Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,224
CVE-linked
1,856
Programs
342
New This Week
5
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
The "Download Raw Diff" URL is viewable by everyone
Phabricator Information Disclosure (CWE-200)
Low
2018-05-23
Часть админки доступна для всех пользователей
VK.com Information Disclosure (CWE-200)
Low
2018-05-22
Bypassing one-time checkout router page (revealing payment information)
Lyst Information Disclosure (CWE-200)
Low
2018-05-10
reports.breadcrumb.com is vulnerable for Arbitrary file existence disclosur CVE-2014-7829
Upserve Information Disclosure (CWE-200)CVE-2014-7829
Low
2018-03-29
Leakage badges on disabled user
HackerOne Information Disclosure (CWE-200)
Low
2018-03-15
CVE-2017-15277 on Profile page
X / xAI Information Disclosure (CWE-200)CVE-2017-15277
Low
2018-03-08
See details of a unpublished word by guessing the word ID
Urban Dictionary Information Disclosure (CWE-200)
Low
2018-02-12
ImageMagick GIF coder vulnerability leading to memory disclosure
HackerOne Information Disclosure (CWE-200)CVE-2017-15277
Low
2018-02-07
Leak IP internal
Rockstar Games Information Disclosure (CWE-200)
Low
2018-02-05
Reputation gain split by company can be used to track the existence of otherwise undisclosed reports
HackerOne Information Disclosure (CWE-200)
Low
2018-02-02
Keys
Kaspersky Information Disclosure (CWE-200)
Low
2018-02-02
Invitation token leaks to https://bat.bing.com
HackerOne Information Disclosure (CWE-200)
Low
2018-01-11
Nginx version disclosure via forbidden page
Yelp Information Disclosure (CWE-200)
Low
2017-11-21
Using an outdated version of OpenSSH on db01.wakatime.com
WakaTime Information Disclosure (CWE-200)
Low
2017-10-29
User Enumeration
Infogram Information Disclosure (CWE-200)
Low
2017-10-27
Preferred language option fingerprinting issue in Tor Browser
Tor Information Disclosure (CWE-200)
Low
2017-10-24
Scrollbar Width permits detecting browser platform
Tor Information Disclosure (CWE-200)
Low
2017-10-20
Simple CSS line-height identifies platform
Tor Information Disclosure (CWE-200)
Low
2017-10-20
resolved bugs in a program are public despite the program settings
HackerOne Information Disclosure (CWE-200)
Low
2017-10-13
Race condition in GitLab import, giving access to other people their imports due to filename collision
GitLab Information Disclosure (CWE-200)
Low
2017-10-03
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud583—
Shopify464—
curl442—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239—