https://bugbountyreports.com/ https://bugbountyreports.com/reports https://bugbountyreports.com/programs https://bugbountyreports.com/learn https://bugbountyreports.com/learn/A01 https://bugbountyreports.com/learn/A02 https://bugbountyreports.com/learn/A03 https://bugbountyreports.com/learn/A04 https://bugbountyreports.com/learn/A05 https://bugbountyreports.com/learn/A06 https://bugbountyreports.com/learn/A07 https://bugbountyreports.com/learn/A08 https://bugbountyreports.com/learn/A09 https://bugbountyreports.com/learn/A10 https://bugbountyreports.com/programs/8x82026-10-29 https://bugbountyreports.com/programs/acronis2026-10-29 https://bugbountyreports.com/programs/affirm2026-10-29 https://bugbountyreports.com/programs/airbnb2026-10-29 https://bugbountyreports.com/programs/aiven-ltd2026-10-29 https://bugbountyreports.com/programs/algolia2026-10-29 https://bugbountyreports.com/programs/alliance-of-american-football2026-10-29 https://bugbountyreports.com/programs/alohi2026-10-29 https://bugbountyreports.com/programs/apitest-io2026-10-29 https://bugbountyreports.com/programs/arkadiyt-projects2026-10-29 https://bugbountyreports.com/programs/aspen2026-10-29 https://bugbountyreports.com/programs/autodesk2026-10-29 https://bugbountyreports.com/programs/automattic2026-10-29 https://bugbountyreports.com/programs/avito2026-10-29 https://bugbountyreports.com/programs/aws-vdp2026-10-29 https://bugbountyreports.com/programs/azbuka-vkusa2026-10-29 https://bugbountyreports.com/programs/basecamp2026-10-29 https://bugbountyreports.com/programs/bcm-messenger2026-10-29 https://bugbountyreports.com/programs/bime2026-10-29 https://bugbountyreports.com/programs/bitaccess2026-10-29 https://bugbountyreports.com/programs/bithunt2026-10-29 https://bugbountyreports.com/programs/bitwarden2026-10-29 https://bugbountyreports.com/programs/block-io2026-10-29 https://bugbountyreports.com/programs/blockchain2026-10-29 https://bugbountyreports.com/programs/blockdev-sp-z-o-o2026-10-29 https://bugbountyreports.com/programs/blockfi2026-10-29 https://bugbountyreports.com/programs/bohemia-interactive-a-s2026-10-29 https://bugbountyreports.com/programs/bookfresh2026-10-29 https://bugbountyreports.com/programs/brave-software2026-10-29 https://bugbountyreports.com/programs/btfs2026-10-29 https://bugbountyreports.com/programs/bumble2026-10-29 https://bugbountyreports.com/programs/bykea2026-10-29 https://bugbountyreports.com/programs/c2fo2026-10-29 https://bugbountyreports.com/programs/central-security-project2026-10-29 https://bugbountyreports.com/programs/cert-cc2026-10-29 https://bugbountyreports.com/programs/certly2026-10-29 https://bugbountyreports.com/programs/cfp-time2026-10-29 https://bugbountyreports.com/programs/chainlink2026-10-29 https://bugbountyreports.com/programs/clario2026-10-29 https://bugbountyreports.com/programs/cloudflare-public-bug-bounty2026-10-29 https://bugbountyreports.com/programs/coalition-inc2026-10-29 https://bugbountyreports.com/programs/codeigniter2026-10-29 https://bugbountyreports.com/programs/coin-space2026-10-29 https://bugbountyreports.com/programs/coinbase2026-10-29 https://bugbountyreports.com/programs/coinmate-io2026-10-29 https://bugbountyreports.com/programs/companyhub2026-10-29 https://bugbountyreports.com/programs/concrete-cms2026-10-29 https://bugbountyreports.com/programs/cosmos2026-10-29 https://bugbountyreports.com/programs/courier2026-10-29 https://bugbountyreports.com/programs/coursera2026-10-29 https://bugbountyreports.com/programs/cs-money2026-10-29 https://bugbountyreports.com/programs/curl2026-10-29 https://bugbountyreports.com/programs/curve2026-10-29 https://bugbountyreports.com/programs/datastax2026-10-29 https://bugbountyreports.com/programs/deconf2026-10-29 https://bugbountyreports.com/programs/deriv-com2026-10-29 https://bugbountyreports.com/programs/digitalsellz2026-10-29 https://bugbountyreports.com/programs/discourse2026-10-29 https://bugbountyreports.com/programs/django2026-10-29 https://bugbountyreports.com/programs/doppler2026-10-29 https://bugbountyreports.com/programs/drchrono2026-10-29 https://bugbountyreports.com/programs/drive-net-inc2026-10-29 https://bugbountyreports.com/programs/dropcontact2026-10-29 https://bugbountyreports.com/programs/drugs-com2026-10-29 https://bugbountyreports.com/programs/duckduckgo2026-10-29 https://bugbountyreports.com/programs/dust2026-10-29 https://bugbountyreports.com/programs/dynatrace2026-10-29 https://bugbountyreports.com/programs/ed2026-10-29 https://bugbountyreports.com/programs/elastic2026-10-29 https://bugbountyreports.com/programs/endless-group2026-10-29 https://bugbountyreports.com/programs/enjin2026-10-29 https://bugbountyreports.com/programs/enter2026-10-29 https://bugbountyreports.com/programs/equifax-vdp2026-10-29 https://bugbountyreports.com/programs/essity2026-10-29 https://bugbountyreports.com/programs/eternal2026-10-29 https://bugbountyreports.com/programs/evernote2026-10-29 https://bugbountyreports.com/programs/exness2026-10-29 https://bugbountyreports.com/programs/exodus2026-10-29 https://bugbountyreports.com/programs/expedia-group-bug-bounty2026-10-29 https://bugbountyreports.com/programs/expressionengine2026-10-29 https://bugbountyreports.com/programs/faceless2026-10-29 https://bugbountyreports.com/programs/factlink2026-10-29 https://bugbountyreports.com/programs/fanfootage2026-10-29 https://bugbountyreports.com/programs/fastify2026-10-29 https://bugbountyreports.com/programs/fastly-vdp2026-10-29 https://bugbountyreports.com/programs/figma2026-10-29 https://bugbountyreports.com/programs/files-com2026-10-29 https://bugbountyreports.com/programs/filezilla2026-10-29 https://bugbountyreports.com/programs/flickr2026-10-29 https://bugbountyreports.com/programs/flox2026-10-29 https://bugbountyreports.com/programs/ford2026-10-29 https://bugbountyreports.com/programs/forescout-technologies2026-10-29 https://bugbountyreports.com/programs/formassembly2026-10-29 https://bugbountyreports.com/programs/frans-visits-vegas2026-10-29 https://bugbountyreports.com/programs/frontegg2026-10-29 https://bugbountyreports.com/programs/gatecoin2026-10-29 https://bugbountyreports.com/programs/gener82026-10-29 https://bugbountyreports.com/programs/general-motors2026-10-29 https://bugbountyreports.com/programs/github2026-10-29 https://bugbountyreports.com/programs/gitlab2026-10-29 https://bugbountyreports.com/programs/glasswire2026-10-29 https://bugbountyreports.com/programs/glovo2026-10-29 https://bugbountyreports.com/programs/gocd2026-10-29 https://bugbountyreports.com/programs/grab2026-10-29 https://bugbountyreports.com/programs/gratipay2026-10-29 https://bugbountyreports.com/programs/greenhouse-io2026-10-29 https://bugbountyreports.com/programs/gsa-bounty2026-10-29 https://bugbountyreports.com/programs/gymshark2026-10-29 https://bugbountyreports.com/programs/h1-5411-ctf2026-10-29 https://bugbountyreports.com/programs/h1-ctf2026-10-29 https://bugbountyreports.com/programs/hackerone2026-10-29 https://bugbountyreports.com/programs/hanno-s-projects2026-10-29 https://bugbountyreports.com/programs/helium2026-10-29 https://bugbountyreports.com/programs/hemi-vdp2026-10-29 https://bugbountyreports.com/programs/hiro2026-10-29 https://bugbountyreports.com/programs/homebrew2026-10-29 https://bugbountyreports.com/programs/hostinger2026-10-29 https://bugbountyreports.com/programs/hubdia2026-10-29 https://bugbountyreports.com/programs/ian-dunn2026-10-29 https://bugbountyreports.com/programs/ibm2026-10-29 https://bugbountyreports.com/programs/imgur2026-10-29 https://bugbountyreports.com/programs/impresscms2026-10-29 https://bugbountyreports.com/programs/indrive2026-10-29 https://bugbountyreports.com/programs/inflection2026-10-29 https://bugbountyreports.com/programs/infogram2026-10-29 https://bugbountyreports.com/programs/informatica2026-10-29 https://bugbountyreports.com/programs/insightly2026-10-29 https://bugbountyreports.com/programs/instacart2026-10-29 https://bugbountyreports.com/programs/insulet-corporation2026-10-29 https://bugbountyreports.com/programs/internet-bug-bounty2026-10-29 https://bugbountyreports.com/programs/invision-power-services-inc2026-10-29 https://bugbountyreports.com/programs/ionity-gmbh2026-10-29 https://bugbountyreports.com/programs/irccloud2026-10-29 https://bugbountyreports.com/programs/jamieweb2026-10-29 https://bugbountyreports.com/programs/jetblue2026-10-29 https://bugbountyreports.com/programs/joola-io2026-10-29 https://bugbountyreports.com/programs/jsdelivr2026-10-29 https://bugbountyreports.com/programs/judge-me2026-10-29 https://bugbountyreports.com/programs/kadira2026-10-29 https://bugbountyreports.com/programs/kartpay2026-10-29 https://bugbountyreports.com/programs/kaspersky2026-10-29 https://bugbountyreports.com/programs/kayak2026-10-29 https://bugbountyreports.com/programs/khan-academy2026-10-29 https://bugbountyreports.com/programs/krisp2026-10-29 https://bugbountyreports.com/programs/kubernetes2026-10-29 https://bugbountyreports.com/programs/lab452026-10-29 https://bugbountyreports.com/programs/lark-technologies2026-10-29 https://bugbountyreports.com/programs/leaseweb2026-10-29 https://bugbountyreports.com/programs/legal-robot2026-10-29 https://bugbountyreports.com/programs/lemlist2026-10-29 https://bugbountyreports.com/programs/liberapay2026-10-29 https://bugbountyreports.com/programs/libsass2026-10-29 https://bugbountyreports.com/programs/lichess2026-10-29 https://bugbountyreports.com/programs/linkedin2026-10-29 https://bugbountyreports.com/programs/linktree2026-10-29 https://bugbountyreports.com/programs/linux-foundation-decentralized-trust2026-10-29 https://bugbountyreports.com/programs/localize2026-10-29 https://bugbountyreports.com/programs/logitech2026-10-29 https://bugbountyreports.com/programs/lovable-vdp2026-10-29 https://bugbountyreports.com/programs/ly-corporation2026-10-29 https://bugbountyreports.com/programs/lyst2026-10-29 https://bugbountyreports.com/programs/magic2026-10-29 https://bugbountyreports.com/programs/mainwp2026-10-29 https://bugbountyreports.com/programs/malwarebytes2026-10-29 https://bugbountyreports.com/programs/mapbox2026-10-29 https://bugbountyreports.com/programs/maplogin2026-10-29 https://bugbountyreports.com/programs/mapsmarker-com-e-u2026-10-29 https://bugbountyreports.com/programs/mariadb2026-10-29 https://bugbountyreports.com/programs/mars2026-10-29 https://bugbountyreports.com/programs/mattermost2026-10-29 https://bugbountyreports.com/programs/mavenlink2026-10-29 https://bugbountyreports.com/programs/mcuboot2026-10-29 https://bugbountyreports.com/programs/mendix2026-10-29 https://bugbountyreports.com/programs/mercadolibre2026-10-29 https://bugbountyreports.com/programs/meredith2026-10-29 https://bugbountyreports.com/programs/metamask2026-10-29 https://bugbountyreports.com/programs/midpoint-european-commission-digit2026-10-29 https://bugbountyreports.com/programs/mixmax2026-10-29 https://bugbountyreports.com/programs/mobile-vikings2026-10-29 https://bugbountyreports.com/programs/mobisystems-ltd2026-10-29 https://bugbountyreports.com/programs/mod-supply-chain-vdp2026-10-29 https://bugbountyreports.com/programs/monero2026-10-29 https://bugbountyreports.com/programs/moneybird2026-10-29 https://bugbountyreports.com/programs/moneystream2026-10-29 https://bugbountyreports.com/programs/mozilla2026-10-29 https://bugbountyreports.com/programs/ms-dos2026-10-29 https://bugbountyreports.com/programs/mtn-group2026-10-29 https://bugbountyreports.com/programs/mycrypto2026-10-29 https://bugbountyreports.com/programs/myndr2026-10-29 https://bugbountyreports.com/programs/nearby-live2026-10-29 https://bugbountyreports.com/programs/nextcloud2026-10-29 https://bugbountyreports.com/programs/nintendo2026-10-29 https://bugbountyreports.com/programs/node-js2026-10-29 https://bugbountyreports.com/programs/node-js-third-party-modules2026-10-29 https://bugbountyreports.com/programs/notepad2026-10-29 https://bugbountyreports.com/programs/nuri2026-10-29 https://bugbountyreports.com/programs/nutanix2026-10-29 https://bugbountyreports.com/programs/ok-ru2026-10-29 https://bugbountyreports.com/programs/omise2026-10-29 https://bugbountyreports.com/programs/on2026-10-29 https://bugbountyreports.com/programs/openfolio2026-10-29 https://bugbountyreports.com/programs/openmage2026-10-29 https://bugbountyreports.com/programs/owncloud2026-10-29 https://bugbountyreports.com/programs/owox-inc2026-10-29 https://bugbountyreports.com/programs/ozon2026-10-29 https://bugbountyreports.com/programs/palantir-public2026-10-29 https://bugbountyreports.com/programs/palo-alto-software2026-10-29 https://bugbountyreports.com/programs/panther-labs2026-10-29 https://bugbountyreports.com/programs/paragon-initiative-enterprises2026-10-29 https://bugbountyreports.com/programs/parrot-sec2026-10-29 https://bugbountyreports.com/programs/paypal2026-10-29 https://bugbountyreports.com/programs/people-interactive2026-10-29 https://bugbountyreports.com/programs/phabricator2026-10-29 https://bugbountyreports.com/programs/phpbb2026-10-29 https://bugbountyreports.com/programs/picsart2026-10-29 https://bugbountyreports.com/programs/ping-identity2026-10-29 https://bugbountyreports.com/programs/pixiv2026-10-29 https://bugbountyreports.com/programs/planet-labs2026-10-29 https://bugbountyreports.com/programs/playstation2026-10-29 https://bugbountyreports.com/programs/portswigger-web-security2026-10-29 https://bugbountyreports.com/programs/priceline2026-10-29 https://bugbountyreports.com/programs/proctorio2026-10-29 https://bugbountyreports.com/programs/productboard-inc2026-10-29 https://bugbountyreports.com/programs/pubg2026-10-29 https://bugbountyreports.com/programs/publitas2026-10-29 https://bugbountyreports.com/programs/pushwoosh2026-10-29 https://bugbountyreports.com/programs/putty-european-commission-digit2026-10-29 https://bugbountyreports.com/programs/python-cryptographic-authority2026-10-29 https://bugbountyreports.com/programs/quantopian2026-10-29 https://bugbountyreports.com/programs/quora2026-10-29 https://bugbountyreports.com/programs/r32026-10-29 https://bugbountyreports.com/programs/railto-llc2026-10-29 https://bugbountyreports.com/programs/ratelimited2026-10-29 https://bugbountyreports.com/programs/rbkmoney2026-10-29 https://bugbountyreports.com/programs/recorded-future2026-10-29 https://bugbountyreports.com/programs/reddapi2026-10-29 https://bugbountyreports.com/programs/reddit2026-10-29 https://bugbountyreports.com/programs/relateiq2026-10-29 https://bugbountyreports.com/programs/remitly2026-10-29 https://bugbountyreports.com/programs/respondly2026-10-29 https://bugbountyreports.com/programs/reverb-com2026-10-29 https://bugbountyreports.com/programs/revive-adserver2026-10-29 https://bugbountyreports.com/programs/rghost2026-10-29 https://bugbountyreports.com/programs/roblox2026-10-29 https://bugbountyreports.com/programs/rocket-chat2026-10-29 https://bugbountyreports.com/programs/rockset2026-10-29 https://bugbountyreports.com/programs/rockstar-games2026-10-29 https://bugbountyreports.com/programs/rootstock-labs2026-10-29 https://bugbountyreports.com/programs/ruby2026-10-29 https://bugbountyreports.com/programs/ruby-on-rails2026-10-29 https://bugbountyreports.com/programs/rubygems2026-10-29 https://bugbountyreports.com/programs/secnews2026-10-29 https://bugbountyreports.com/programs/secret2026-10-29 https://bugbountyreports.com/programs/semmle2026-10-29 https://bugbountyreports.com/programs/semrush2026-10-29 https://bugbountyreports.com/programs/sheer2026-10-29 https://bugbountyreports.com/programs/shopify2026-10-29 https://bugbountyreports.com/programs/shopify-scripts2026-10-29 https://bugbountyreports.com/programs/sidefx2026-10-29 https://bugbountyreports.com/programs/sifchain2026-10-29 https://bugbountyreports.com/programs/singlestore2026-10-29 https://bugbountyreports.com/programs/skale-network2026-10-29 https://bugbountyreports.com/programs/skyliner2026-10-29 https://bugbountyreports.com/programs/slack2026-10-29 https://bugbountyreports.com/programs/smtp2go2026-10-29 https://bugbountyreports.com/programs/smtp2go-bbp2026-10-29 https://bugbountyreports.com/programs/smule2026-10-29 https://bugbountyreports.com/programs/snapchat2026-10-29 https://bugbountyreports.com/programs/sony2026-10-29 https://bugbountyreports.com/programs/sorare2026-10-29 https://bugbountyreports.com/programs/square-open-source2026-10-29 https://bugbountyreports.com/programs/staging-every-org2026-10-29 https://bugbountyreports.com/programs/starbucks2026-10-29 https://bugbountyreports.com/programs/stellar-org2026-10-29 https://bugbountyreports.com/programs/stopthehacker2026-10-29 https://bugbountyreports.com/programs/stripe2026-10-29 https://bugbountyreports.com/programs/stripo-inc2026-10-29 https://bugbountyreports.com/programs/superhuman-formerly-grammarly2026-10-29 https://bugbountyreports.com/programs/tennessee-valley-authority2026-10-29 https://bugbountyreports.com/programs/teradici2026-10-29 https://bugbountyreports.com/programs/thisdata2026-10-29 https://bugbountyreports.com/programs/tiktok2026-10-29 https://bugbountyreports.com/programs/tools-for-humanity2026-10-29 https://bugbountyreports.com/programs/top-echelon-software2026-10-29 https://bugbountyreports.com/programs/tor2026-10-29 https://bugbountyreports.com/programs/trellix2026-10-29 https://bugbountyreports.com/programs/trint-ltd2026-10-29 https://bugbountyreports.com/programs/tucows-vdp2026-10-29 https://bugbountyreports.com/programs/twitter-algorithmic-bias2026-10-29 https://bugbountyreports.com/programs/u-s-department-of-state2026-10-29 https://bugbountyreports.com/programs/u-s-dept-of-defense2026-10-29 https://bugbountyreports.com/programs/u-s-general-services-administration2026-10-29 https://bugbountyreports.com/programs/uber2026-10-29 https://bugbountyreports.com/programs/ubiquiti-inc2026-10-29 