目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

漏洞赏金情报

数据来源：HackerOne 公开披露报告 · 每 6 小时更新

浏览 HackerOne 平台公开披露的漏洞赏金报告，按严重程度、漏洞类型或目标项目筛选，关联 CVE 编号。

已披露报告
12,219
关联 CVE
1,854
参与项目数
342
近 7 天新增
10
严重度: All CriticalHighMediumLow
类型: 全部 Information Disclosure 1173 Cross-site Scripting (XSS) … 747 Violation of Secure Design … 719 Improper Access Control - Generic 656 Improper Authentication - Generic 652 Cross-site Scripting (XSS) … 513 Uncontrolled Resource Consumption 483 Cross-site Scripting (XSS) … 461 Cross-Site Request Forgery (CSRF) 421 Privilege Escalation 375
项目筛选：shopify✕
XSS at jamfpro.shopifycloud.com
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2023-02-02
Read/Write arbitrary (non-HttpOnly) cookies on checkout pages via GoogleAnalyticsAdditionalScripts postMessage handler
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2022-12-01
One Click XSS in [www.shopify.com]
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2022-07-13
Xss At Shopify Email App
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Low
2021-12-24
XSS at https://exchangemarketplace.com/blogsearch
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2021-04-09
Self xss in product reviews
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2020-11-19
Self XSS
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2020-09-17
XSS / SELF XSS
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Low
2020-09-14
Self XSS in Timeline
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2020-08-25
Stored XSS in https://productreviews.shopifyapps.com/proxy/v4/reviews/product
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2019-11-08
Stored XSS in Discounts section
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2019-06-27
POST-based XSS on apps.shopify.com
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Low
2019-03-14
XSS in my.shopify.com in widget
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2017-07-21
XSS in $shop$.myshopify.com/admin/ via twine template injection in "Shopify.API.Modal.input" method when using a malicious app
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
High
2017-06-01
XSS in $shop$.myshopify.com/admin/ via "Button Objects" in malicious app
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
High
2017-05-22
Stored XSS in [shop].myshopify.com/admin/orders/[id]
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2017-03-28
Stored XSS in blog comments through Shopify API
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2017-03-16
Subdomain takeover on s3.shopify.com
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Unknown
2017-02-27
XSS on postal codes
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2017-01-11
XSS on manually entering Postal codes
Shopify Cross-site Scripting (XSS) - Generic (CWE-79)
Medium
2016-12-17
高频漏洞类型
最活跃项目
项目报告数最高赏金
U.S. Dept Of Defense896—
Internet Bug Bounty817—
HackerOne609—
Nextcloud582—
Shopify464—
curl439—
Node.js third-party modules307—
GitLab258—
X / xAI250 $2,500
Uber239 $9,895