目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1310

100%

漏洞赏金情报

数据来源:HackerOne 公开披露报告 · 每 6 小时更新

浏览 HackerOne 平台公开披露的漏洞赏金报告,按严重程度、漏洞类型或目标项目筛选,关联 CVE 编号。

已披露报告
12,250
关联 CVE
1,864
参与项目数
343
近 7 天新增
8
Stored XSS In Company URL
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS in testimonial Company
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS in Testimonial Position
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS in Testimonial name
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored Xss in Feature Paragraph
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS in Feature tile
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS in title of date navigation
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS in Title of the topic List
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS in Contact Form
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS on Search Title
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Stored XSS on Title of Page List in edit page list
Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-07-08
Unknown
2015-07-01
Unknown
2015-06-28
XSS on added name album on videos.
VK.com Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-06-26
XSS at Bulk editing ProductVariants
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-06-25
XSS in https://app.mavenlink.com/workspaces/
Mavenlink Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-06-22
XSS at Bulk editing products
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-06-17
XSS at importing Product List
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-06-17
JSON keys are not properly escaped
Ruby on Rails Cross-site Scripting (XSS) - Generic (CWE-79)CVE-2015-3226
High
2015-06-16
XSS on support.shopify.com
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2015-06-09
高频漏洞类型
最活跃项目
项目报告数最高赏金
U.S. Dept Of Defense896
Internet Bug Bounty817 $2,257
HackerOne609
Nextcloud584
Shopify464
curl459
Node.js third-party modules307
GitLab258
X / xAI250 $7,000
Uber239