https://bugbountyreports.com/programs/udemy2026-10-29 https://bugbountyreports.com/programs/upchieve2026-10-29 https://bugbountyreports.com/programs/ups-vdp2026-10-29 https://bugbountyreports.com/programs/upserve2026-10-29 https://bugbountyreports.com/programs/urban-company2026-10-29 https://bugbountyreports.com/programs/urban-dictionary2026-10-29 https://bugbountyreports.com/programs/uzbey2026-10-29 https://bugbountyreports.com/programs/valve2026-10-29 https://bugbountyreports.com/programs/vend-vdp2026-10-29 https://bugbountyreports.com/programs/veris2026-10-29 https://bugbountyreports.com/programs/vimeo2026-10-29 https://bugbountyreports.com/programs/vk-com2026-10-29 https://bugbountyreports.com/programs/vlc-european-commission-digit2026-10-29 https://bugbountyreports.com/programs/vulners-com2026-10-29 https://bugbountyreports.com/programs/wakatime2026-10-29 https://bugbountyreports.com/programs/weblate2026-10-29 https://bugbountyreports.com/programs/websummit2026-10-29 https://bugbountyreports.com/programs/whisper2026-10-29 https://bugbountyreports.com/programs/who-covid-19-mobile-app2026-10-29 https://bugbountyreports.com/programs/withinsecurity2026-10-29 https://bugbountyreports.com/programs/wordpoints2026-10-29 https://bugbountyreports.com/programs/wordpress2026-10-29 https://bugbountyreports.com/programs/wp-api2026-10-29 https://bugbountyreports.com/programs/x-xai2026-10-29 https://bugbountyreports.com/programs/xiaomi2026-10-29 https://bugbountyreports.com/programs/y-combinator2026-10-29 https://bugbountyreports.com/programs/yelp2026-10-29 https://bugbountyreports.com/programs/yoti2026-10-29 https://bugbountyreports.com/programs/zaption2026-10-29 https://bugbountyreports.com/programs/zego2026-10-29 https://bugbountyreports.com/programs/zenly2026-10-29 https://bugbountyreports.com/reports/4881-php-mb-regex-ereg-replace-exec-double-free2026-10-29 https://bugbountyreports.com/reports/1549-guessing-registered-users-in-legalrobot-com2026-10-29 https://bugbountyreports.com/reports/6114-bypass-leading-to-tomcat-scripts-unauthenticated2026-10-29 https://bugbountyreports.com/reports/8786-full-account-takeover-at2026-10-29 https://bugbountyreports.com/reports/3348-cnvid-parameter-vulnerable-to-insecure-direct-object2026-10-29 https://bugbountyreports.com/reports/816-limited-rce-in-certain-places-where-liquid-is-accepted2026-10-29 https://bugbountyreports.com/reports/8954-request-english-versions-of-web-pages-for-enhanced-privacy2026-10-29 https://bugbountyreports.com/reports/2518-a-stored-xss-issue-in-share-post-menu2026-10-29 https://bugbountyreports.com/reports/9306-assertion-failed-in-node-http2-http2session-http2session2026-10-29 https://bugbountyreports.com/reports/4951-bad-protocols-validation-bypass-in-wp-kses-bad-protocol2026-10-29 https://bugbountyreports.com/reports/5240-bounties-paid-in-the-last-90-days-discloses-the-undisclosed2026-10-29 https://bugbountyreports.com/reports/6739-bounty-splitting-enabled-can-discloses-if-public-vdps-are2026-10-29 https://bugbountyreports.com/reports/4418-email-mfa-mode-allows-bypassing-mfa-from-victim-s-device2026-10-29 https://bugbountyreports.com/reports/7903-external-status-checks-can-be-accepted-by-users-below2026-10-29 https://bugbountyreports.com/reports/474-learn-more-here-reward-email-domain-expired2026-10-29 https://bugbountyreports.com/reports/4208-more-on-wikipedia-link-disclose-referrer-and-leak-window2026-10-29 https://bugbountyreports.com/reports/9400-package-name-can-be-set-as-desired-when-submitting-a2026-10-29 https://bugbountyreports.com/reports/899-remember-me-token-generated-when-remember-me-box-unchecked2026-10-29 https://bugbountyreports.com/reports/5395-secure-view-aka-hide-download-can-be-bypassed-easily2026-10-29 https://bugbountyreports.com/reports/8763-see-who-s-interested-in-working-for-your-company-security2026-10-29 https://bugbountyreports.com/reports/879-sign-me-out-everywhere-does-not-work-for-desktop-sessions2026-10-29 https://bugbountyreports.com/reports/7366-urllib-will-result-to-deny-of-service2026-10-29 https://bugbountyreports.com/reports/5266-authenticated-rce-by-bypassing-of-the-htaccess-blacklist2026-10-29 https://bugbountyreports.com/reports/1497-bypass-open-redirect-after-login-at-http-ecommerce-shopify2026-10-29 https://bugbountyreports.com/reports/1686-bypass-open-redirect-and-xss-in-supporthiring-shopify-com2026-10-29 https://bugbountyreports.com/reports/5788-cors-cross-origin-resource-sharing-misconfiguration2026-10-29 https://bugbountyreports.com/reports/7621-cors-cross-origin-resource-sharing-misconfiguration-on-https2026-10-29 https://bugbountyreports.com/reports/5218-critical-remote-code-execution-through-old-tinymce-upload2026-10-29 https://bugbountyreports.com/reports/9003-cve-2023-32003-fs-mkdtemp-and-fs-mkdtempsync-are-missing2026-10-29 https://bugbountyreports.com/reports/9002-cve-2023-32004-permission-model-bypass-by-specifying-a-path2026-10-29 https://bugbountyreports.com/reports/9005-cve-2023-32006-permissions-policies-can-impersonate-other2026-10-29 https://bugbountyreports.com/reports/1496-full-path-disclosure-unknown-mysql-server-host-shardm2026-10-29 https://bugbountyreports.com/reports/1634-hackerone-sso-saml-login-csrf-open-redirect-and-self-xss2026-10-29 https://bugbountyreports.com/reports/9853-part-2-non-production-api-endpoints-for-the-datazone2026-10-29 https://bugbountyreports.com/reports/3704-possible-staff-account-takeover-via-reset-token-bruteforce2026-10-29 https://bugbountyreports.com/reports/4331-remote-exabyte-allocation-via-load-from-binary-dos2026-10-29 https://bugbountyreports.com/reports/1128-urgent-ok2026-10-29 https://bugbountyreports.com/reports/9717-addons-preview-cdn-mozilla-net-a-subdomain-takeover-is2026-10-29 https://bugbountyreports.com/reports/8702-continuation-report-from-1814842-can-create-articles-using2026-10-29 https://bugbountyreports.com/reports/9731-cve-2018-1000129-rxss-at-https-via-the-uri2026-10-29 https://bugbountyreports.com/reports/6455-hacky-holidays-ctf-completely-taken-down-the-grinch-networks2026-10-29 https://bugbountyreports.com/reports/9378-spot-check-team-members-can-edit-a-user-s-write-up2026-10-29 https://bugbountyreports.com/reports/5176-azhou-basemodel-sql-injection2026-10-29 https://bugbountyreports.com/reports/6261-firebase-util-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/6041-knutkirkhorn-free-space-command-injection-through-lack-of2026-10-29 https://bugbountyreports.com/reports/10132-net-framework-objrefs-disclosure-cve-2024-290592026-10-29 https://bugbountyreports.com/reports/5012-sql-injection-reflected-xss2026-10-29 https://bugbountyreports.com/reports/6184-sql-injections-on-referer-header-exploitable-via-time-based2026-10-29 https://bugbountyreports.com/reports/5026-dom-based-xss-on-endpoint-s2026-10-29 https://bugbountyreports.com/reports/8520-bug-reports-allow-for-unrestricted-file-upload2026-10-29 https://bugbountyreports.com/reports/5013-get-all-tickets-idor2026-10-29 https://bugbountyreports.com/reports/5020-reflected-get-xss-personnel-php-rcnum-with-mouse-action2026-10-29 https://bugbountyreports.com/reports/4028-cross-origin-resource-sharing-misconfiguration-cors2026-10-29 https://bugbountyreports.com/reports/5018-reflected-get-xss-personnel-php-folder-with-mouse-action2026-10-29 https://bugbountyreports.com/reports/8988-reflected-xss-via-keycloak-on2026-10-29 https://bugbountyreports.com/reports/9053-information-disclosure-due-unauthenticated-access-to-apis2026-10-29 https://bugbountyreports.com/reports/5017-reflected-get-xss-mission-php-missiondate2026-10-29 https://bugbountyreports.com/reports/8414-remote-code-execution-at-cve-2021-44529-htus2026-10-29 https://bugbountyreports.com/reports/5513-xss-on-flight-images-via-advanced-val-parameter2026-10-29 https://bugbountyreports.com/reports/5019-boolean-sql-injection-personnel-php-content-profile-rcnum2026-10-29 https://bugbountyreports.com/reports/5014-reflected-xss2026-10-29 https://bugbountyreports.com/reports/9117-rxss-via-currentfolder-parameter2026-10-29 https://bugbountyreports.com/reports/5729-administrative-access-to-oracle-weblogic-server-using2026-10-29 https://bugbountyreports.com/reports/2623-hardcoded-credentials-in-android-app2026-10-29 https://bugbountyreports.com/reports/8991-information-disclosure-due-unauthenticated-access-to-apis2026-10-29 https://bugbountyreports.com/reports/7044-reflected-cross-site-scripting-vulnerability2026-10-29 https://bugbountyreports.com/reports/2357-gnip-com-htpasswd-disclosure2026-10-29 https://bugbountyreports.com/reports/6123-mil-cisco-vpn-service-path-traversal2026-10-29 https://bugbountyreports.com/reports/5514-directory-traversal-via-aerosol-bin-display-directory-t-cgi2026-10-29 https://bugbountyreports.com/reports/5491-unauthorized-access-to-admin-panel2026-10-29 https://bugbountyreports.com/reports/4226-0-vk-com-reflected-xss2026-10-29 https://bugbountyreports.com/reports/7005-100k-ctf-multiple-vulnerabilities-leading-to-compromise-of2026-10-29 https://bugbountyreports.com/reports/7292-3-bypassing-ip-based-rate-limit-blocking-leads-to-rate2026-10-29 https://bugbountyreports.com/reports/7494-34-96-80-155-server-logs-disclosure-lead-to-information2026-10-29 https://bugbountyreports.com/reports/6379-3ds-ssl-improper-certificate-validation-allows-an-attacker2026-10-29 https://bugbountyreports.com/reports/6380-3ds-ssl-use-of-uninitialized-class-member-leads-to-rce-in2026-10-29 https://bugbountyreports.com/reports/6381-3ds-ssl-sdk-unchecked-number-of-audio-channels-in-mobiclip2026-10-29 https://bugbountyreports.com/reports/6827-3ds-streetpass-buffer-overflow-in-super-mario-maker-level2026-10-29 https://bugbountyreports.com/reports/6522-3ds-streetpass-heap-overflow-in-swapnote-parser-leads-to2026-10-29 https://bugbountyreports.com/reports/3251-626-path-traversal-allows-to-read-arbitrary-file-from2026-10-29 https://bugbountyreports.com/reports/2105-account-global-ubnt-com-crlf-injection2026-10-29 https://bugbountyreports.com/reports/8719-accounts-reddit-com-redirect-parameter-allows-for-xss2026-10-29 https://bugbountyreports.com/reports/7187-acronis-secure-force-com-insecure-salesforce-default-custom2026-10-29 https://bugbountyreports.com/reports/8998-admin-feature-access-knowing-the-competitors-analytics-of2026-10-29 https://bugbountyreports.com/reports/6331-admin-panel-csrf-to-resume-pause-runner2026-10-29 https://bugbountyreports.com/reports/1641-admin-c2fo-com-open-redirect2026-10-29 https://bugbountyreports.com/reports/4204-affiliates-udemy-com-wordpress-user-admin-information2026-10-29 https://bugbountyreports.com/reports/1868-afocusp-informatica-com-sql-injection-afocusp-informatica2026-10-29 https://bugbountyreports.com/reports/3326-airbnb-com-xss-via-cookie-flash2026-10-29 https://bugbountyreports.com/reports/1644-airship-cms-local-file-inclusion-rst-parser2026-10-29 https://bugbountyreports.com/reports/2586-alpha-informatica-com-expensive-domxss2026-10-29 https://bugbountyreports.com/reports/7648-android-directory-traversal-leading-to-disclosure-of-auth2026-10-29 https://bugbountyreports.com/reports/3824-android-html-injection-in-batterysavearticlerenderer-webview2026-10-29 https://bugbountyreports.com/reports/2113-android-xss-via-start-contentactivity2026-10-29 https://bugbountyreports.com/reports/3259-angular-http-server-path-traversal-in-angular-http-server2026-10-29 https://bugbountyreports.com/reports/3392-angular-http-server-server-directory-traversal2026-10-29 https://bugbountyreports.com/reports/3252-anywhere-an-iframe-element-with-url-to-malicious-html-file2026-10-29 https://bugbountyreports.com/reports/3801-apex-publish-static-files-command-injection-on-connectstring2026-10-29 https://bugbountyreports.com/reports/7724-api-krisp-ai-race-condition-on-v2-seats-endpoint-allows2026-10-29 https://bugbountyreports.com/reports/1648-api-owncloud-org-crlf-injection2026-10-29 https://bugbountyreports.com/reports/6322-api-tumblr-com-denial-of-service-by-cookies-manipulation2026-10-29 https://bugbountyreports.com/reports/6089-api-tumblr-com-exploiting-clickjacking-vulnerability-to2026-10-29 https://bugbountyreports.com/reports/4179-api-zomato-com-able-to-manipulate-order-amount2026-10-29 https://bugbountyreports.com/reports/5885-api-zomato-com-abusing-localparams-city-id-to-inject-solr2026-10-29 https://bugbountyreports.com/reports/2126-app-informaticaondemand-com-xxe2026-10-29 https://bugbountyreports.com/reports/7857-app-lemlist-com-improper-handling-of-payment-lead-to-bypass2026-10-29 https://bugbountyreports.com/reports/3210-app-mavenlink-com-idor-to-view-sensitive-information2026-10-29 https://bugbountyreports.com/reports/2441-app-mixmax-com-stored-xss-on-adding-new-enhancement2026-10-29 https://bugbountyreports.com/reports/3044-app-simplenote-com-stored-xss-via-markdown-svg-filter-bypass2026-10-29 https://bugbountyreports.com/reports/1571-apps-shopify-com-open-redirect2026-10-29 https://bugbountyreports.com/reports/6507-arpping-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/3681-ascii-art-command-injection2026-10-29 https://bugbountyreports.com/reports/5114-atlasboard-atlassian-package-cross-site-scripting-xss2026-10-29 https://bugbountyreports.com/reports/3181-augustine-static-web-server-directory-traversal-via-crafted2026-10-29 https://bugbountyreports.com/reports/4012-auth2-zomato-com-reflected-xss-at-oauth2-fallbacks-error2026-10-29 https://bugbountyreports.com/reports/6037-authmagic-timerange-stateless-core-improper-authentication2026-10-29 https://bugbountyreports.com/reports/6841-avito-ru-imagemagick-uninitialized-image-palette2026-10-29 https://bugbountyreports.com/reports/3975-avito-ru2026-10-29 https://bugbountyreports.com/reports/7649-awc-pune-user-can-download-files-deleted-by-admin-using2026-10-29 https://bugbountyreports.com/reports/1494-bbpress-stored-xss-in-any-forum-post2026-10-29 https://bugbountyreports.com/reports/5973-bl-uninitialized-memory-exposure-via-negative-consume2026-10-29 https://bugbountyreports.com/reports/5298-blamer-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/2187-bot-brew-sh-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/4026-bower-arbitrary-file-write-through-improper-validation-of2026-10-29 https://bugbountyreports.com/reports/4498-bower-arbitrary-file-write-through-improper-validation-of2026-10-29 https://bugbountyreports.com/reports/3338-bracket-template-reflected-xss-possible-when-variable2026-10-29 https://bugbountyreports.com/reports/4717-brave-browser-webtorrent-has-dns-rebinding-vulnerability2026-10-29 https://bugbountyreports.com/reports/8376-broken-access-control-unauthorized-linking-accounts-linked2026-10-29 https://bugbountyreports.com/reports/3565-bruteser-path-traversal-allows-to-read-content-of-arbitrary2026-10-29 https://bugbountyreports.com/reports/3001-buddypress-2-9-1-open-redirect-via-wp-http-referer2026-10-29 https://bugbountyreports.com/reports/2752-buddypress-arbitrary-file-deletion-through-bp-avatar-set2026-10-29 https://bugbountyreports.com/reports/6003-bugs-fuzzing-project-org-html-injection-via-custom-field-72026-10-29 https://bugbountyreports.com/reports/3564-buttle-html-injection-in-filename-leads-to-xss-when2026-10-29 https://bugbountyreports.com/reports/3545-buttle-path-traversal-in-mid-buttle-module-allows-to-read2026-10-29 https://bugbountyreports.com/reports/3446-buttle-remote-command-execution-via-unsanitized-php2026-10-29 https://bugbountyreports.com/reports/3992-buttle-unsafe-rendering-of-markdown-files2026-10-29 https://bugbountyreports.com/reports/2354-buy-coinbase-com-content-injection2026-10-29 https://bugbountyreports.com/reports/4493-bypass-645264-report-title-disclosure-despite-the-program2026-10-29 https://bugbountyreports.com/reports/6607-bypass-870709-unauthorised-access-to-pagespeed-global-admin2026-10-29 https://bugbountyreports.com/reports/7081-bypass-fixed-664038-and-519059-application-settings-change2026-10-29 https://bugbountyreports.com/reports/7761-bypass-ability-to-invite-a-new-member-in-sandbox2026-10-29 https://bugbountyreports.com/reports/2238-careers-informatica-com-cross-site-script-vulnerability-on2026-10-29 https://bugbountyreports.com/reports/1803-careers-informatica-com-reflected-cross-site-scripting-to2026-10-29 https://bugbountyreports.com/reports/2121-careers-informatica-com-xss-on-isjtn2026-10-29 https://bugbountyreports.com/reports/6333-chart-js-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/3387-cloudcmd-stored-xss-in-the-filename-when-directories-listing2026-10-29 https://bugbountyreports.com/reports/5946-cloudron-surfer-denial-of-service-via-ldap-injection2026-10-29 https://bugbountyreports.com/reports/7875-com-exness-android-pa-android-universal-xss-in-webview-lead2026-10-29 https://bugbountyreports.com/reports/5955-com-smule-autorap-cloud-messaging-push-notification-service2026-10-29 https://bugbountyreports.com/reports/6057-commit-msg-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/981-community-informatica-com-csrf-in-private-messages-allows2026-10-29 https://bugbountyreports.com/reports/2415-compose-mixmax-com-stored-xss-on-compose-mixmax-com-in2026-10-29 https://bugbountyreports.com/reports/2654-connect-teavana-com-open-redirect-and-abuse-of-connect2026-10-29 https://bugbountyreports.com/reports/2104-controlsyou-quora-com-429-too-many-requests-error-page-xss2026-10-29 https://bugbountyreports.com/reports/6152-create-git-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/10119-critical-data-breach-exposure-of-pii-data-leak-via-api2026-10-29 https://bugbountyreports.com/reports/1327-critical-steal-oauth-tokens2026-10-29 https://bugbountyreports.com/reports/1430-critical-complete-account-takeover2026-10-29 https://bugbountyreports.com/reports/9987-critical-0-click-account-takeover-via-password-reset-auth2026-10-29 