目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

漏洞赏金情报

数据来源：HackerOne 公开披露报告 · 每 6 小时更新

浏览 HackerOne 平台公开披露的漏洞赏金报告，按严重程度、漏洞类型或目标项目筛选，关联 CVE 编号。

已披露报告
12,219
关联 CVE
1,854
参与项目数
342
近 7 天新增
14
严重度: All CriticalHighMediumLow
类型: 全部 Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
项目筛选：pixiv✕
Bypassing Inbox Privacy Settings and Enabling Spam on Pixiv.net
pixiv Improper Access Control - Generic (CWE-284)
Low
2026-04-27
Non-premium user can disable Ads in japanese version of dic.pixiv.net
pixiv Business Logic Errors (CWE-840)
High
2026-04-27
Internal logs/info leaked via endpoint {https://203.137.128.240/server-status}
pixiv Information Disclosure (CWE-200)
High
2026-01-20
Disclose Hidden Comments on Media Section of hub.vroid.com
pixiv Insecure Direct Object Reference (IDOR) (CWE-639)
Medium
2026-01-18
clickjacing can lead to account takeover
pixiv UI Redressing (Clickjacking) (CAPEC-103)
Low
2026-01-18
Stealing Users OAuth authorization code via redirect_uri
pixiv Improper Authorization (CWE-285)
High
2023-03-22
XSS Reflected at https://sketch.pixiv.net/ Via `next_url`
pixiv Cross-site Scripting (XSS) - Reflected (CWE-79)
Medium
2022-03-23
Reset any password
pixiv Weak Password Recovery Mechanism for Forgotten Password (CWE-640)
High
2021-03-31
RCE due to ImageTragick v2
pixiv Code Injection (CWE-94)
Critical
2021-03-16
Bypass extension check leads to stored XSS at https://s2.booth.pm
pixiv Cross-site Scripting (XSS) - Stored (CWE-79)
Medium
2021-01-08
Open Redirect at https://oauth.secure.pixiv.net
pixiv Open Redirect (CWE-601)
Low
2020-12-22
XSS reflected on [https://www.pixiv.net]
pixiv Cross-site Scripting (XSS) - Reflected (CWE-79)
Medium
2020-12-17
CSRF at https://chatstory.pixiv.net/imported
pixiv Cross-Site Request Forgery (CSRF) (CWE-352)
Medium
2020-07-02
Open redirect protection (https://www.pixiv.net/jump.php) is broken for novels
pixiv Open Redirect (CWE-601)
Low
2019-10-01
高频漏洞类型
最活跃项目
项目报告数最高赏金
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud582—
Shopify464—
curl439—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239 $9,895