)CVE-2019-9641
Critical
2020-10-10
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817 $2,257
HackerOne609—
Nextcloud584—
Shopify465—
curl464—
Node.js third-party modules307—
GitLab258—
X / xAI250 $7,000
Uber239—