https://bugbountyreports.com/reports/1265-critical-csrf-leading-to-account-take-over2026-10-29 https://bugbountyreports.com/reports/1085-critical-full-account-takeover-using-csrf2026-10-29 https://bugbountyreports.com/reports/3007-critical-full-account-takeover-using-csrf2026-10-29 https://bugbountyreports.com/reports/4569-critical-full-local-fylesystem-access-lfi-lfd-as-admin-via2026-10-29 https://bugbountyreports.com/reports/5574-critical-insufficient-access-control-on-registration-page2026-10-29 https://bugbountyreports.com/reports/4567-critical-possibility-to-takeover-any-user-account-2-without2026-10-29 https://bugbountyreports.com/reports/5607-critical-remote-code-execution-on-http-axa-dxi-eu2026-10-29 https://bugbountyreports.com/reports/3274-critical-sql-injection-by-get-method2026-10-29 https://bugbountyreports.com/reports/5608-critical-sql-injection-on-http-axa-dxi-eu2026-10-29 https://bugbountyreports.com/reports/10197-critical-unauthorized-cross-tenant-data-access-in-stripo-ai2026-10-29 https://bugbountyreports.com/reports/1588-critical-taking-over-entire-subdomain-of-romit-io2026-10-29 https://bugbountyreports.com/reports/2661-cross-domain-referer-leakage-password-reset-token-leakage2026-10-29 https://bugbountyreports.com/reports/3324-crud-file-server-path-traversal-allows-to-read-arbitrary2026-10-29 https://bugbountyreports.com/reports/3229-crud-file-server-stored-xss-in-filenames-when-directory2026-10-29 https://bugbountyreports.com/reports/5591-crypto-js-insecure-entropy-source-math-random2026-10-29 https://bugbountyreports.com/reports/6642-cs-1-6-map-cycle-abuse-allows-arbitrary-file-read-write2026-10-29 https://bugbountyreports.com/reports/6874-cs-go-unchecked-texture-file-name-with-textureflags2026-10-29 https://bugbountyreports.com/reports/6079-cs-money-open-redirect-leads-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/853-csrf-activate-paypal-express-checkout2026-10-29 https://bugbountyreports.com/reports/1377-csrf-install-premium-themes2026-10-29 https://bugbountyreports.com/reports/8246-csrf-no-csrf-protection-against-sending-invitation-to-join2026-10-29 https://bugbountyreports.com/reports/6365-csrf-tiktok-careers-portal-account-takeover2026-10-29 https://bugbountyreports.com/reports/6452-ctf-i-ve-ddosed-grinch-network2026-10-29 https://bugbountyreports.com/reports/8848-curl-cve-2023-32001-fopen-race-condition2026-10-29 https://bugbountyreports.com/reports/8985-curl-cve-2023-38039-http-header-allocation-dos2026-10-29 https://bugbountyreports.com/reports/6509-curling-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/9464-cve-2018-0296-cisco-vpn-path-traversal-on-the-https2026-10-29 https://bugbountyreports.com/reports/9393-cve-2018-0296-cisco-vpn-path-traversal-on-the-https-mil2026-10-29 https://bugbountyreports.com/reports/9462-cve-2018-0296-cisco-vpn-path-traversal-on-the-https2026-10-29 https://bugbountyreports.com/reports/9390-cve-2018-0296-cisco-vpn-path-traversal-on-the-https-mil2026-10-29 https://bugbountyreports.com/reports/9463-cve-2018-0296-cisco-vpn-path-traversal-on-the-https-no2026-10-29 https://bugbountyreports.com/reports/9391-cve-2018-0296-cisco-vpn-path-traversal-on-the-https2026-10-29 https://bugbountyreports.com/reports/9461-cve-2018-0296-cisco-vpn-path-traversal-on-the-https-1-https2026-10-29 https://bugbountyreports.com/reports/4532-cve-2018-18312-regcomp-heap-buffer-overflow-write-reg-node2026-10-29 https://bugbountyreports.com/reports/4533-cve-2018-18313-regcomp-heap-buffer-overflow-read-in-s-grok2026-10-29 https://bugbountyreports.com/reports/3847-cve-2018-6913-heap-buffer-overflow-in-s-pack-rec2026-10-29 https://bugbountyreports.com/reports/6744-cve-2018-7600-remote-code-execution-due-to-outdated-drupal2026-10-29 https://bugbountyreports.com/reports/5022-cve-2019-11510-path-traversal-on-leads-to-leaked-passwords2026-10-29 https://bugbountyreports.com/reports/6226-cve-2020-10543-buffer-overflow-caused-by-a-crafted-regular2026-10-29 https://bugbountyreports.com/reports/7104-cve-2020-27194-linux-kernel-ebpf-verifier-bug-in-or-binary2026-10-29 https://bugbountyreports.com/reports/7741-cve-2020-3452-on2026-10-29 https://bugbountyreports.com/reports/6124-cve-2020-3452-unauthenticated-file-read-in-cisco-asa2026-10-29 https://bugbountyreports.com/reports/7617-cve-2020-3452-unauthenticated-file-read-in-cisco-asa2026-10-29 https://bugbountyreports.com/reports/7842-cve-2020-3452-unauthenticated-file-read-in-cisco-asa2026-10-29 https://bugbountyreports.com/reports/7843-cve-2020-3452-unauthenticated-file-read-in-cisco-asa2026-10-29 https://bugbountyreports.com/reports/7195-cve-2021-29156-on-forgerock-openam-ldap-injection-in2026-10-29 https://bugbountyreports.com/reports/7217-cve-2021-29156-ldap-injection-at-https2026-10-29 https://bugbountyreports.com/reports/9578-cve-2021-44228-arbitrary-code-execution-on-ng01-cloud2026-10-29 https://bugbountyreports.com/reports/7992-cve-2021-44228-nps-acronis-com-is-vulnerable-to-the-recent2026-10-29 https://bugbountyreports.com/reports/8183-cve-2022-35949-undici-request-vulnerable-to-ssrf-using2026-10-29 https://bugbountyreports.com/reports/8549-cve-2022-44268-arbitrary-remote-leak-via-imagemagick2026-10-29 https://bugbountyreports.com/reports/8847-cve-2022-44570-possible-denial-of-service-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/8846-cve-2022-44571-possible-denial-of-service-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/8845-cve-2022-44572-possible-denial-of-service-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/8844-cve-2023-22796-possible-redos-based-dos-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/8843-cve-2023-22799-possible-redos-based-dos-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/8929-cve-2023-23913-dom-based-cross-site-scripting-in-rails-ujs2026-10-29 https://bugbountyreports.com/reports/8890-cve-2023-27531-possible-deserialization-of-untrusted-data2026-10-29 https://bugbountyreports.com/reports/8889-cve-2023-27539-possible-denial-of-service-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/9077-cve-2023-38546-cookie-injection-with-none-file2026-10-29 https://bugbountyreports.com/reports/9356-cve-2024-25126-denial-of-service-vulnerability-in-rack2026-10-29 https://bugbountyreports.com/reports/9357-cve-2024-26142-redos-vulnerability-in-accept-header-parsing2026-10-29 https://bugbountyreports.com/reports/9360-cve-2024-26146-header-parsing-leads-to-possible-denial-of2026-10-29 https://bugbountyreports.com/reports/9418-cve-2024-32464-actiontext-contentattachment-s-can-contain2026-10-29 https://bugbountyreports.com/reports/9542-cve-2024-35176-dos-vulnerability-in-rexml2026-10-29 https://bugbountyreports.com/reports/9713-cve-2024-47888-possible-redos-vulnerability-in-plain-text2026-10-29 https://bugbountyreports.com/reports/9791-cve-2024-54133-possible-content-security-policy-bypass-in2026-10-29 https://bugbountyreports.com/reports/9874-cve-2025-27219-denial-of-service-in-cgi-cookie-parse2026-10-29 https://bugbountyreports.com/reports/9885-cve-2025-27220-redos-in-cgi-util-escapeelement2026-10-29 https://bugbountyreports.com/reports/8571-data-07-uberinternal-com-ssrf-in-portainer-app-lead-to2026-10-29 https://bugbountyreports.com/reports/2758-debian-weblate-org-missing-spf-record2026-10-29 https://bugbountyreports.com/reports/5153-deliver-or-else-path-traversal2026-10-29 https://bugbountyreports.com/reports/9223-demo-stripo-email-http-request-smuggling2026-10-29 https://bugbountyreports.com/reports/2280-demo-weblate-org-stored-self-xss-via-editor-link-in-profile2026-10-29 https://bugbountyreports.com/reports/2830-dev-nightly-ubnt-com-local-file-reading2026-10-29 https://bugbountyreports.com/reports/2769-dev-unifi-go-ubnt-com-insecure-cors-stealing-cookies2026-10-29 https://bugbountyreports.com/reports/2895-dev-twitter-com-xss-and-open-redirect2026-10-29 https://bugbountyreports.com/reports/4041-dev-twitter-com-xss-and-open-redirect-protection-bypass2026-10-29 https://bugbountyreports.com/reports/5647-devcert-command-injection-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/5810-diskstats-command-injection-via-insecure-command2026-10-29 https://bugbountyreports.com/reports/1647-doc-owncloud-org-crlf-injection2026-10-29 https://bugbountyreports.com/reports/8020-doc-rt-informaticacloud-com-arbitrary-file-reading-via2026-10-29 https://bugbountyreports.com/reports/8021-doc-rt-informaticacloud-com-reflected-xss-via-stack-strace2026-10-29 https://bugbountyreports.com/reports/4339-domokeeper-unintended-require2026-10-29 https://bugbountyreports.com/reports/3427-dos-browser-hangs-on-loading-the-code-snippet2026-10-29 https://bugbountyreports.com/reports/3426-dos-denial-of-service-using-code-snippet-on-brave-browser2026-10-29 https://bugbountyreports.com/reports/4051-downloads-mariadb-org-crlf-injection-in-case-of-encoded2026-10-29 https://bugbountyreports.com/reports/7372-dubmash-lack-of-authorization-checks-update-sound-titles2026-10-29 https://bugbountyreports.com/reports/7498-dubsmash-long-string-in-shoutout-parameter-leading-internal2026-10-29 https://bugbountyreports.com/reports/7499-dubsmash-username-and-password-bruteforce2026-10-29 https://bugbountyreports.com/reports/6506-dy-server2-stored-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/1727-ecommerce-shopify-com-invalidated-redirection2026-10-29 https://bugbountyreports.com/reports/2630-edgeswitch-web-gui-command-injection-as-root-with-privilege2026-10-29 https://bugbountyreports.com/reports/3371-ee-change-the-author-of-post-using-the-author-id2026-10-29 https://bugbountyreports.com/reports/3370-ee-spoof-the-redirect-process2026-10-29 https://bugbountyreports.com/reports/3642-egg-scripts-command-injection2026-10-29 https://bugbountyreports.com/reports/3548-engineering-udemy-com-subdomain-takeover-ghost-io2026-10-29 https://bugbountyreports.com/reports/3580-entitlements-command-injection-on-the-path-parameter2026-10-29 https://bugbountyreports.com/reports/3667-exceljs-possible-xss-via-cell-value-when-worksheet-is2026-10-29 https://bugbountyreports.com/reports/6649-experience-uber-com-node-js-source-code-disclosure2026-10-29 https://bugbountyreports.com/reports/3687-express-cart-customer-and-admin-email-enumeration-through2026-10-29 https://bugbountyreports.com/reports/5800-express-cart-wide-csrf-in-application2026-10-29 https://bugbountyreports.com/reports/5115-express-laravel-passport-improper-authentication2026-10-29 https://bugbountyreports.com/reports/6168-expressjs-ip-control-whitelist-ip-bypass-leads-to2026-10-29 https://bugbountyreports.com/reports/6001-extend-merge-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/5944-extra-asciinema-command-injection-via-insecure-command2026-10-29 https://bugbountyreports.com/reports/5928-extra-ffmpeg-command-injection-via-insecure-command2026-10-29 https://bugbountyreports.com/reports/3156-featurebook-specification-server-directory-traversal-via2026-10-29 https://bugbountyreports.com/reports/3605-fg-vd-17-063-nextcloud-insufficient-attack-protection2026-10-29 https://bugbountyreports.com/reports/4638-fg-vd-18-165-wordpress-cross-site-scripting-vulnerability2026-10-29 https://bugbountyreports.com/reports/4149-fg-vd-19-022-wordpress-woocommerce-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/5151-file-browser-inadequate-output-encoding-and-escaping2026-10-29 https://bugbountyreports.com/reports/3520-file-static-server-path-traversal-allows-to-read-content-of2026-10-29 https://bugbountyreports.com/reports/5101-fileview-inadequate-output-encoding-and-escaping2026-10-29 https://bugbountyreports.com/reports/6669-first-30-stored-xss-on-login-uber-com-oauth-v2-authorize2026-10-29 https://bugbountyreports.com/reports/6774-fixed-a-vulnerability-in-kavkis-2020-products-family-allows2026-10-29 https://bugbountyreports.com/reports/6778-fixed-kis-for-macos-is-vulnerable-to-av-bypass-due-to2026-10-29 https://bugbountyreports.com/reports/3634-flintcms-account-takeover-due-to-blind-mongodb-injection-in2026-10-29 https://bugbountyreports.com/reports/6024-flsaba-stored-xss-in-the-file-and-directory-name-when2026-10-29 https://bugbountyreports.com/reports/9579-forum-acronis-com-jndi-code-injection-due-an-outdated-log4j2026-10-29 https://bugbountyreports.com/reports/1478-forum-owncloud-org-ie-edge-xss-via-request-uri2026-10-29 https://bugbountyreports.com/reports/6116-freespace-command-injection-due-to-lack-of-sanitization2026-10-29 https://bugbountyreports.com/reports/3239-gem-server-stored-xss-via-crafted-javascript-url-inclusion2026-10-29 https://bugbountyreports.com/reports/3282-general-file-server-path-traversal-vulnerability-allows-to2026-10-29 https://bugbountyreports.com/reports/6160-gfc-command-injection-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/8300-git-gud-github-com-svnbridge-memcached-deserialization2026-10-29 https://bugbountyreports.com/reports/3527-git-dummy-commit-command-injection-on-the-msg-parameter2026-10-29 https://bugbountyreports.com/reports/6052-git-lib-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/5427-git-promise-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/2183-github-extension-unsanitised-html-leading-to-xss-on-github2026-10-29 https://bugbountyreports.com/reports/2106-github-algolia-com-dom-based-xss-github-btn-html2026-10-29 https://bugbountyreports.com/reports/1495-github-algolia-com-xss2026-10-29 https://bugbountyreports.com/reports/6056-gity-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/4073-glance-access-unlisted-internal-files-folders-revealing2026-10-29 https://bugbountyreports.com/reports/3266-glance-path-traversal-in-glance-static-file-server-allows2026-10-29 https://bugbountyreports.com/reports/3350-glance-stored-xss-via-file-name-allows-to-run-arbitrary2026-10-29 https://bugbountyreports.com/reports/2229-gnip-blogs-reflected-xss-via-plupload-flash-swf-component2026-10-29 https://bugbountyreports.com/reports/5922-goldsrc-rce-via-spk-console-command2026-10-29 https://bugbountyreports.com/reports/5921-goldsrc-rce-via-malformed-bsp-file2026-10-29 https://bugbountyreports.com/reports/6866-goldsrc-remote-code-execution-using-malicious-wad-list-in2026-10-29 https://bugbountyreports.com/reports/4097-grab-android-ios-insecure-deeplink-leads-to-sensitive2026-10-29 https://bugbountyreports.com/reports/690-gratipay-com-crlf-injection2026-10-29 https://bugbountyreports.com/reports/1646-greenhouse-io-crlf-injection-insecure-nginx-configuration2026-10-29 https://bugbountyreports.com/reports/3261-growth-grab-com-reflected-xss-via-base64-encoded-q-param-on2026-10-29 https://bugbountyreports.com/reports/6479-h1-hackyholidays-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5679-h1-2006-2020-swiss-cheese-design-style-leads-to-helping-m2026-10-29 https://bugbountyreports.com/reports/5678-h1-2006-2020-ctf-writeup-a-story-about-bounty-payments2026-10-29 https://bugbountyreports.com/reports/5663-h1-2006-2020-multiple-vulnerability-ctf-writeup-abdilahrf2026-10-29 https://bugbountyreports.com/reports/5666-h1-2006-2020-flag-736c635d8842751b8aafa556154eb9f3-flag2026-10-29 https://bugbountyreports.com/reports/5665-h1-2006-2020-36-hours-of-brain-cycles-utilized-on-solving-a2026-10-29 https://bugbountyreports.com/reports/5656-h1-2006-2020-bounty-pay-ctf-challenge2026-10-29 https://bugbountyreports.com/reports/6031-h1-2006-2020-bounty-payments-are-done2026-10-29 https://bugbountyreports.com/reports/5700-h1-2006-2020-bypassing-access-control-checks-by-modifying2026-10-29 https://bugbountyreports.com/reports/5671-h1-2006-2020-chained-vulnerabilities-lead-to-account2026-10-29 https://bugbountyreports.com/reports/5659-h1-2006-2020-connecting-the-dots-to-send-hackers-their-bug2026-10-29 https://bugbountyreports.com/reports/5677-h1-2006-2020-ctf2026-10-29 https://bugbountyreports.com/reports/5661-h1-2006-2020-ctf-walkthrough2026-10-29 https://bugbountyreports.com/reports/5669-h1-2006-2020-ctf-write-up2026-10-29 https://bugbountyreports.com/reports/5684-h1-2006-2020-ctf-write-up2026-10-29 https://bugbountyreports.com/reports/5680-h1-2006-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5674-h1-2006-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5676-h1-2006-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5697-h1-2006-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5704-h1-2006-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5764-h1-2006-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5654-h1-2006-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5668-h1-2006-2020-exploiting-multiple-vulnerabilities-to-get2026-10-29 https://bugbountyreports.com/reports/5658-h1-2006-2020-flag-for-h1-ctf2026-10-29 https://bugbountyreports.com/reports/5696-h1-2006-2020-from-multiple-vulnerabilities-to-complete-ato2026-10-29 https://bugbountyreports.com/reports/5731-h1-2006-2020-got-the-flag2026-10-29 https://bugbountyreports.com/reports/5667-h1-2006-2020-h1-2006-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5675-h1-2006-2020-h1-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5682-h1-2006-2020-how-i-solved-my-first-h1-ctf2026-10-29 https://bugbountyreports.com/reports/5688-h1-2006-2020-i-made-the-ceo-s-bounty-payment2026-10-29 https://bugbountyreports.com/reports/5662-h1-2006-2020-i-successfully-solved-it2026-10-29 https://bugbountyreports.com/reports/5683-h1-2006-2020-in-depth-resolution-of-the-h1-2006-ctf2026-10-29 https://bugbountyreports.com/reports/5670-h1-2006-2020-includes-1-free-content-discovery2026-10-29 https://bugbountyreports.com/reports/5698-h1-2006-2020-multiple-vulnerabilities-allow-to-leak2026-10-29 https://bugbountyreports.com/reports/5681-h1-2006-2020-multiple-vulnerabilities-lead-to-ceo-account2026-10-29 https://bugbountyreports.com/reports/5655-h1-2006-2020-multiple-vulnerabilities-leading-account2026-10-29 https://bugbountyreports.com/reports/5672-h1-2006-2020-solution-for-the-h1-2006-ctf-challenge2026-10-29 