Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Bug Bounty Intelligence

Source: HackerOne public disclosures · updated every 6h

Browse publicly disclosed bug bounty reports from HackerOne. Filter by severity, weakness type, or program. Cross-referenced with CVE IDs where available.

Disclosed Reports
12,222
CVE-linked
1,855
Programs
342
New This Week
3
Severity: All CriticalHighMediumLow
Type: All Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
SQL injection located in `███` in POST param `████████`
U.S. Dept Of Defense SQL Injection (CWE-89)
High
2021-09-09
SQL injection [futexpert.mtngbissau.com]
MTN Group SQL Injection (CWE-89)
High
2021-09-09
RCE Apache Struts2 remote command execution (S2-045) on [wifi-partner.mtn.com.gh]
MTN Group Code Injection (CWE-94)
High
2021-09-09
DNS Miconfiguration Leads to Subdomain Takeover - max1.liveplan.com
Palo Alto Software Privilege Escalation (CAPEC-233)
High
2021-09-08
Payment method token being sent to 3rd party analytics service
Upserve Business Logic Errors (CWE-840)
High
2021-09-03
SSH server due to Improper Signature Verification
Sifchain CVE-2020-9283
High
2021-08-30
Unauthenticated Arbitrary File Deletion (CVE-2020-3187)
MTN Group Path Traversal (CWE-22)CVE-2020-3187
High
2021-08-29
Information Exposure Through Directory Listing
Tor Information Exposure Through Directory Listing (CWE-548)
High
2021-08-27
Basic Authentication Heap Overflow
Internet Bug Bounty Heap Overflow (CWE-122)CVE-2019-12527
High
2021-08-26
Squid leaks previous content from reusable buffer
Internet Bug Bounty Buffer Over-read (CWE-126)CVE-2019-12528
High
2021-08-26
Cache Poisoning
Internet Bug Bounty Improper Handling of URL Encoding (Hex Encoding) (CWE-177)CVE-2019-12520CVE-2019-12524
High
2021-08-26
Buffer overflow in PyCArg_repr in _ctypes/callproc.c for Python 3.x to 3.9.1
Internet Bug Bounty Classic Buffer Overflow (CWE-120)CVE-2021-3177
High
2021-08-25
The VTP parser in tcpdump before 4.9.2 has a buffer over-read in print-vtp.c:vtp_print()
Internet Bug Bounty Buffer Over-read (CWE-126)CVE-2017-13033
High
2021-08-22
CVE-2017-13050: The RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print()
Internet Bug Bounty Buffer Over-read (CWE-126)CVE-2017-13050
High
2021-08-22
CVE-2017-13019: The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgm_print()
Internet Bug Bounty Buffer Over-read (CWE-126)CVE-2017-13019
High
2021-08-22
CVE-2020-9383 Floppy OOB read
Internet Bug Bounty Buffer Over-read (CWE-126)CVE-2020-9383
High
2021-08-22
information discloure via logs files at ==> https://ihelp.mtnbusiness.com/logfiles/Log_21-06-2021.txt
MTN Group Information Disclosure (CWE-200)
High
2021-08-20
i can join without user and pass in this website https://argocd.upchieve.org/settings/accounts
UPchieve Reusing a Nonce, Key Pair in Encryption (CWE-323)
High
2021-08-18
CVE-2018-6389 exploitation - using scripts loader
MTN Group Business Logic Errors (CWE-840)CVE-2018-6389
High
2021-08-18
No rate limit lead to otp brute forcing
MTN Group Improper Restriction of Authentication Attempts (CWE-307)
High
2021-08-16
Top Weakness Types
Most Active Programs
ProgramReportsMax $
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud583—
Shopify464—
curl440—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239—