目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

漏洞赏金情报

数据来源：HackerOne 公开披露报告 · 每 6 小时更新

浏览 HackerOne 平台公开披露的漏洞赏金报告，按严重程度、漏洞类型或目标项目筛选，关联 CVE 编号。

已披露报告
12,262
关联 CVE
1,866
参与项目数
343
近 7 天新增
0
严重度: All Critical High Medium Low
类型: 全部 Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 658 Improper Authentication - Generic 654 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
项目筛选：udemy ✕
AWS S3 bucket writable for authenticated aws user
Udemy Improper Authentication - Generic (CWE-287)
Unknown
2017-01-05
NON VALIDATION OF SESSIONS AFTER PASSWORD CHANGE
Udemy Improper Authentication - Generic (CWE-287)
Unknown
2016-09-16
Ability to add pishing links in discusion ," Bypassing uneductional Links add "
Udemy Information Disclosure (CWE-200)
Unknown
2016-07-09
Authentication Data are not Clearing
Udemy Improper Authentication - Generic (CWE-287)
Unknown
2016-04-13
Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modification
Udemy Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2016-02-24
Misconfigured SPF Record Flag
Udemy Violation of Secure Design Principles (CWE-657)
Unknown
2016-02-22
Stored XSS
Udemy Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2016-02-22
information disclosure
Udemy Information Disclosure (CWE-200)
Unknown
2016-02-07
leak receipt of another user
Udemy Information Disclosure (CWE-200)
Unknown
2015-11-13
XSS Vulnerability
Udemy Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-11-09
XSS on https://www.udemy.com/asset/export.html
Udemy Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-10-08
Extremely high Course rating values could be set in order to make really high Average rating of the course. Negative values could be set to.
Udemy Violation of Secure Design Principles (CWE-657)
Unknown
2015-09-25
xss profile
Udemy Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-16
xss on autoserch
Udemy Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Multiple sub domain are vulnerable because of leaking full path
Udemy Information Disclosure (CWE-200)
Unknown
2015-06-25
teach.udemy.com log poison vulnerability through wordpress debug.log being publically available
Udemy Code Injection (CWE-94)
Unknown
2015-06-09
高频漏洞类型
最活跃项目
项目 报告数 最高赏金
U.S. Dept Of Defense 896 —
Internet Bug Bounty 817 $2,257
HackerOne 609 —
Nextcloud 584 —
Shopify 465 —
curl 464 —
Node.js third-party modules 307 —
GitLab 258 —
X / xAI 250 —
Uber 239 —