https://bugbountyreports.com/reports/5691-h1-2006-2020-the-story-of-making-bounty-hunters-happy2026-10-29 https://bugbountyreports.com/reports/5660-h1-2006-2020-write-up-for-h1-2006-ctf2026-10-29 https://bugbountyreports.com/reports/5657-h1-2006-2020-writeup2026-10-29 https://bugbountyreports.com/reports/5690-h1-2006-2020-writeup-h12006-ctf2026-10-29 https://bugbountyreports.com/reports/5762-h1-2006-ctf-multiple-vulnerabilities-leading-to-account2026-10-29 https://bugbountyreports.com/reports/5693-h1-2006-ctf-payments-for-may-have-been-processed2026-10-29 https://bugbountyreports.com/reports/5692-h1-2006-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/9157-h1-2102-oberlo-least-privileged-user-can-cancel-account2026-10-29 https://bugbountyreports.com/reports/7782-h1-2102-plus-user-with-store-management-permission-can-make2026-10-29 https://bugbountyreports.com/reports/7781-h1-2102-plus-user-with-store-management-permission-can-make2026-10-29 https://bugbountyreports.com/reports/7780-h1-2102-plus-user-with-store-management-permission-can-make2026-10-29 https://bugbountyreports.com/reports/6807-h1-2102-yaworski-s-broskis-low-privilege-user-can-read-pos2026-10-29 https://bugbountyreports.com/reports/7479-h1-2102-yaworski-s-broskis-suspected-overcharge-and2026-10-29 https://bugbountyreports.com/reports/7615-h1-2102-break-permissions-waterfall2026-10-29 https://bugbountyreports.com/reports/6756-h1-2102-fqdn-takeover-on-all-shopify-wholesale-customer2026-10-29 https://bugbountyreports.com/reports/7990-h1-2102-html-injection-in-packing-slips-can-lead-to2026-10-29 https://bugbountyreports.com/reports/7778-h1-2102-improper-access-control-at-https-shopify-plus-id2026-10-29 https://bugbountyreports.com/reports/7988-h1-2102-improper-access-control-at-https-shopify-plus-id2026-10-29 https://bugbountyreports.com/reports/7611-h1-2102-information-disclosure-shopifyplus-add-user2026-10-29 https://bugbountyreports.com/reports/6808-h1-2102-partner-s-team-member-with-no-permission-can2026-10-29 https://bugbountyreports.com/reports/7999-h1-2102-shopapps-query-from-the-graphql-at-users-api2026-10-29 https://bugbountyreports.com/reports/7989-h1-2102-stored-xss-in-product-description-via-productupdate2026-10-29 https://bugbountyreports.com/reports/7484-h1-2102-wholesale-csrf-to-generate-invitation-token-for-a2026-10-29 https://bugbountyreports.com/reports/5191-h1-415-2020-bayotop-h1-415-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5189-h1-415-2020-chain-of-vulnerabilities-leading-to-account2026-10-29 https://bugbountyreports.com/reports/5187-h1-415-2020-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/5188-h1-415-2020-finally2026-10-29 https://bugbountyreports.com/reports/5190-h1-415-2020-h1-415-ctf-writeup-by-w2026-10-29 https://bugbountyreports.com/reports/5186-h1-415-2020-h1ctf-y3s-1m-c0sm1c-n0w2026-10-29 https://bugbountyreports.com/reports/5183-h1-415-2020-i-found-joberts-missing-file2026-10-29 https://bugbountyreports.com/reports/5184-h1-415-2020-i-got-the-flag2026-10-29 https://bugbountyreports.com/reports/5185-h1-415-2020-multiple-chained-vulnerabilities-lead-to2026-10-29 https://bugbountyreports.com/reports/5181-h1-415-2020-multiple-vulnerabilities-leading-to-leaking-of2026-10-29 https://bugbountyreports.com/reports/5192-h1-415-2020-my-writeup-on-how-to-retrieve-the-special2026-10-29 https://bugbountyreports.com/reports/5182-h1-415-2020-solution-for-h1415-s-ctf-challenge2026-10-29 https://bugbountyreports.com/reports/5193-h1-415-2020-spent-a-week-and-failed-at-solving-the-last-step2026-10-29 https://bugbountyreports.com/reports/5194-h1-415-2020-ssrf-in-a-headless-chrome-with-remote-debugging2026-10-29 https://bugbountyreports.com/reports/6453-h1-ctf-12-days-of-adventure-to-stop-grinch-from-ruining2026-10-29 https://bugbountyreports.com/reports/6466-h1ctf-grinch-networks-mrr3b00t-saving-the-christmas2026-10-29 https://bugbountyreports.com/reports/6481-hacky-holidays-grinch-network-is-down2026-10-29 https://bugbountyreports.com/reports/6480-hackyholidays-ctf-write-up2026-10-29 https://bugbountyreports.com/reports/6047-half-life-1-malformed-map-name-leads-to-memory-corruption2026-10-29 https://bugbountyreports.com/reports/5984-hangersteak-web-server-directory-traversal-via-crafted-get2026-10-29 https://bugbountyreports.com/reports/4151-harp-file-access-even-when-they-have-been-set-to-be-ignored2026-10-29 https://bugbountyreports.com/reports/4155-harp-path-traversal-using-symlink2026-10-29 https://bugbountyreports.com/reports/4150-harp-unsafe-rendering-of-markdown-files2026-10-29 https://bugbountyreports.com/reports/3473-hekto-open-redirect-when-target-domain-name-is-used-as-html2026-10-29 https://bugbountyreports.com/reports/3254-hekto-path-traversal-vulnerability-allows-to-read-content2026-10-29 https://bugbountyreports.com/reports/4015-help-steampowered-com-account-takeover-bruteforcing2026-10-29 https://bugbountyreports.com/reports/6053-hnzserver-path-traversal-allowing-to-read-any-files-on-the2026-10-29 https://bugbountyreports.com/reports/2271-hosted-weblate-org-account-takeover2026-10-29 https://bugbountyreports.com/reports/8222-hta2-receiving-access-request-on-wearehackerone-com-email2026-10-29 https://bugbountyreports.com/reports/8709-hta2-xxe-on-https-via-spellcheck-endpoint2026-10-29 https://bugbountyreports.com/reports/8223-hta3-chain-of-esi-injection-reflected-xss-leading-to2026-10-29 https://bugbountyreports.com/reports/8708-hta3-remote-code-execution-on2026-10-29 https://bugbountyreports.com/reports/8146-hta3-remote-code-execution-on-https-via-improper-access2026-10-29 https://bugbountyreports.com/reports/7117-htaf4-213-pre-submission-cve-2018-2879-padding-oracle2026-10-29 https://bugbountyreports.com/reports/9395-htaf4-213-pre-submission-httponly-session-cookie-exposure2026-10-29 https://bugbountyreports.com/reports/9392-htaf4-213-pre-submission-unsafe-amf-deserialization-cve2026-10-29 https://bugbountyreports.com/reports/9388-htaf4-213-pre-submission-xss-via-arbitrary-cookie-name-at2026-10-29 https://bugbountyreports.com/reports/3198-html-janitor-bypassing-sanitization-using-dom-clobbering2026-10-29 https://bugbountyreports.com/reports/3207-html-janitor-passing-user-controlled-data-to-clean-leads-to2026-10-29 https://bugbountyreports.com/reports/3470-html-pages-path-traversal-in-html-pages-module-allows-to2026-10-29 https://bugbountyreports.com/reports/3513-html-pages-stored-xss-in-the-filename-when-directories2026-10-29 https://bugbountyreports.com/reports/5319-htmr-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/6055-http-server-path-traversal-allowing-to-read-any-files-on2026-10-29 https://bugbountyreports.com/reports/4509-http-server-stored-xss-in-the-filename-when-directories2026-10-29 https://bugbountyreports.com/reports/4350-http-file-server-list-any-files-and-sub-folders-in-the2026-10-29 https://bugbountyreports.com/reports/4380-http-file-server-stored-xss-in-the-filename-when2026-10-29 https://bugbountyreports.com/reports/6153-http-live-simulator-application-level-dos2026-10-29 https://bugbountyreports.com/reports/3980-http-live-simulator-path-traversal-vulnerability2026-10-29 https://bugbountyreports.com/reports/3249-http-www-informatica-com-info-disclosure2026-10-29 https://bugbountyreports.com/reports/4535-https-proxy-agent-socket-returned-without-tls-upgrade-on2026-10-29 https://bugbountyreports.com/reports/5493-https-local-file-inclusion-via-graph-php2026-10-29 https://bugbountyreports.com/reports/7690-https-https-open-redirection2026-10-29 https://bugbountyreports.com/reports/7571-https-app-recordedfuture-com-reflected-xss-via-username2026-10-29 https://bugbountyreports.com/reports/2167-https-jenkins-brew-sh-jenkins-in-debug-mode-with-stack2026-10-29 https://bugbountyreports.com/reports/4358-https-life-informatica-com-information-disclose2026-10-29 https://bugbountyreports.com/reports/3194-https-reviews-zomato-com-time-based-sql-injection2026-10-29 https://bugbountyreports.com/reports/7764-https-shipit-sox-staging-shopifycloud-com-presence-of2026-10-29 https://bugbountyreports.com/reports/887-https-test1-owncloud-com-owncloud6-guessable-password-used2026-10-29 https://bugbountyreports.com/reports/8828-hubs-broken-access-control-in-placing-objects-in-hubs-room2026-10-29 https://bugbountyreports.com/reports/6846-i18next-prototype-pollution-attack2026-10-29 https://bugbountyreports.com/reports/4973-idor-attacker-user-can-approve-decline-afk-on-the-behalf-of2026-10-29 https://bugbountyreports.com/reports/9399-idor-improper-access-control-on-embedded-submission-form2026-10-29 https://bugbountyreports.com/reports/7550-idor-modify-other-team-s-reminders-via-reminderid-parameter2026-10-29 https://bugbountyreports.com/reports/2805-idor-the-authenticated-user-can-restart-website-build-or2026-10-29 https://bugbountyreports.com/reports/2243-idor-translate-twitter-com-opportunity-to-change-any2026-10-29 https://bugbountyreports.com/reports/3850-idp-fr-cloud-gov-open-redirect2026-10-29 https://bugbountyreports.com/reports/6508-imagickal-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/2056-imp-blind-xss-in-the-admin-panel-for-reviewing-comments2026-10-29 https://bugbountyreports.com/reports/5178-increments-sql-injection2026-10-29 https://bugbountyreports.com/reports/8669-indy-node-pool-upgrade-command-injection-trustee-node-can2026-10-29 https://bugbountyreports.com/reports/1092-informatica-com-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/2985-informatica-com-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/3673-informatica-com-information-disclosure2026-10-29 https://bugbountyreports.com/reports/6296-information-disclosure-amazon-s3-bucket-of-shopify-ping-ios2026-10-29 https://bugbountyreports.com/reports/6698-information-disclosure-validate-existence-of-a-private2026-10-29 https://bugbountyreports.com/reports/3529-informational-possible-sql-injection-in-inc-ajax-actions2026-10-29 https://bugbountyreports.com/reports/3386-insideok-ru-database-dump2026-10-29 https://bugbountyreports.com/reports/4527-insideok-ru-remote-command-execution-via-file-upload2026-10-29 https://bugbountyreports.com/reports/6542-intensedebate-com-no-rate-limit-on-the-report-functionality2026-10-29 https://bugbountyreports.com/reports/6581-intensedebate-com-open-redirect2026-10-29 https://bugbountyreports.com/reports/6418-intensedebate-com-sql-injection-time-based-on2026-10-29 https://bugbountyreports.com/reports/6417-intensedebate-com-sql-injection-time-based-on-js2026-10-29 https://bugbountyreports.com/reports/6517-intensedebate-com-xss-reflected-post-based2026-10-29 https://bugbountyreports.com/reports/6543-intensedebate-com-xss-reflected-post-based-on-update2026-10-29 https://bugbountyreports.com/reports/1432-iodr-get-business-trip-via-organization-id2026-10-29 https://bugbountyreports.com/reports/1632-ios-address-bar-spoofing-in-brave-for-ios2026-10-29 https://bugbountyreports.com/reports/2683-ios-url-can-be-replacestate-by-blob-url-in-ios-brave2026-10-29 https://bugbountyreports.com/reports/1816-ios-android-address-bar-spoofing-vulnerability2026-10-29 https://bugbountyreports.com/reports/1867-ipm-informatica-com-sql-injection-oracle2026-10-29 https://bugbountyreports.com/reports/2137-ipm-informatica-com-broken-authentication2026-10-29 https://bugbountyreports.com/reports/3013-irccloud-android-opening-arbitrary-urls-xss-in2026-10-29 https://bugbountyreports.com/reports/3051-irccloud-android-theft-of-arbitrary-files-leading-to-token2026-10-29 https://bugbountyreports.com/reports/3012-irccloud-android-xss-in-imagevieweractivity2026-10-29 https://bugbountyreports.com/reports/5852-is-my-json-valid-redos-via-style-format2026-10-29 https://bugbountyreports.com/reports/7456-jitsi-meet-authentication-bypass-when-using-jwt-w-public2026-10-29 https://bugbountyreports.com/reports/5965-json-bigint-dos-via-proto-assignment2026-10-29 https://bugbountyreports.com/reports/6131-json8-merge-patch-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/5204-jsreport-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/8286-kafka-connect-jdbcsinkconnector-httpsinkconnector-rce-by2026-10-29 https://bugbountyreports.com/reports/4430-kb-informatica-com-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/2515-kb-informatica-com-dom-based-xss-in-the-bindbreadcrumb2026-10-29 https://bugbountyreports.com/reports/2129-kb-informatica-com-stored-xss2026-10-29 https://bugbountyreports.com/reports/1707-kb-informatica-com-unauthenticated-emails-and-html2026-10-29 https://bugbountyreports.com/reports/6022-keyd-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/5140-klona-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/3855-knightjs-path-traversal-allows-to-read-content-of-arbitrary2026-10-29 https://bugbountyreports.com/reports/3180-lactate-static-web-server-directory-traversal-via-crafted2026-10-29 https://bugbountyreports.com/reports/7099-lark-android-vulnerability-in-exported-activity-webview2026-10-29 https://bugbountyreports.com/reports/4436-larvitbase-api-unintended-require2026-10-29 https://bugbountyreports.com/reports/4478-larvitbase-www-unintended-require2026-10-29 https://bugbountyreports.com/reports/6323-last-commit-log-command-injection2026-10-29 https://bugbountyreports.com/reports/5590-limited-bypass-of-793704-blind-ssrf-in-ghost-cms2026-10-29 https://bugbountyreports.com/reports/5177-listening-processes-command-injection2026-10-29 https://bugbountyreports.com/reports/907-livechat-shopify-com-cookie-bomb-at-customer-chats2026-10-29 https://bugbountyreports.com/reports/3495-localhost-now-bypassing-url-filter-which-leads-to-read2026-10-29 https://bugbountyreports.com/reports/3250-localhost-now-path-traversal-allows-to-read-content-of2026-10-29 https://bugbountyreports.com/reports/5460-logkitty-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/3574-m-server-html-injection-in-filenames-displayed-as-directory2026-10-29 https://bugbountyreports.com/reports/3573-m-server-path-traversal-allows-to-display-content-of2026-10-29 https://bugbountyreports.com/reports/6062-m-server-xss-reflected-because-path-does-not-escapehtml2026-10-29 https://bugbountyreports.com/reports/3325-m-airbnb-com-crlf-injection2026-10-29 https://bugbountyreports.com/reports/6440-m-vk-com-xss-artist2026-10-29 https://bugbountyreports.com/reports/6648-manage-jumpbikes-com-blind-xss-on-jump-admin-panel-via-user2026-10-29 https://bugbountyreports.com/reports/3589-markdown-pdf-local-file-reading2026-10-29 https://bugbountyreports.com/reports/2932-markdown-stored-xss-via-character-encoding-parser-bypass2026-10-29 https://bugbountyreports.com/reports/3124-marketplace-informatica-com-sensitive-data-exposure2026-10-29 https://bugbountyreports.com/reports/3120-marketplace-informatica-com-stored-xss2026-10-29 https://bugbountyreports.com/reports/3149-marketplace-informatica-com-template-injection2026-10-29 https://bugbountyreports.com/reports/1739-marketplace-informatica-com-xxe2026-10-29 https://bugbountyreports.com/reports/1305-marketplace-informatica-com-open-redirect2026-10-29 https://bugbountyreports.com/reports/1884-marketplace-informatica-com-persistent-xss-through-document2026-10-29 https://bugbountyreports.com/reports/2171-marketplace-informatica-com-profile-stored-xss2026-10-29 https://bugbountyreports.com/reports/2331-marketplace-informatica-com-search-xss2026-10-29 https://bugbountyreports.com/reports/3023-marketplace-informatica-com-user-email-disclosure2026-10-29 https://bugbountyreports.com/reports/2177-marketplace-informatica-com-stored-xss-on-image-title-and2026-10-29 https://bugbountyreports.com/reports/3121-marketplace-informatica-com-reflected-xss2026-10-29 https://bugbountyreports.com/reports/3379-mcstatic-path-traversal-allows-to-read-content-of-arbitrary2026-10-29 https://bugbountyreports.com/reports/3514-mcstatic-server-directory-traversal2026-10-29 https://bugbountyreports.com/reports/5152-md-fileserver-path-traversal2026-10-29 https://bugbountyreports.com/reports/5945-meemo-app-denial-of-service-via-ldap-injection2026-10-29 https://bugbountyreports.com/reports/9402-meetup-world-id-oidc-insufficient-filtering-of-state2026-10-29 https://bugbountyreports.com/reports/4551-mena-starbucks-com-laravel-app-log-configuration-disclosure2026-10-29 https://bugbountyreports.com/reports/3660-mercantile-wordpress-org-reflected-xss2026-10-29 https://bugbountyreports.com/reports/2451-mercantile-wordpress-org-reflected-xss-via-angularjs2026-10-29 https://bugbountyreports.com/reports/5120-meta-git-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/3298-metascraper-stored-xss-in-open-graph-meta-properties-read2026-10-29 https://bugbountyreports.com/reports/5966-min-http-server-list-any-file-in-the-folder-by-using-path2026-10-29 https://bugbountyreports.com/reports/4379-min-http-server-stored-xss-in-the-filename-when-directories2026-10-29 https://bugbountyreports.com/reports/8895-mk8dx-improper-metadata-parsing2026-10-29 https://bugbountyreports.com/reports/8896-mk8dx-improper-metadata-validation-22026-10-29 https://bugbountyreports.com/reports/9969-mk8dx-improper-ranking-replay-file-parsing2026-10-29 https://bugbountyreports.com/reports/8366-mk8dx-improper-verification-of-competition-creation-allows2026-10-29 https://bugbountyreports.com/reports/539-mobile-twitter-com-twitter-com-csrf-protection-bypass2026-10-29 https://bugbountyreports.com/reports/9587-monero-wallet-rpc-file-precreation-to-file-ownership-and2026-10-29 https://bugbountyreports.com/reports/7323-mtn-com-af-multiple-vulnerabilities-allow-to-application2026-10-29 https://bugbountyreports.com/reports/10085-my-stripo-email-blind-ssrf-vulnerability-in-stripo-app2026-10-29 https://bugbountyreports.com/reports/6154-nested-property-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/2330-network-informatica-com-the-login-form-xss-via-the-referer2026-10-29 