漏洞赏金情报

数据来源：HackerOne 公开披露报告 · 每 6 小时更新

浏览 HackerOne 平台公开披露的漏洞赏金报告，按严重程度、漏洞类型或目标项目筛选，关联 CVE 编号。

已披露报告

12,250

关联 CVE

1,864

参与项目数

343

近 7 天新增

严重度: All Critical High Medium Low

类型: 全部 Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 658 Improper Authentication - Generic 653 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375

XSS 1

StopTheHacker Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-18

email field doesn't filtered against XSS

Uzbey Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

XSS in the input

Respondly Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

xss in app.simplenote.com

Automattic Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

https://polldaddy.com storage.swf XSS

Automattic Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

Improper filtering of classes used in codeblocks in Markdown

HackerOne Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

http://jetpack.me/ Self XSS

Automattic Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

genericons.com - DOM based XSS.

Automattic Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

XSS in Team Only Area

Localize Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-08

XSS 01 on staging.fct.li

Factlink Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-07-07

Reflected XSS in Pastebin-view

IRCCloud Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-06-28

/index.php/dashboard/sitemap/explore/ Cross-site scripting

Concrete CMS Cross-site Scripting (XSS) - Generic (CWE-79)

Unknown

2014-06-09

Stored XSS Found