https://bugbountyreports.com/reports/2657-new-feature-password-history-check2026-10-29 https://bugbountyreports.com/reports/2016-newscdn-starbucks-com-crlf-injection-xss2026-10-29 https://bugbountyreports.com/reports/1731-nextcloud-9-0-53-content-spoofing-in-trustdomain-parameter2026-10-29 https://bugbountyreports.com/reports/6530-nextcloud-com-control-character-allowed-in-submit-question2026-10-29 https://bugbountyreports.com/reports/8356-nextcloud-server-moment-js-vulnerable-to-inefficient2026-10-29 https://bugbountyreports.com/reports/5032-node-df-rce-via-insecure-command-concatenation2026-10-29 https://bugbountyreports.com/reports/6240-node-downloader-helper-path-traversal-via-content2026-10-29 https://bugbountyreports.com/reports/5123-node-red-stored-xss-within-flow-s-name-field2026-10-29 https://bugbountyreports.com/reports/3277-node-srv-path-traversal-allows-to-read-arbitrary-files-from2026-10-29 https://bugbountyreports.com/reports/5974-notevil-sandbox-escape-lead-to-rce-on-node-js-and-xss-in2026-10-29 https://bugbountyreports.com/reports/1184-now-informatica-com-reflective-xss2026-10-29 https://bugbountyreports.com/reports/1740-now-informatica-com-reflective-xss2026-10-29 https://bugbountyreports.com/reports/5122-npm-git-publish-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/2100-nutty-ubnt-com-dom-based-xss-nuttyapp-github-btn-html2026-10-29 https://bugbountyreports.com/reports/3356-oauth-token-leak-at-oauth-semrush-com2026-10-29 https://bugbountyreports.com/reports/5927-object-path-set-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/6023-objtools-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/9743-oem-acronis-com-reflected-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/4375-okl-lt-js2026-10-29 https://bugbountyreports.com/reports/4374-okmedia-insideok-ru-web-cache-poisoing-xss2026-10-29 https://bugbountyreports.com/reports/1650-oneclickdrsfdc-test-informatica-com-tomcat-example-scripts2026-10-29 https://bugbountyreports.com/reports/6777-open-s3-bucket-all-uploaded-files-are-public2026-10-29 https://bugbountyreports.com/reports/5064-open-concatenation-of-unsanitized-input-into-exec-command2026-10-29 https://bugbountyreports.com/reports/3571-out-of-scope-toxiproxy-lack-of-csrf-protection-allows-an2026-10-29 https://bugbountyreports.com/reports/2210-parc-informatica-com-reflected-cross-site-scripting-and2026-10-29 https://bugbountyreports.com/reports/2717-parcel-grab-com-dom-xss-at-assets-bower-components-lodash2026-10-29 https://bugbountyreports.com/reports/5374-part-ii-email-confirmation-bypass-in-myshop-myshopify-com2026-10-29 https://bugbountyreports.com/reports/5027-partial-ssn-pii-exposed-through-iperms-presentation-slide2026-10-29 https://bugbountyreports.com/reports/9134-pats-ability-to-leak-comments-from-issues-without-any2026-10-29 https://bugbountyreports.com/reports/9133-pats-token-with-read-only-permissions-on-issues-able-to2026-10-29 https://bugbountyreports.com/reports/4043-paypal-android-remote-theft-of-user-session-using-push2026-10-29 https://bugbountyreports.com/reports/3366-pdfinfojs-command-injection-on-filename-parameter2026-10-29 https://bugbountyreports.com/reports/631-persistent-cross-site-scripting-customers-can-target-admins2026-10-29 https://bugbountyreports.com/reports/6720-plain-object-merge-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/7279-play-mtn-co-za-application-level-dos-via-xmlrpc-php2026-10-29 https://bugbountyreports.com/reports/3586-ponse-path-traversal-in-ponse-module-allows-to-read-any2026-10-29 https://bugbountyreports.com/reports/6887-portal-2-remote-code-execution-via-voice-packets2026-10-29 https://bugbountyreports.com/reports/9302-portswigger-net-path-traversal-al-cms-audioitems2026-10-29 https://bugbountyreports.com/reports/6666-pre-submission-h1-4420-2019-api-access-to-phabricator-on2026-10-29 https://bugbountyreports.com/reports/2681-privilege-escalation-authenticated-users-can-manipulate2026-10-29 https://bugbountyreports.com/reports/2682-privilege-escalation-authenticated-users-can-manipulate2026-10-29 https://bugbountyreports.com/reports/4343-privilege-escalation-shopify-admin-permission-from-settings2026-10-29 https://bugbountyreports.com/reports/10247-privilege-escalation-user-can-pin-unpin-any-comment-on-any2026-10-29 https://bugbountyreports.com/reports/1737-product360-informatica-com-unauthenticated-apache-tomcat-82026-10-29 https://bugbountyreports.com/reports/3095-public-api-wordpress-com-stored-xss-via-crafted-developer2026-10-29 https://bugbountyreports.com/reports/3228-public-path-traversal-allows-to-read-content-of-arbitrary2026-10-29 https://bugbountyreports.com/reports/4452-public-path-traversal-using-symlink2026-10-29 https://bugbountyreports.com/reports/3349-public-stored-xss-in-filenames-in-directory-served-by-public2026-10-29 https://bugbountyreports.com/reports/3512-public-stored-xss-in-the-filename-when-directories-listing2026-10-29 https://bugbountyreports.com/reports/3469-query-mysql-sql-injection-due-to-lack-of-user-input2026-10-29 https://bugbountyreports.com/reports/2776-quora-android-possible-to-steal-arbitrary-files-from-mobile2026-10-29 https://bugbountyreports.com/reports/1010-rails42-we-can-inject-html-tags-when-server-is-using-strip2026-10-29 https://bugbountyreports.com/reports/10099-rce-remote-code-execution-via-react-server-components2026-10-29 https://bugbountyreports.com/reports/1947-rdoc-xss-in-project-readme-files2026-10-29 https://bugbountyreports.com/reports/3179-redis-commander-reflected-swf-xss-via-vulnerable-clipboard2026-10-29 https://bugbountyreports.com/reports/5272-reflected-xss-in-request-url2026-10-29 https://bugbountyreports.com/reports/4577-remote-full-account-takeover-at-https-cas2026-10-29 https://bugbountyreports.com/reports/1807-render-bitstrips-com-stored-xss-via-an-incorrect-avatar2026-10-29 https://bugbountyreports.com/reports/2118-repository-import-open-redirect-via-continue-to-parameter2026-10-29 https://bugbountyreports.com/reports/1949-restructuredtext-xss-in-project-readme-files2026-10-29 https://bugbountyreports.com/reports/1399-rev-app-informatica-com-xxe2026-10-29 https://bugbountyreports.com/reports/1738-rev-app-informatica-com-xxe-via-saml2026-10-29 https://bugbountyreports.com/reports/5234-reveal-js-xss-by-calling-arbitrary-method-via-postmessage2026-10-29 https://bugbountyreports.com/reports/10189-revive-adserver-reflected-xss-in-banner-delivery-options2026-10-29 https://bugbountyreports.com/reports/745-s3-owncloud-com-web-server-http-trace-track-method-support2026-10-29 https://bugbountyreports.com/reports/3671-samsung-remote-command-injection2026-10-29 https://bugbountyreports.com/reports/5687-sapper-path-traversal2026-10-29 https://bugbountyreports.com/reports/1965-scores-ubnt-com-dom-based-xss-at-form-html2026-10-29 https://bugbountyreports.com/reports/1866-screenhero-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/5203-script-manager-unintended-require2026-10-29 https://bugbountyreports.com/reports/5705-security-vulnerability-rocket-chat-html-injection-into2026-10-29 https://bugbountyreports.com/reports/9914-security-cve-2024-50379-apache-tomcat-rce-via-write-enabled2026-10-29 https://bugbountyreports.com/reports/5105-seeftl-stored-xss-when-directory-listing-via-filename2026-10-29 https://bugbountyreports.com/reports/4310-serve-here-js-list-any-file-in-the-folder-by-using-path2026-10-29 https://bugbountyreports.com/reports/3155-serve-here-static-web-server-directory-traversal-via2026-10-29 https://bugbountyreports.com/reports/4042-serve-access-unlisted-internal-files-folders-revealing2026-10-29 https://bugbountyreports.com/reports/3182-serve-directory-index-of-arbitrary-folder-available-due-to2026-10-29 https://bugbountyreports.com/reports/3498-serve-directory-listing-and-file-access-even-when-they-have2026-10-29 https://bugbountyreports.com/reports/3494-serve-directory-listing-and-file-access-even-when-they-have2026-10-29 https://bugbountyreports.com/reports/3285-serve-directory-listing-and-file-access-even-when-they-have2026-10-29 https://bugbountyreports.com/reports/3554-serve-server-directory-traversal2026-10-29 https://bugbountyreports.com/reports/3804-serve-stored-xss-in-the-filename-when-directories-listing2026-10-29 https://bugbountyreports.com/reports/3802-serve-xss-via-html-tag-injection-in-directory-lisiting-page2026-10-29 https://bugbountyreports.com/reports/4128-servey-path-traversal-allows-to-retrieve-content-of-any2026-10-29 https://bugbountyreports.com/reports/3488-sexstatic-html-injection-in-directory-name-s-leads-to2026-10-29 https://bugbountyreports.com/reports/3260-simple-server-html-with-iframe-element-can-be-used-as2026-10-29 https://bugbountyreports.com/reports/3659-simplehttpserver-list-any-file-in-the-folder-by-using-path2026-10-29 https://bugbountyreports.com/reports/3253-simplehttpserver-stored-xss-in-file-names-leads-to2026-10-29 https://bugbountyreports.com/reports/3094-simplenote-for-windows-client-rce-via-external-javascript2026-10-29 https://bugbountyreports.com/reports/5983-sirloin-web-server-directory-traversal-via-crafted-get2026-10-29 https://bugbountyreports.com/reports/3317-sms-be-vip-twitter-com-vulnerable-to-jetleak2026-10-29 https://bugbountyreports.com/reports/6058-snekserve-stored-xss-via-filenames-html-formatted2026-10-29 https://bugbountyreports.com/reports/6557-socket-io-cross-site-websocket-hijacking2026-10-29 https://bugbountyreports.com/reports/8450-song-link-open-redirect2026-10-29 https://bugbountyreports.com/reports/6873-source-engine-material-path-truncation-leads-to-remote-code2026-10-29 https://bugbountyreports.com/reports/2686-spectacles-com-bypassing-quantity-limit-in-orders2026-10-29 https://bugbountyreports.com/reports/10413-splatoon-3-kick-other-players-with-nplnlogin-message2026-10-29 https://bugbountyreports.com/reports/9379-spot-check-ability-to-disclose-metadata-about-spot-checks2026-10-29 https://bugbountyreports.com/reports/6307-sqli-time-bassed-injection-at-via-library-php-c-g142026-10-29 https://bugbountyreports.com/reports/6122-sqli-time-bassed-injection-at-via-referer-header2026-10-29 https://bugbountyreports.com/reports/9224-ssrf-my-stripo-email-via-the-setup-wizard-parameter2026-10-29 https://bugbountyreports.com/reports/3177-stagecafrstore-starbucks-com-crlf-injection-xss2026-10-29 https://bugbountyreports.com/reports/3851-staging-engineering-gnip-com-publicly-accessible-git2026-10-29 https://bugbountyreports.com/reports/3989-static-resource-server-path-traversal-allows-to-read2026-10-29 https://bugbountyreports.com/reports/5991-static-server-gx-path-traversal-allowing-to-read-any-files2026-10-29 https://bugbountyreports.com/reports/4443-statichttpserver-list-any-file-in-the-folder-by-using-path2026-10-29 https://bugbountyreports.com/reports/4126-statics-server-path-traversal-due-to-lack-of-provided-path2026-10-29 https://bugbountyreports.com/reports/3576-statics-server-xss-via-injected-iframe-in-file-name-when2026-10-29 https://bugbountyreports.com/reports/3275-stattic-inproper-path-validation-leads-to-path-traversal2026-10-29 https://bugbountyreports.com/reports/6048-steam-client-opening-a-specific-steam-url-overwrites-files2026-10-29 https://bugbountyreports.com/reports/1403-stored-cross-site-scripting-when-search-about-incoming2026-10-29 https://bugbountyreports.com/reports/1317-stored-xss-in-debtor-reports-of-invoices2026-10-29 https://bugbountyreports.com/reports/1203-stored-xss-sandbox-veris-in2026-10-29 https://bugbountyreports.com/reports/482-stored-xss-vine-co-profile-page2026-10-29 https://bugbountyreports.com/reports/2495-studio-twitter-com-see-someone-else-pics2026-10-29 https://bugbountyreports.com/reports/6594-sub-wordpress-com-xss-when-adjust-block-poll-confirmation2026-10-29 https://bugbountyreports.com/reports/2098-subgroups-unprivileged-user-can-disclose-private-group-names2026-10-29 https://bugbountyreports.com/reports/5929-supermixer-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/3193-support-wordcamp-org-publicly-accessible-svn-repository2026-10-29 https://bugbountyreports.com/reports/7139-swiftype-stored-xss-via-document-field-url-triggers-on2026-10-29 https://bugbountyreports.com/reports/9617-switch-pia-mk8dx-stack-buffer-overflow-and-potential-rce-in2026-10-29 https://bugbountyreports.com/reports/10617-switch-remote-stack-buffer-overflow-in-the-ldn-lp2p-dhcp2026-10-29 https://bugbountyreports.com/reports/6251-systeminformation-command-injection-via-insecure-command2026-10-29 https://bugbountyreports.com/reports/3856-takeapeek-path-traversal-allow-to-expose-directory-and-files2026-10-29 https://bugbountyreports.com/reports/4324-takeapeek-xss-via-html-tag-injection-in-directory-lisiting2026-10-29 https://bugbountyreports.com/reports/1948-textile-xss-in-project-readme-files2026-10-29 https://bugbountyreports.com/reports/3805-theacademy-upserve-com-reflected-xss-query-string2026-10-29 https://bugbountyreports.com/reports/1649-thirdparty-stored-xss-in-chat-module-nextcloud-server-9-02026-10-29 https://bugbountyreports.com/reports/6111-tianma-static-security-issue-with-xss2026-10-29 https://bugbountyreports.com/reports/3857-tianma-static-stored-xss-on-filename2026-10-29 https://bugbountyreports.com/reports/2935-tor-control-connection-pre-auth-dos-infinite-loop-with2026-10-29 https://bugbountyreports.com/reports/2936-tor-libevent-dns-oob-read2026-10-29 https://bugbountyreports.com/reports/2939-tor-libevent-dns-remote-stack-overread-vulnerability2026-10-29 https://bugbountyreports.com/reports/3077-tor-pre-emptive-defenses-potential-vulnerabilities2026-10-29 https://bugbountyreports.com/reports/5428-total-js-path-traversal-vulnerability-allows-to-read-files2026-10-29 https://bugbountyreports.com/reports/7492-transportation-management-services-solution-2-0-improper2026-10-29 https://bugbountyreports.com/reports/5034-tree-kill-rce-via-insecure-command-concatenation-only2026-10-29 https://bugbountyreports.com/reports/5033-treekill-rce-via-insecure-command-concatenation-only-windows2026-10-29 https://bugbountyreports.com/reports/6167-ts-dot-prop-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/5779-tumblr-com-69-firefox-only-xss-reflected2026-10-29 https://bugbountyreports.com/reports/6404-tumblr-com-csrf-in-svc-user-filtered-content2026-10-29 https://bugbountyreports.com/reports/5071-twitter-open-source-releases-were-are-built-executed-tested2026-10-29 https://bugbountyreports.com/reports/4120-typeorm-sql-injection2026-10-29 https://bugbountyreports.com/reports/8461-u-s-air-force-information-disclosure-due-unauthenticated2026-10-29 https://bugbountyreports.com/reports/8572-uchat-uberinternals-com-mattermost-doesn-t-check-origin-in2026-10-29 https://bugbountyreports.com/reports/1977-uk-informatica-com-xss-on-uk-informatica-com2026-10-29 https://bugbountyreports.com/reports/4294-untitled-model-sql-injection2026-10-29 https://bugbountyreports.com/reports/5735-uppy-internal-server-side-request-forgery-bypass-of-7869562026-10-29 https://bugbountyreports.com/reports/532-urgent-issue-add-or-delete-the-videos-in-watch-later-list2026-10-29 https://bugbountyreports.com/reports/7881-urgent-critical-vulnerability-rce-on-vulnerable-to-remote2026-10-29 https://bugbountyreports.com/reports/4200-urgent-invalidating-oauth2-bearer-token-makes-tweetdeck2026-10-29 https://bugbountyreports.com/reports/2336-urgent-opportunity-to-publish-tweets-on-any-twitters-account2026-10-29 https://bugbountyreports.com/reports/5147-url-parse-improper-validation-and-sanitization2026-10-29 https://bugbountyreports.com/reports/8374-user-oidc-stored-xss-via-authorization-endpoint-safari-only2026-10-29 https://bugbountyreports.com/reports/8373-user-oidc-unencrypted-communications2026-10-29 https://bugbountyreports.com/reports/6662-usuppliers-uber-com-server-side-request-forgery-via-xxe-oob2026-10-29 https://bugbountyreports.com/reports/5376-utils-extend-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/3806-ux-shopify-com-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/2917-ux-notify-user-on-likely-email-address-typo2026-10-29 https://bugbountyreports.com/reports/10271-variation-of-1554049-1-click-chaining-of-self-xss-cookie2026-10-29 https://bugbountyreports.com/reports/10272-variation-of-3321406-yetanother-1-click-chaining-of-self2026-10-29 https://bugbountyreports.com/reports/5926-vboxmanage-js-command-injection-via-insecure-command2026-10-29 https://bugbountyreports.com/reports/4044-venmo-android-remote-theft-of-user-session2026-10-29 https://bugbountyreports.com/reports/10267-vertical-privilege-escalation-user-can-unapproved-any2026-10-29 https://bugbountyreports.com/reports/1631-vimeopro-com-crlf-injection2026-10-29 https://bugbountyreports.com/reports/6942-vk-android-access-to-app-protected-components-leads-to2026-10-29 https://bugbountyreports.com/reports/3417-vulners-com-nginx-alias-traversal2026-10-29 https://bugbountyreports.com/reports/3807-wakatime-com-html-injection-github-btn-html2026-10-29 https://bugbountyreports.com/reports/5686-wappalyzer-redos-allows-an-attacker-to-completely-break2026-10-29 https://bugbountyreports.com/reports/5872-wappalyzer-redos-allows-an-attacker-to-completely-break2026-10-29 https://bugbountyreports.com/reports/1961-wave-informatica-com-subdomain-missconfiguration2026-10-29 https://bugbountyreports.com/reports/5104-webpack-bundle-analyzer-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/1652-website-script-injection-in-newsletter-signup-https-brave2026-10-29 https://bugbountyreports.com/reports/8898-wiiu-switch-nullptr-dereference-in-the-enl-framework2026-10-29 https://bugbountyreports.com/reports/8872-wiiu-switch-remote-code-execution-inside-the-enl-library2026-10-29 https://bugbountyreports.com/reports/5957-windows-edge-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/6825-wireguard-wrapper-command-injection-via-insecure-command2026-10-29 https://bugbountyreports.com/reports/600-www-myshopify-com-crlf-injection2026-10-29 https://bugbountyreports.com/reports/7046-www-reflected-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/7742-www-path-based-reflected-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/3219-www-coursera-org-leaking-password-reset-link-on-referrer2026-10-29 https://bugbountyreports.com/reports/5360-www-drive2-ru-csrf-through-fctx-token-bypass2026-10-29 https://bugbountyreports.com/reports/6137-www-drive2-ru-insufficient-security-configurability-email2026-10-29 https://bugbountyreports.com/reports/6141-www-drive2-ru-insufficient-security-configurability2026-10-29 https://bugbountyreports.com/reports/6142-www-drive2-ru-insufficient-security-configurability2026-10-29 https://bugbountyreports.com/reports/6143-www-drive2-ru-insufficient-security-configurability-the2026-10-29 https://bugbountyreports.com/reports/6144-www-drive2-ru-insufficient-security-configurability-the2026-10-29 https://bugbountyreports.com/reports/6948-www-drive2-ru-insufficient-session-expiration-previously2026-10-29 https://bugbountyreports.com/reports/5596-www-drive2-ru-there-is-no-rate-limit-for-comments-endpoints2026-10-29 https://bugbountyreports.com/reports/5755-www-stripo-email-there-is-no-rate-limit-for-it-contact-us2026-10-29 https://bugbountyreports.com/reports/5566-www-stripo-email-there-is-no-rate-limit-for-contact-us2026-10-29 https://bugbountyreports.com/reports/5741-www-stripo-email-you-can-bypass-the-speed-limit-by-changing2026-10-29 https://bugbountyreports.com/reports/5422-www-stripo-email-you-can-override-the-speed-limit-by-adding2026-10-29 https://bugbountyreports.com/reports/5898-www-yoti-com-wordpress-user-admin-information-discloure2026-10-29 https://bugbountyreports.com/reports/5882-www-zomato-com-abusing-localparams-city-to-inject-solr-query2026-10-29 https://bugbountyreports.com/reports/3393-www-zomato-com-abusing-localparams-to-inject-code-through2026-10-29 https://bugbountyreports.com/reports/4099-www-zomato-com-availing-zomato-gold-membership-for-free-by2026-10-29 https://bugbountyreports.com/reports/5883-www-zomato-com-blind-sql-injection-in-php-geto2banner2026-10-29 https://bugbountyreports.com/reports/5884-www-zomato-com-blind-sql-injection-in-php-widgets-handler2026-10-29 https://bugbountyreports.com/reports/4209-www-zomato-com-blind-xss-in-one-of-the-admin-dashboard2026-10-29 https://bugbountyreports.com/reports/3931-www-zomato-com-blind-xss-in-one-of-the-admin-dashboard2026-10-29 https://bugbountyreports.com/reports/4959-www-zomato-com-blind-xss-on-one-of-the-admin-dashboard2026-10-29 https://bugbountyreports.com/reports/3303-www-zomato-com-boolean-sqli-php2026-10-29 https://bugbountyreports.com/reports/3304-www-zomato-com-boolean-sqli-php2026-10-29 https://bugbountyreports.com/reports/3917-www-zomato-com-cors-misconfiguration-could-lead-to2026-10-29 https://bugbountyreports.com/reports/3385-www-zomato-com-getting-a-complimentary-dessert-zomato2026-10-29 https://bugbountyreports.com/reports/3082-www-zomato-com-idor-delete-deactivate-any-special-menu-of2026-10-29 https://bugbountyreports.com/reports/3137-www-zomato-com-idor-delete-deactivate-any-all-promos2026-10-29 https://bugbountyreports.com/reports/3403-www-zomato-com-idor-gold-subscription-details-able-to-view2026-10-29 https://bugbountyreports.com/reports/2969-www-zomato-com-idor-leaking-all-personal-details-of-all2026-10-29 https://bugbountyreports.com/reports/6621-www-zomato-com-leaking-email-addresses-of-merchants-via2026-10-29 https://bugbountyreports.com/reports/3306-www-zomato-com-privilege-escalation-php-restaurant-menus2026-10-29 https://bugbountyreports.com/reports/3305-www-zomato-com-privilege-escalation-control-reviews2026-10-29 https://bugbountyreports.com/reports/3689-www-zomato-com-sqli-php-item-id2026-10-29 https://bugbountyreports.com/reports/3492-www-zomato-com-sqli-on-order-id-parameter2026-10-29 https://bugbountyreports.com/reports/3695-www-zomato-com-tampering-with-order-quantity-and-paying2026-10-29 https://bugbountyreports.com/reports/2970-www-zomato-com-unauthenticated-access-to-internal-sales2026-10-29 https://bugbountyreports.com/reports/2853-www-zomato-com-union-sqli-waf-bypass2026-10-29 https://bugbountyreports.com/reports/2971-www-zomato-com-dubai-gold-critical-allowing-arbitrary2026-10-29 https://bugbountyreports.com/reports/9903-xenoblade-chronicles-x-definitive-edition-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/9904-xenoblade-chronicles-x-definitive-edition-improper2026-10-29 https://bugbountyreports.com/reports/9905-xenoblade-chronicles-x-definitive-edition-unrestricted-rpcs2026-10-29 https://bugbountyreports.com/reports/5811-xps-command-injection-via-insecure-command-concatenation2026-10-29 https://bugbountyreports.com/reports/8518-xss-reflected-xss-via-post-request2026-10-29 https://bugbountyreports.com/reports/9947-xss-reflected-xss-via-post-request-in2026-10-29 https://bugbountyreports.com/reports/1522-xss-sandbox-veris-in2026-10-29 https://bugbountyreports.com/reports/5251-yarn-yarn-lock-integrity-hash-check-logic-is-broken2026-10-29 https://bugbountyreports.com/reports/1642-zaption-com-open-redirect2026-10-29 https://bugbountyreports.com/reports/6169-zenn-cli-path-traversal-on-windows-allows-the-attacker-to2026-10-29 https://bugbountyreports.com/reports/3530-zomato-android-ios-theft-of-user-session2026-10-29 https://bugbountyreports.com/reports/7310-zomato-for-business-android-vulnerability-in-exported2026-10-29 https://bugbountyreports.com/reports/7309-zomato-order-insecure-deeplink-leads-to-sensitive2026-10-29 https://bugbountyreports.com/reports/3394-zomato-s-blog-post-based-xss-on-https-www-zomato-com-blog2026-10-29 https://bugbountyreports.com/reports/3837-android-broadcastreceiver2026-10-29 https://bugbountyreports.com/reports/3528-email-by-admin-notify-vk-com-email-flood2026-10-29 https://bugbountyreports.com/reports/6308-it-is-posible-download-all-information-and-files-via-s32026-10-29 https://bugbountyreports.com/reports/2811-redacted-data-gov-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/10482-jitsi-docker-jitsi-meet-colibri-relay-ws-unsafe-nginx-regex2026-10-29 https://bugbountyreports.com/reports/8031-nextcloud-logger-npm-package-brings-vulnerable-ansi-regex2026-10-29 https://bugbountyreports.com/reports/5763-shakedko-h1-2006-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/3986-wearehackerone-com-is-vulnerable-to-namespace-attacks-due2026-10-29 https://bugbountyreports.com/reports/933-owncloud-com-owncloud-org-using-not-strong-enough-ssl2026-10-29 https://bugbountyreports.com/reports/5953-shopify-com-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/9066-csrf-vulnerability-in-website-allows-attackers-to-change2026-10-29 https://bugbountyreports.com/reports/5288-minor-issue-nextcloud-10-0-session-issue-with-desktop2026-10-29 https://bugbountyreports.com/reports/10496-unauthenticated-idor-allows-modification-of-payment2026-10-29 https://bugbountyreports.com/reports/9499-applications-dpc-get-post-provide-full-access-to-api2026-10-29 https://bugbountyreports.com/reports/201-index-php-dashboard-sitemap-explore-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/1724-oca-dav-carddav-imageexportplugin-allows-serving-arbitrary2026-10-29 https://bugbountyreports.com/reports/9236-drivers-can-access-the-customers-phone-number-current2026-10-29 https://bugbountyreports.com/reports/9310-1-xss-on-watchdocs-indriverapp-com2026-10-29 https://bugbountyreports.com/reports/9309-2-xss-on-watchdocs-indriverapp-com2026-10-29 https://bugbountyreports.com/reports/9786-2931639-actionview-sanitize-helper-bypass-with-math-related2026-10-29 https://bugbountyreports.com/reports/9308-3-xss-on-watchdocs-indriverapp-com2026-10-29 https://bugbountyreports.com/reports/10569-mysql50-legacy-alias-internal-table-collisions2026-10-29 https://bugbountyreports.com/reports/10568-mysql50-legacy-alias-stale-table-cache-identity-mismatch2026-10-29 https://bugbountyreports.com/reports/7539-0a-new-line-and-limitness-url-leads-to-dos-at-all-system2026-10-29 https://bugbountyreports.com/reports/3770-alert-dialogs-on-chrome-extension-origin-internal-pages2026-10-29 https://bugbountyreports.com/reports/3337-atob-allocates-uninitialized-buffers-when-number-is-passed2026-10-29 https://bugbountyreports.com/reports/3456-base64-url-below-2-0-allocates-uninitialized-buffers-when2026-10-29 https://bugbountyreports.com/reports/3450-base64url-allocates-uninitialized-buffers-when-number-is2026-10-29 https://bugbountyreports.com/reports/3451-byte-allocates-uninitialized-buffers-and-reads-data-from2026-10-29 https://bugbountyreports.com/reports/10462-check-reserve-proof-counts-duplicate-entries-one-output-can2026-10-29 https://bugbountyreports.com/reports/10461-check-reserve-proof-sums-ringct-ecdh-amounts-without2026-10-29 https://bugbountyreports.com/reports/3733-chrome-brave-available-for-navigation-in-release-build-rce2026-10-29 https://bugbountyreports.com/reports/3448-command-exists-concatenates-unsanitized-input-into-exec2026-10-29 https://bugbountyreports.com/reports/3404-concat-with-sourcemaps-allocates-uninitialized-buffers-when2026-10-29 https://bugbountyreports.com/reports/10445-exportreportpdf-mutation-shows-internal-activity2026-10-29 https://bugbountyreports.com/reports/3405-foreman-is-vulnerable-to-redos-in-path2026-10-29 https://bugbountyreports.com/reports/3444-fs-path-concatenates-unsanitized-input-into-exec-execsync2026-10-29 https://bugbountyreports.com/reports/6128-fs-realpath-native-on-darwin-may-cause-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/3332-http-proxy-agent-passes-unsanitized-options-to-buffer-arg2026-10-29 https://bugbountyreports.com/reports/3320-https-proxy-agent-passes-unsanitized-options-to-buffer-arg2026-10-29 https://bugbountyreports.com/reports/3449-macaddress-concatenates-unsanitized-input-into-exec-command2026-10-29 https://bugbountyreports.com/reports/3546-memjs-allocates-and-stores-buffers-on-typed-input-resulting2026-10-29 https://bugbountyreports.com/reports/3522-njwt-allocates-uninitialized-buffers-when-number-is-passed2026-10-29 https://bugbountyreports.com/reports/3454-npmconf-and-npm-js-api-allocate-and-write-to-disk2026-10-29 https://bugbountyreports.com/reports/4190-open-url-command-allows-opening-unlimited-number-of-tabs2026-10-29 https://bugbountyreports.com/reports/3312-protobufjs-is-vulnerable-to-redos-when-parsing-crafted2026-10-29 https://bugbountyreports.com/reports/3518-put-allocates-uninitialized-buffers-when-non-round-numbers2026-10-29 https://bugbountyreports.com/reports/10456-relay-tx-wallet-rpc-skips-restricted-rpc-guard-and-lets-any2026-10-29 https://bugbountyreports.com/reports/5063-rgb2hex-is-vulnerable-to-redos-when-parsing-crafted-invalid2026-10-29 https://bugbountyreports.com/reports/10457-set-daemon-wallet-rpc-silently-ignores-ssl-allowed2026-10-29 https://bugbountyreports.com/reports/10571-show-create-grants-mariadb-dump-unescaped-sql-generation2026-10-29 https://bugbountyreports.com/reports/4360-socket-command-allows-sending-data-over-websockets-to2026-10-29 https://bugbountyreports.com/reports/3455-sql-does-not-properly-escape-parameters-when-building-sql2026-10-29 https://bugbountyreports.com/reports/3331-sshpk-is-vulnerable-to-redos-when-parsing-crafted-invalid2026-10-29 https://bugbountyreports.com/reports/9704-std-process-command-batch-files-argument-escaping-could-be2026-10-29 https://bugbountyreports.com/reports/3443-stringstream-allocates-uninitialized-buffers-when-number-is2026-10-29 https://bugbountyreports.com/reports/3407-superstatic-is-vulnerable-to-path-traversal-on-windows2026-10-29 https://bugbountyreports.com/reports/10038-use-mcp-s-oauth2-process-uses-a-window-open-call-with2026-10-29 https://bugbountyreports.com/reports/4131-useragent-is-vulnerable-to-redos-in-user-agent-string2026-10-29 https://bugbountyreports.com/reports/3519-utile-allocates-uninitialized-buffers-when-number-is-passed2026-10-29 https://bugbountyreports.com/reports/3299-whereis-concatenates-unsanitized-input-into-exec-command2026-10-29 https://bugbountyreports.com/reports/2346-critical-idor-vulnerability-in-socialclub-allow-to-insert2026-10-29 https://bugbountyreports.com/reports/10000-8x8-vc-index-js-exposed-google-maps-api-key-allowing2026-10-29 https://bugbountyreports.com/reports/7565-running-a-vulnerable-log4j2026-10-29 https://bugbountyreports.com/reports/4152-exposes-sensitive-shipment-information-to-public-web2026-10-29 https://bugbountyreports.com/reports/5996-is-vulnerable-to-cve-2020-3452-read-only-path-traversal2026-10-29 https://bugbountyreports.com/reports/9285-leaking-pii-of-tour-visitors-names-email-addresses-phone2026-10-29 https://bugbountyreports.com/reports/6893-on-https-enable-scraping-injection-stored-xss2026-10-29 https://bugbountyreports.com/reports/7774-vulnerable-to-cve-2022-229542026-10-29 https://bugbountyreports.com/reports/5469-complete-account-takeover2026-10-29 https://bugbountyreports.com/reports/8781-can-add-animal-to-other-account-at2026-10-29 https://bugbountyreports.com/reports/8785-can-change-any-account-email-and-cannot-retrieve-his2026-10-29 https://bugbountyreports.com/reports/5466-exposes-highly-sensitive-information-to-public2026-10-29 https://bugbountyreports.com/reports/7641-api-key-exposed-in-github-com2026-10-29 https://bugbountyreports.com/reports/1604-discloses-valid-airbnb-sso-login-names-via-google-search2026-10-29 https://bugbountyreports.com/reports/64202026-10-29 https://bugbountyreports.com/reports/5008-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/5009-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/5467-pre-generation-of-viewstate-allows-cac-bypass2026-10-29 https://bugbountyreports.com/reports/4566-authenticated-user-data-disclosure2026-10-29 https://bugbountyreports.com/reports/4511-dom-xss-via-shopify-api-remoteredirect2026-10-29 https://bugbountyreports.com/reports/9652-ssn-edpi2026-10-29 https://bugbountyreports.com/reports/8114-log4j-https2026-10-29 https://bugbountyreports.com/reports/10221-publicly-accessible-public-html-directory-exposing2026-10-29 https://bugbountyreports.com/reports/7325-xss-cve-2020-35802026-10-29 https://bugbountyreports.com/reports/8790-can-delete-any-animal-from-other-account-at2026-10-29 https://bugbountyreports.com/reports/4146-site-exposes-forms2026-10-29 https://bugbountyreports.com/reports/10345-server-full-exposure-with-database-credentials2026-10-29 https://bugbountyreports.com/reports/6829-portal-is-open-to-enumeration-once-authenticated-session-id2026-10-29 https://bugbountyreports.com/reports/4600-sql2026-10-29 https://bugbountyreports.com/reports/5468-insecure-download-cookie-generation-allows-bypass-of-cac2026-10-29 https://bugbountyreports.com/reports/9494-android-vulnerable-to-javascript-injection-and-open-redirect2026-10-29 https://bugbountyreports.com/reports/6637-idor-leads-to-disclosure-of-phi-pii2026-10-29 https://bugbountyreports.com/reports/9711-when-adding-branches-to-your-account2026-10-29 https://bugbountyreports.com/reports/5016-bruteforceable-ric-codes-allowing-information-on-contracts2026-10-29 https://bugbountyreports.com/reports/7564-running-a-vulnerable-log4j2026-10-29 https://bugbountyreports.com/reports/7805-vulnerable-to-cve-2022-229542026-10-29 https://bugbountyreports.com/reports/6548-mill-is-vulnerable-to-cross-site-request-forgery-that-leads2026-10-29 https://bugbountyreports.com/reports/8856-crash-report-cloudflare-warp-doesn-t-verify-text-length-in2026-10-29 https://bugbountyreports.com/reports/9439-0-click-account-takeover-via-timed-requests-to-forgot2026-10-29 https://bugbountyreports.com/reports/7671-0-day-cross-origin-request-forgery-vulnerability-in-grafana2026-10-29 https://bugbountyreports.com/reports/9940-1-click-account-takeover-via-auth-token-theft-on-marketing2026-10-29 https://bugbountyreports.com/reports/8448-1-click-account-takeover-via-deeplink-in-com-kayak-android2026-10-29 https://bugbountyreports.com/reports/9132-1-click-to-close-account-and-refund-via-postmessage2026-10-29 https://bugbountyreports.com/reports/7231-1-byte-heap-buffer-overflow-in-dns-resolver2026-10-29 https://bugbountyreports.com/reports/10362-1-click-account-takeover-via-open-redirect-through-regex2026-10-29 https://bugbountyreports.com/reports/7341-1-click-dos-in-fastify-static-via-directly-passing-user-s2026-10-29 https://bugbountyreports.com/reports/7015-100k-ctf-s-writeup2026-10-29 https://bugbountyreports.com/reports/6454-12-days-of-ctf-walkthroughs2026-10-29 https://bugbountyreports.com/reports/6459-12-days-of-hacky-holidays-write-up-but-as-a-text-based-rpg2026-10-29 https://bugbountyreports.com/reports/10654-14-hsts-cache-import-silently-drops-a-longer-lived-child2026-10-29 https://bugbountyreports.com/reports/3076-16-instances-where-return-value-of-openssl-i2d-rsapublickey2026-10-29 https://bugbountyreports.com/reports/7233-2-bypass-of-1067533-rate-limit-via-x-forwarded-for-source2026-10-29 https://bugbountyreports.com/reports/7709-2-click-remote-code-execution-in-evernote-android2026-10-29 https://bugbountyreports.com/reports/1664-2-directory-listing-on-ledger-brave-com-vault-staging-brave2026-10-29 https://bugbountyreports.com/reports/198-2-factor-authentication-design-flaw2026-10-29 https://bugbountyreports.com/reports/6723-2-subdomains-takeover-at-readfu-com2026-10-29 https://bugbountyreports.com/reports/4593-2-vulnerabilities-of-arbitrary-code-in-cve-2017-59292026-10-29 https://bugbountyreports.com/reports/1854-2-factor-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/5210-2-factor-authentication-can-be-disabled-when-logged-in2026-10-29 https://bugbountyreports.com/reports/10653-20-htab-before-secure-attribute-silently-drops-the-secure2026-10-29 https://bugbountyreports.com/reports/2168-200-http-code-in-403-forbidden-directories-on-main-ubnt-com2026-10-29 https://bugbountyreports.com/reports/6115-2020-10-09-credential-stuffing-attack2026-10-29 https://bugbountyreports.com/reports/3696-217-147-95-145-nfs-exposed-with-zeus-server-configs2026-10-29 https://bugbountyreports.com/reports/10421-29-premium-plugin-packages-with-license-keys-publicly2026-10-29 https://bugbountyreports.com/reports/8965-2fa-bypass2026-10-29 https://bugbountyreports.com/reports/3060-2fa-bypass-confirmation-tokens-don-t-expire2026-10-29 https://bugbountyreports.com/reports/9841-2fa-bypass-leads-to-impersonation-of-legimate-users2026-10-29 https://bugbountyreports.com/reports/10050-2fa-bypass-possible-on-https-authsvc-singlestore-com2026-10-29 https://bugbountyreports.com/reports/10147-2fa-bypass-via-response-manipulation-on-login-page2026-10-29 https://bugbountyreports.com/reports/6134-2fa-disable-with-wrong-password-response-tampering2026-10-29 https://bugbountyreports.com/reports/2663-2fa-error-handling-on-google-authenticator2026-10-29 https://bugbountyreports.com/reports/2833-2fa-manual-entry-uses-wrong-encoding2026-10-29 https://bugbountyreports.com/reports/2873-2fa-manual-entry-uses-wrong-encoding2026-10-29 https://bugbountyreports.com/reports/10227-2fa-requirement-bypass-when-inviting-team-members2026-10-29 https://bugbountyreports.com/reports/6523-2fa-session-not-expires-after-the-password-reset2026-10-29 https://bugbountyreports.com/reports/2677-2fa-user-enumeration-via-login2026-10-29 https://bugbountyreports.com/reports/2693-2fa-user-enumeration-via-password-reset2026-10-29 https://bugbountyreports.com/reports/8821-2m-reports-on-hackerone-celebration-ability-to-bulk-submit2026-10-29 https://bugbountyreports.com/reports/3753-2nd-issue-flood-of-email-no-rate-limit-on-delete-account2026-10-29 https://bugbountyreports.com/reports/7200-2x-remote-file-inclusion-within-your-vmware-instances2026-10-29 https://bugbountyreports.com/reports/4811-3-heap-corruptions-in-php2026-10-29 https://bugbountyreports.com/reports/10020-337k-users-and-1-employee-leaked-credentials2026-10-29 https://bugbountyreports.com/reports/7337-3x-reflected-xss-vectors-for-services-cgi-xm-v6-1-6-build2026-10-29 https://bugbountyreports.com/reports/4693-4-severe-remote-several-minor-openvpn-vulnerabilities2026-10-29 https://bugbountyreports.com/reports/6855-4-subdomains-takeover-on-2-domains-muberscolombia-com2026-10-29 https://bugbountyreports.com/reports/6188-403-forbidden-bypass-at-www-mil2026-10-29 https://bugbountyreports.com/reports/5537-404-response-contains-debug-information-with-all-headers2026-10-29 https://bugbountyreports.com/reports/3946-65534-times-efficient-brute-force-attack-for-api-key2026-10-29 https://bugbountyreports.com/reports/2458-7bo-binary-option-robot-url-should-be-https2026-10-29 https://bugbountyreports.com/reports/7864-8x8pilot-com-reflected-xss-in-apache-tomcat-jsp-examples2026-10-29 https://bugbountyreports.com/reports/7893-8ybhy85kld9zp9xf84x6-imgur-com-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/815-a-full-access-administrator-is-able-to-see-the-shop-owners2026-10-29 https://bugbountyreports.com/reports/3610-a-bug-in-the-monero-wallet-balance-can-enable-theft-from2026-10-29 https://bugbountyreports.com/reports/7425-a-bypass-of-adding-remote-files-in-concrete5-filemanager2026-10-29 https://bugbountyreports.com/reports/1980-a-crash-when-an-exception-is-caught-in-a-caller-and-the2026-10-29 https://bugbountyreports.com/reports/7239-a-deactivated-user-can-access-data-through-graphql2026-10-29 https://bugbountyreports.com/reports/10656-a-disabled-account-s-api-key-still-works-on-bmo-s2026-10-29 https://bugbountyreports.com/reports/2340-a-hackerone-employee-s-github-personal-access-token-exposed2026-10-29 https://bugbountyreports.com/reports/8634-a-malicious-actor-could-rotate-tokens-of-a-victim-given2026-10-29 https://bugbountyreports.com/reports/8255-a-malicious-admin-can-be-able-to-permanently-disable-a2026-10-29 https://bugbountyreports.com/reports/7424-a-member-member-privilege-could-access-the-https-console2026-10-29 https://bugbountyreports.com/reports/7461-a-non-privileged-user-may-create-an-admin-account-in-stocky2026-10-29 https://bugbountyreports.com/reports/104-a-password-reset-page-does-not-properly-validate-the2026-10-29 https://bugbountyreports.com/reports/9862-a-peer-can-remotely-fill-the-pending-block-queue-to-an2026-10-29 https://bugbountyreports.com/reports/9742-a-potential-risk-in-the-aws-lambda-ecs-run-task-which-can2026-10-29 https://bugbountyreports.com/reports/9691-a-potential-risk-in-the-cloudfrontextensionsconsole-which2026-10-29 https://bugbountyreports.com/reports/9673-a-potential-risk-in-the-experimental-programmatic-access2026-10-29 https://bugbountyreports.com/reports/7238-a-profile-page-of-a-user-can-be-denied-from-loading-by2026-10-29 https://bugbountyreports.com/reports/4729-a-reflected-xss-in-python-lib-docxmlrpcserver-py2026-10-29 https://bugbountyreports.com/reports/132-a-serious-bug-on-signup-process2026-10-29 https://bugbountyreports.com/reports/4058-a-small-set-of-users-were-assigned-someone-else-s-payout2026-10-29 https://bugbountyreports.com/reports/4205-a-specifically-malformed-mqtt-subscribe-packet-crashes-mqtt2026-10-29 https://bugbountyreports.com/reports/4220-a-stack-buffer-overflow-in-babygrid-cpp-can-lead-to-program2026-10-29 https://bugbountyreports.com/reports/6139-a-staff-member-with-no-permissions-can-edit-store-customer2026-10-29 https://bugbountyreports.com/reports/6033-a-staff-without-export-customers-permissions-can-still2026-10-29 https://bugbountyreports.com/reports/1191-a-stored-xss-in-slack-integration-https-onerror-slack-com2026-10-29 https://bugbountyreports.com/reports/2517-a-stored-xss-issue-in-https-files-slack-com2026-10-29 https://bugbountyreports.com/reports/5531-a-team-member-of-the-program-with-report-rights-can-ban-the2026-10-29 https://bugbountyreports.com/reports/8907-a-unverified-user-can-post-newsletter-which-is-not-allowed2026-10-29 https://bugbountyreports.com/reports/523-a-user-can-add-videos-to-other-user-s-private-groups2026-10-29 https://bugbountyreports.com/reports/3936-a-user-can-bypass-approval-step-in-hacker-publishing2026-10-29 https://bugbountyreports.com/reports/456-a-user-can-edit-comments-even-after-video-comments-are2026-10-29 https://bugbountyreports.com/reports/772-a-user-can-enhance-their-videos-with-paid-tracks-without2026-10-29 https://bugbountyreports.com/reports/457-a-user-can-post-comments-on-other-user-s-private-videos2026-10-29 https://bugbountyreports.com/reports/3977-a-user-can-request-a-report-to-be-retested-even-though-the2026-10-29 https://bugbountyreports.com/reports/9351-a-user-with-only-modify-settings-permmision-could-takeover2026-10-29 https://bugbountyreports.com/reports/6235-a-very-long-name-in-hey-com-can-prevent-anyone-from2026-10-29 https://bugbountyreports.com/reports/6462-a-visit-from-the-grinch-twas-the-night-before-hackmas2026-10-29 https://bugbountyreports.com/reports/8358-a-vulnerability-classified-as-critical-has-been-found-in2026-10-29 https://bugbountyreports.com/reports/3484-aapp-name-leakage-on-economy-history-page2026-10-29 https://bugbountyreports.com/reports/1654-ability-to-access-all-user-authentication-tokens-leads-to2026-10-29 https://bugbountyreports.com/reports/9893-ability-to-access-policy-and-updates-for-unauthorized2026-10-29 https://bugbountyreports.com/reports/7478-ability-to-add-address-without-being-an-admin-or-staff-in2026-10-29 https://bugbountyreports.com/reports/9826-ability-to-add-and-verify-uncontrolled-mobile-numbers2026-10-29 https://bugbountyreports.com/reports/6935-ability-to-add-arbitrary-images-descriptions-titles-to2026-10-29 https://bugbountyreports.com/reports/1323-ability-to-add-pishing-links-in-discusion-bypassing2026-10-29 https://bugbountyreports.com/reports/5782-ability-to-bruteforce-mopub-account-s-password-due-to-lack2026-10-29 https://bugbountyreports.com/reports/9397-ability-to-bulk-submit-reports-via-query-named-based2026-10-29 https://bugbountyreports.com/reports/9450-ability-to-by-pass-second-factor2026-10-29 https://bugbountyreports.com/reports/8928-ability-to-bypass-admin-override-on-cloudflare-warp-android2026-10-29 https://bugbountyreports.com/reports/6081-ability-to-bypass-email-verification-for-oauth-grants2026-10-29 https://bugbountyreports.com/reports/8299-ability-to-bypass-locked-cloudflare-warp-on-wifi-networks2026-10-29 https://bugbountyreports.com/reports/3202-ability-to-bypass-partner-email-confirmation-to-take-over2026-10-29 https://bugbountyreports.com/reports/8351-ability-to-change-permissions-across-seller-platform2026-10-29 https://bugbountyreports.com/reports/1222-ability-to-collect-users-ids-that-have-visited-a-specific2026-10-29 https://bugbountyreports.com/reports/7756-ability-to-connect-an-external-login-service-for-unverified2026-10-29 https://bugbountyreports.com/reports/8620-ability-to-control-the-filename-when-uploading-a-logo-or2026-10-29 https://bugbountyreports.com/reports/4282-ability-to-create-own-account-uuid-leads-to-stored-xss2026-10-29 https://bugbountyreports.com/reports/6737-ability-to-delete-user-s-account-without-user-interaction2026-10-29 https://bugbountyreports.com/reports/7633-ability-to-disable-the-login-attempt-of-any-shopify-owner2026-10-29 https://bugbountyreports.com/reports/6823-ability-to-dos-any-organization-s-sso-and-open-up-the-door2026-10-29 https://bugbountyreports.com/reports/437-ability-to-download-music-tracks-without-paying-missing2026-10-29 https://bugbountyreports.com/reports/1543-ability-to-enumerate-private-programs-using-saml2026-10-29 https://bugbountyreports.com/reports/8052-ability-to-escape-database-transaction-through-sql2026-10-29 https://bugbountyreports.com/reports/5925-ability-to-generate-shipping-labels-in-another-store-orders2026-10-29 https://bugbountyreports.com/reports/9404-ability-to-identify-actual-private-from-sandboxed-programs2026-10-29 https://bugbountyreports.com/reports/9950-ability-to-increase-any-customer-offered-fare-bac2026-10-29 https://bugbountyreports.com/reports/3460-ability-to-install-paid-themes-for-free2026-10-29 https://bugbountyreports.com/reports/6798-ability-to-invite-a-new-member-on-sandbox-program2026-10-29 https://bugbountyreports.com/reports/8793-ability-to-join-an-arbitrary-workspace-by-utilizing-a-proxy2026-10-29 https://bugbountyreports.com/reports/5793-ability-to-link-a-google-account-to-another-staff-account2026-10-29 https://bugbountyreports.com/reports/2679-ability-to-log-in-as-any-user-without-authentication-if-is2026-10-29 https://bugbountyreports.com/reports/3957-ability-to-login-to-the-nexus-repo-manager-from-https-nexus2026-10-29 https://bugbountyreports.com/reports/5879-ability-to-manipulate-price-with-a-max-threshold-of-1-rupee2026-10-29 https://bugbountyreports.com/reports/4546-ability-to-perform-actions-tweet-retweet-dm-and-other2026-10-29 https://bugbountyreports.com/reports/8382-ability-to-perform-various-post-requests-on-quantopian-com2026-10-29 https://bugbountyreports.com/reports/2678-ability-to-post-comments-to-a-crew-even-after-getting2026-10-29 https://bugbountyreports.com/reports/6598-ability-to-potentially-hit-internal-nginx-locations-on2026-10-29 https://bugbountyreports.com/reports/5977-ability-to-publish-a-paid-theme-without-purchasing-it2026-10-29 https://bugbountyreports.com/reports/5978-ability-to-publish-a-paid-theme-without-purchasing-it2026-10-29 https://bugbountyreports.com/reports/8628-ability-to-read-any-emails-through-idor-on-nextcloud-mail2026-10-29 https://bugbountyreports.com/reports/4275-ability-to-reset-password-for-account2026-10-29 https://bugbountyreports.com/reports/2292-ability-to-retrieve-a-user-s-phone-number-email-for-a-given2026-10-29 https://bugbountyreports.com/reports/352-ability-to-see-common-response-titles-of-other-teams-limited2026-10-29 https://bugbountyreports.com/reports/9345-ability-to-see-hidden-likes2026-10-29 https://bugbountyreports.com/reports/5961-ability-to-see-password-protected-content-by-bypassing-the2026-10-29 https://bugbountyreports.com/reports/7333-ability-to-subscribe-to-inactive-post-creators2026-10-29 https://bugbountyreports.com/reports/7711-ability-to-use-premium-templates-as-free-user-via-https2026-10-29 https://bugbountyreports.com/reports/4783-ability-to-verify-any-email-address-you-don-t-own-accounts2026-10-29 https://bugbountyreports.com/reports/8247-ability-to-view-non-permitted-admin-log2026-10-29 https://bugbountyreports.com/reports/7933-able-to-approve-admin-approval-and-change-effective-status2026-10-29 https://bugbountyreports.com/reports/6490-able-to-authenticate-as-administrator-by-navigating-to2026-10-29 https://bugbountyreports.com/reports/5344-able-to-become-admin-for-any-line-official-account2026-10-29 https://bugbountyreports.com/reports/9105-able-to-blocking-users-with-2fa-from-login-into-their2026-10-29 https://bugbountyreports.com/reports/4385-able-to-bypass-device-credentials-lock2026-10-29 https://bugbountyreports.com/reports/10429-able-to-bypass-authorization-logic-and-gain-more-access2026-10-29 https://bugbountyreports.com/reports/7822-able-to-bypass-email-verification-and-change-email-to-any2026-10-29 https://bugbountyreports.com/reports/5081-able-to-change-password-by-entering-wrong-old-password2026-10-29 https://bugbountyreports.com/reports/3105-able-to-check-the-exact-bounty-balance-of-any-bug-bounty2026-10-29 https://bugbountyreports.com/reports/6347-able-to-comment-view-in-others-support-ticket-at-https-en2026-10-29 https://bugbountyreports.com/reports/2185-able-to-create-basic-user-account-via-google-login-on2026-10-29 https://bugbountyreports.com/reports/9354-able-to-create-testimonials-for-myself-using-sandbox2026-10-29 https://bugbountyreports.com/reports/5208-able-to-download-any-hosted-content-on-aws-s3-bucket-stripo2026-10-29 https://bugbountyreports.com/reports/1894-able-to-download-arbitrary-php-files-at-yelpblog-com2026-10-29 https://bugbountyreports.com/reports/2000-able-to-intercept-app-traffic-after-choosing-up-the-secured2026-10-29 https://bugbountyreports.com/reports/6436-able-to-leak-private-email-of-any-user-given-his-her2026-10-29 https://bugbountyreports.com/reports/6492-able-to-log-in-with-default-g-creds-at-https-mil2026-10-29 https://bugbountyreports.com/reports/1716-able-to-login-deactivated-staff-account-in-shopify-app2026-10-29 https://bugbountyreports.com/reports/5549-able-to-login-into-login-topechelon-com2026-10-29 https://bugbountyreports.com/reports/4428-able-to-manipulate-order-amount-by-removing-cancellation2026-10-29 https://bugbountyreports.com/reports/3588-able-to-purchase-a-gift-card-with-any-amount2026-10-29 https://bugbountyreports.com/reports/1316-able-to-remove-the-admin-access-of-my-program2026-10-29 https://bugbountyreports.com/reports/3592-able-to-reset-other-user-s-password-in-https-card-starbucks2026-10-29 https://bugbountyreports.com/reports/8958-able-to-see-bonus-amount-given-to-a-report-even-if-the2026-10-29 https://bugbountyreports.com/reports/9248-able-to-see-twitter-circle-tweets-due-to-improper-access2026-10-29 https://bugbountyreports.com/reports/7707-able-to-steal-bearer-token-from-deep-link2026-10-29 https://bugbountyreports.com/reports/7578-able-to-steal-private-files-by-manipulating-response-using2026-10-29 https://bugbountyreports.com/reports/7577-able-to-steal-private-files-by-manipulating-response-using2026-10-29 https://bugbountyreports.com/reports/8347-able-to-take-over-zyrosite-com-subdomains-via-v3-publish2026-10-29 https://bugbountyreports.com/reports/5372-able-to-takeover-merchants-accounts-even-they-have-already2026-10-29 https://bugbountyreports.com/reports/7543-able-to-trick-the-victim-into-using-a-crafted-email-address2026-10-29 https://bugbountyreports.com/reports/6544-able-to-use-premium-templates-in-free-plan-at-https-my2026-10-29 https://bugbountyreports.com/reports/5000-able-to-view-backend-database-dur-to-improper-authentication2026-10-29 https://bugbountyreports.com/reports/7984-able-to-view-hackerone-reports-attachments2026-10-29 https://bugbountyreports.com/reports/2074-able-to-view-others-gifts-on-gift-share-url-giftid-is2026-10-29 https://bugbountyreports.com/reports/2011-aborted-proc-c-line-1432026-10-29 https://bugbountyreports.com/reports/6330-absence-of-token-expiry-leads-to-unauthorized-login-access2026-10-29 https://bugbountyreports.com/reports/2286-abuse-of-api-that-causes-spamming-users-and-possible-dos2026-10-29 https://bugbountyreports.com/reports/2287-abuse-of-api-that-causes-spamming-users-and-possible-dos2026-10-29 https://bugbountyreports.com/reports/208-abusing-daemon-logs-for-privilege-escalation-under-certain2026-10-29 https://bugbountyreports.com/reports/488-abusing-thumbnails-https-vimeo-com-upload-select-thumb-to2026-10-29 https://bugbountyreports.com/reports/206-abusing-vcs-control-on-phabricator2026-10-29 https://bugbountyreports.com/reports/5314-accepting-error-message-on-twitter-sends-you-to-attacker2026-10-29 https://bugbountyreports.com/reports/1106-accepting-invalid-characters-on-email-address2026-10-29 https://bugbountyreports.com/reports/9506-access-body-and-title-of-internal-repo-issues-in-projects2026-10-29 https://bugbountyreports.com/reports/3734-access-control-issue-allow-file-system-access-not-validated2026-10-29 https://bugbountyreports.com/reports/6779-access-control-issue-on-invoice-documents-downloading2026-10-29 https://bugbountyreports.com/reports/6070-access-control-missing-while-viewing-the-attachments-in-the2026-10-29 https://bugbountyreports.com/reports/7752-access-control-vulnerability-read-only2026-10-29 https://bugbountyreports.com/reports/7753-access-control-vulnerability-read-write2026-10-29 https://bugbountyreports.com/reports/9385-access-control-vulnerability-enabling-unauthorized-access2026-10-29 https://bugbountyreports.com/reports/6562-access-control-inject-tasks-into-other-users-decks2026-10-29 https://bugbountyreports.com/reports/3086-access-grab-road-bigdata-database-via-open-presto2026-10-29 https://bugbountyreports.com/reports/4775-access-mopub-reports-data-even-after-company-removed-you2026-10-29 https://bugbountyreports.com/reports/8251-access-nagios-dashboard-using-default-credentials-in-omon12026-10-29 https://bugbountyreports.com/reports/2612-access-of-android-protected-components-via-embedded-intent2026-10-29 https://bugbountyreports.com/reports/5911-access-permission-is-not-revoked-even-if-the-email-has-been2026-10-29 https://bugbountyreports.com/reports/1795-access-private-list-metadata2026-10-29 https://bugbountyreports.com/reports/4461-access-projects-and-create-projects-in-gitlab-pre2026-10-29 https://bugbountyreports.com/reports/5118-access-to-due-to-weak-credentials2026-10-29 https://bugbountyreports.com/reports/8111-access-to-admininstrative-resources-account-via-path2026-10-29 https://bugbountyreports.com/reports/7263-access-to-alerta-khanacademy-org-leak-sensitive-data2026-10-29 https://bugbountyreports.com/reports/4153-access-to-all-files-including-cac-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/5285-access-to-all-files-of-remote-user-through-shared-file2026-10-29 https://bugbountyreports.com/reports/1705-access-to-amazon-s3-bucket2026-10-29 https://bugbountyreports.com/reports/8122-access-to-arbitrary-file-of-the-nextcloud-android-app-from2026-10-29 https://bugbountyreports.com/reports/2314-access-to-completion-page-without-performing-any-action2026-10-29 https://bugbountyreports.com/reports/10249-access-to-deactivated-linkedin-company-pages-via-competitor2026-10-29 https://bugbountyreports.com/reports/4086-access-to-employee-calendar-disclosing-internal2026-10-29 https://bugbountyreports.com/reports/2863-access-to-gitlab-s-slack-by-abusing-issue-creation-from-e2026-10-29 https://bugbountyreports.com/reports/1813-access-to-grafana-dashboard2026-10-29 https://bugbountyreports.com/reports/7530-access-to-images-and-videos-in-drafts-on-line-blog2026-10-29 https://bugbountyreports.com/reports/1602-access-to-internal-cms-containing-private-data2026-10-29 https://bugbountyreports.com/reports/4986-access-to-job-creation-web-page-on-http2026-10-29 https://bugbountyreports.com/reports/9739-access-to-limited-confidential-information-of-private2026-10-29 https://bugbountyreports.com/reports/1671-access-to-local-file-system-using-javascript2026-10-29 https://bugbountyreports.com/reports/3061-access-to-local-file-system-using-javascript2026-10-29 https://bugbountyreports.com/reports/7300-access-to-microtransaction-sales-data-for-lots-of-apps-from2026-10-29 https://bugbountyreports.com/reports/6194-access-to-multiple-production-grafana-dashboards2026-10-29 https://bugbountyreports.com/reports/8237-access-to-private-file-s-of-helpdesk2026-10-29 https://bugbountyreports.com/reports/3272-access-to-private-photos-of-apps-in-app-section-idor2026-10-29 https://bugbountyreports.com/reports/6635-access-to-requests-and-approvals-via-allows-sensitive2026-10-29 https://bugbountyreports.com/reports/8975-access-to-resumes-applied-through-linkedin-jobs2026-10-29 https://bugbountyreports.com/reports/6239-access-to-some-slack-workspace-metadata-and-settings2026-10-29 https://bugbountyreports.com/reports/1498-access-to-splunk-at-https-apt-ec2-shopify-com-80892026-10-29 https://bugbountyreports.com/reports/1553-access-to-splunk-via-shard3-db2-ec2-shopify-com-endpoint2026-10-29 https://bugbountyreports.com/reports/6725-access-to-sql-server-of-ubergreen-pt-through-password2026-10-29 https://bugbountyreports.com/reports/10039-access-to-the-business-emails-of-rockstar-support-agents2026-10-29 https://bugbountyreports.com/reports/8472-access-to-tomcat-manager-with-default-creds2026-10-29 https://bugbountyreports.com/reports/6186-access-to-unclassified-fouo-advanced-motion-platform-of-mil2026-10-29 https://bugbountyreports.com/reports/6469-access-token-smuggling-from-my-playstation-com-via-referer2026-10-29 https://bugbountyreports.com/reports/6294-access-token-stealing2026-10-29 https://bugbountyreports.com/reports/4377-access-violation-reading-exploitable-02282026-10-29 https://bugbountyreports.com/reports/4378-access-violation-reading-in-libfaad-plugin2026-10-29 https://bugbountyreports.com/reports/1570-accessable-htaccess2026-10-29 https://bugbountyreports.com/reports/5795-accessible-restricted-directory-on-bcm-bcaw-mtn-cm2026-10-29 https://bugbountyreports.com/reports/1358-accessing-all-appointments-vulnerability2026-10-29 https://bugbountyreports.com/reports/9037-accessing-apps-protected-via-zt-s-access-when-user-account2026-10-29 https://bugbountyreports.com/reports/813-accessing-payments-page-and-adding-payment-methods-with2026-10-29 https://bugbountyreports.com/reports/663-accessing-title-of-the-report-of-which-you-are-marked-as2026-10-29 https://bugbountyreports.com/reports/8586-accessing-unauthorized-administration-pages-and-seeing2026-10-29 https://bugbountyreports.com/reports/8266-accessing-editing-folders-of-other-users-in-the-orginisation2026-10-29 https://bugbountyreports.com/reports/3897-accidental-access-to-programs-information-via-saml-login2026-10-29 https://bugbountyreports.com/reports/670-account-creation-code-bypass2026-10-29 https://bugbountyreports.com/reports/9202-account-creation-with-invalid-email-addresses-email-is2026-10-29 https://bugbountyreports.com/reports/9384-account-deletion-using-the-v1-account-destroy-api-endpoint2026-10-29 https://bugbountyreports.com/reports/180-account-hijacking-possible-through-adb-backup-feature2026-10-29 https://bugbountyreports.com/reports/3420-account-members-can-re-add-themselve-after-has-been-deleted2026-10-29 https://bugbountyreports.com/reports/2634-account-profile-shows-encryption-recovery-box-for-all-users2026-10-29 https://bugbountyreports.com/reports/4268-account-recovery-text-message-is-sending-a-wrong-domain-to2026-10-29 https://bugbountyreports.com/reports/3650-account-restore-reactivating-an-old-email-via-old-reset-link2026-10-29 https://bugbountyreports.com/reports/5155-account-take-over-of-light-starbuckscardb2b-users2026-10-29 https://bugbountyreports.com/reports/5403-account-take-over-of-millions-of-mtn-users-account-due-to2026-10-29 https://bugbountyreports.com/reports/1004-account-takeover2026-10-29 https://bugbountyreports.com/reports/8394-account-takeover-improper-validation-of-jwt-signature-with2026-10-29 https://bugbountyreports.com/reports/9417-account-takeover-arbitrary-file-read-and-deletion-partial2026-10-29 https://bugbountyreports.com/reports/8220-account-takeover-and-information-update-due-to-cross-site2026-10-29 https://bugbountyreports.com/reports/3938-account-takeover-at-https-try-discourse-org-due-to-no-csrf2026-10-29 https://bugbountyreports.com/reports/5523-account-takeover-because-of-the-mis-configuration-on-the2026-10-29 https://bugbountyreports.com/reports/4239-account-takeover-by-changing-email2026-10-29 https://bugbountyreports.com/reports/4005-account-takeover-due-to-csrf-in-account-details-option-on2026-10-29 https://bugbountyreports.com/reports/8735-account-takeover-due-to-insufficient-url-validation-on2026-10-29 https://bugbountyreports.com/reports/7295-account-takeover-due-to-misconfiguration2026-10-29 https://bugbountyreports.com/reports/10011-account-takeover-in-password-reset-function2026-10-29 https://bugbountyreports.com/reports/3677-account-takeover-in-periscope-tv2026-10-29 https://bugbountyreports.com/reports/5796-account-takeover-intercepting-magic-link-for-arrive-app2026-10-29 https://bugbountyreports.com/reports/7763-account-takeover-leading-to-pii-chained-with-stored-xss2026-10-29 https://bugbountyreports.com/reports/9986-account-takeover-of-existing-hackerone-accounts-through2026-10-29 https://bugbountyreports.com/reports/8218-account-takeover-on-htus2026-10-29 https://bugbountyreports.com/reports/5646-account-takeover-on-3-0-1-version2026-10-29 https://bugbountyreports.com/reports/6998-account-takeover-on-unverified-emails-in-file-sync-share2026-10-29 https://bugbountyreports.com/reports/5616-account-takeover-through-csrf-in-http-default-asp2026-10-29 https://bugbountyreports.com/reports/7100-account-takeover-through-multistage-csrf-at-https2026-10-29 https://bugbountyreports.com/reports/5031-account-takeover-through-the-combination-of-cookie2026-10-29 https://bugbountyreports.com/reports/4057-account-takeover-using-linked-accounts-due-to-lack-of-csrf2026-10-29 https://bugbountyreports.com/reports/9408-account-takeover-using-reset-password-link2026-10-29 https://bugbountyreports.com/reports/2262-account-takeover-using-third-party-auth-csrf2026-10-29 https://bugbountyreports.com/reports/9442-account-takeover-via-authentication-bypass-in-tiktok2026-10-29 https://bugbountyreports.com/reports/7831-account-takeover-via-google-onetap2026-10-29 https://bugbountyreports.com/reports/9377-account-takeover-via-insecure-intent-handling2026-10-29 https://bugbountyreports.com/reports/5030-account-takeover-via-leaked-session-cookie2026-10-29 https://bugbountyreports.com/reports/9820-account-takeover-via-password-reset-without-user2026-10-29 https://bugbountyreports.com/reports/7548-account-takeover-via-sms-authentication-flow2026-10-29 https://bugbountyreports.com/reports/10139-account-takeover-via-unverified-email-change-and-improper2026-10-29 https://bugbountyreports.com/reports/6773-account-takeover-via-xss2026-10-29 https://bugbountyreports.com/reports/9834-account-takeover-vulnerability-in-shopify-collabs-platform2026-10-29 https://bugbountyreports.com/reports/5827-account-takeover-w-o-interaction-for-a-user-that-doesn-t2026-10-29 https://bugbountyreports.com/reports/5448-account-verification-bypass-on-translate-kromtech-com2026-10-29 https://bugbountyreports.com/reports/1732-account-ubnt-com-csrf2026-10-29 https://bugbountyreports.com/reports/4421-accounts-informatica-com-rce-due-to-exposed-groovy-console2026-10-29 https://bugbountyreports.com/reports/7754-acess-control-vulnerability-read-write2026-10-29 https://bugbountyreports.com/reports/10520-acl-cache-collision-lets-a-role-inherit-privileges-from-a2026-10-29 https://bugbountyreports.com/reports/3472-acme-tls-sni-01-02-challenge-vulnerable-when-combined-with2026-10-29 https://bugbountyreports.com/reports/9355-acquisition-on-broken-link-listed-on-the-page-https-docs2026-10-29 https://bugbountyreports.com/reports/9552-acronis-sync-agent-service-untrusted-dll-search-ordering2026-10-29 https://bugbountyreports.com/reports/7145-acronis-true-image-windows-does-not-validate-server2026-10-29 https://bugbountyreports.com/reports/9565-acronis-true-image-2020-build-22510-nonstop-backup-service2026-10-29 https://bugbountyreports.com/reports/7161-acronis-true-image-2021-windows-does-not-validate-server2026-10-29 https://bugbountyreports.com/reports/8027-acronis-true-image-local-privilege-escalation-due-to-race2026-10-29 https://bugbountyreports.com/reports/6645-acronis-true-image-local-privilege-escalation-via-insecure2026-10-29 https://bugbountyreports.com/reports/6678-acting-under-any-different-user-via-db-stored-credentials2026-10-29 https://bugbountyreports.com/reports/10344-action-text-redos-ruby-3-1-or-lower2026-10-29 https://bugbountyreports.com/reports/10529-action-text-to-markdown-content-escapes-its-delimiter2026-10-29 https://bugbountyreports.com/reports/9780-action-text-xss-rails-7-1-x2026-10-29 https://bugbountyreports.com/reports/5544-actioncontroller-parameters-each-returns-an-unsafe-hash2026-10-29 https://bugbountyreports.com/reports/8818-actionview-sanitize-helper-bypass-leading-to-xss-using-svg2026-10-29 https://bugbountyreports.com/reports/9790-actionview-sanitize-helper-bypass-with-style-and-svg-tags2026-10-29 https://bugbountyreports.com/reports/9789-actionview-sanitize-helper-bypass-with-noscript2026-10-29 https://bugbountyreports.com/reports/9788-actionview-sanitize-helper-bypass-with-style2026-10-29 https://bugbountyreports.com/reports/9787-actionview-sanitize-helper-bypass-with-style-and-math2026-10-29 https://bugbountyreports.com/reports/2277-activation-tokens-are-not-expiring2026-10-29 https://bugbountyreports.com/reports/217-active-record-sql-injection-vulnerability-affecting2026-10-29 https://bugbountyreports.com/reports/218-active-record-sql-injection-vulnerability-affecting2026-10-29 https://bugbountyreports.com/reports/5545-activestorage-direct-upload-fails-to-sign-content-length2026-10-29 https://bugbountyreports.com/reports/10307-activestorage-disk-service-path-traversal-via-custom-blob2026-10-29 https://bugbountyreports.com/reports/3979-activestorage-service-s-signed-urls-can-be-hijacked-via2026-10-29 https://bugbountyreports.com/reports/5065-activestorage-throws-exception-when-using-whitespace-as2026-10-29 https://bugbountyreports.com/reports/10515-activity-app-does-not-verify-federated-file-activity2026-10-29 https://bugbountyreports.com/reports/8829-ad-account-takeover2026-10-29 https://bugbountyreports.com/reports/5258-ad-builder-display-ads-path-traversal2026-10-29 https://bugbountyreports.com/reports/7007-adam-and-the-deadly-injections2026-10-29 https://bugbountyreports.com/reports/4524-add-and-access-to-labels-of-any-private-projects-groups-of2026-10-29 https://bugbountyreports.com/reports/2905-add-another-email-address-without-verification2026-10-29 https://bugbountyreports.com/reports/9504-add-any-depot-to-your-app-and-access-its-contents-without2026-10-29 https://bugbountyreports.com/reports/6011-add-apps-to-packages-0-61-62-with-store-ajaxpackagemerge2026-10-29 https://bugbountyreports.com/reports/2627-add-arbitrary-content-to-password-reset-email2026-10-29 https://bugbountyreports.com/reports/10246-add-labels-to-arbitrary-issues-prs-compromise-github2026-10-29 https://bugbountyreports.com/reports/10483-add-labels-to-arbitrary-issues-prs-via-memex-bulk-update-to2026-10-29 https://bugbountyreports.com/reports/7930-add-more-seats-by-paying-less-via-put-v2-seats-request2026-10-29 https://bugbountyreports.com/reports/6969-add-new-development-stores-without-permission2026-10-29 https://bugbountyreports.com/reports/7063-add-new-managed-stores-without-permission2026-10-29 https://bugbountyreports.com/reports/8159-add-products-to-any-livestream2026-10-29 https://bugbountyreports.com/reports/1601-add-signature-to-transactions-without-any-permission2026-10-29 https://bugbountyreports.com/reports/5107-add-store-to-new-partner-account-without-confirming-email2026-10-29 https://bugbountyreports.com/reports/1110-add-text-to-the-title-of-the-page-thanks2026-10-29 https://bugbountyreports.com/reports/7170-add-to-your-nextcloud-endpoint-is-not-properly-protected2026-10-29 https://bugbountyreports.com/reports/1447-add-tweet-to-collection-csrf2026-10-29 https://bugbountyreports.com/reports/7646-add-upto-10k-rupees-to-a-wallet-by-paying-an-arbitrary2026-10-29 https://bugbountyreports.com/reports/4392-add-users-to-groups-who-have-restricted-group-invites2026-10-29 https://bugbountyreports.com/reports/2528-adding-email-lacks-password-validation2026-10-29 https://bugbountyreports.com/reports/8627-adding-h1-analyst-to-username-for-normal-users2026-10-29 https://bugbountyreports.com/reports/2995-adding-or-removing-a-new-non-preferred-payout-method-does2026-10-29 https://bugbountyreports.com/reports/10464-adding-phone-number-to-profile-by-otp-brute-forcing2026-10-29 https://bugbountyreports.com/reports/431-adding-profile-picture-to-anyone-on-vimeo2026-10-29 https://bugbountyreports.com/reports/3056-additional-bypass-allows-ssrf-for-internal-netblocks2026-10-29 https://bugbountyreports.com/reports/4796-additional-information-for-cve-2016-56992026-10-29 https://bugbountyreports.com/reports/1613-address-bar-spoofing-already-resolved-retroactive-report2026-10-29 https://bugbountyreports.com/reports/776-addresssanitizer-reports-a-global-buffer-overflow-in2026-10-29 https://bugbountyreports.com/reports/3136-admin-access-to-a-domain-used-for-development-and-admin2026-10-29 https://bugbountyreports.com/reports/7085-admin-audit-is-not-properly-logging-unsetting-of-expiration2026-10-29 https://bugbountyreports.com/reports/7929-admin-authentication-bypass-lead-to-admin-account-takeover2026-10-29 https://bugbountyreports.com/reports/3867-admin-bar-incomplete-message-origin-validation-results-in2026-10-29 https://bugbountyreports.com/reports/8293-admin-can-create-a-hidden-admin-account-which-even-the2026-10-29 https://bugbountyreports.com/reports/2245-admin-command-injection-via-username-in-user-archive2026-10-29 https://bugbountyreports.com/reports/9824-admin-dashboard-access-leads-to-updating-merchant-info2026-10-29 https://bugbountyreports.com/reports/5506-admin-login-credential-leak-for-dod-gitlab-ee-instance2026-10-29 https://bugbountyreports.com/reports/3131-admin-panel-accessed-oauth-bypassed2026-10-29 https://bugbountyreports.com/reports/8058-admin-panel-exposure-without-credential-at-https-plus2026-10-29 https://bugbountyreports.com/reports/4597-admin-panel-take-over-user-info-leakage-mass-comprimise2026-10-29 https://bugbountyreports.com/reports/7515-admin-password-disclosure-via-log-file2026-10-29 https://bugbountyreports.com/reports/6368-admin-reseller-account-disclosure2026-10-29 https://bugbountyreports.com/reports/4997-admin-salt-leakage-on-dod-site2026-10-29 https://bugbountyreports.com/reports/6026-admin-web-sessions-remain-active-after-logout-of-shopify-id2026-10-29 https://bugbountyreports.com/reports/10095-admin-audit-does-not-log-actions-on-files-in-a-group-folder2026-10-29 https://bugbountyreports.com/reports/8489-admin-8x8-vc-member-users-with-no-permission-can-integrate2026-10-29 https://bugbountyreports.com/reports/9017-admin-mytva-com-customer-lookup-and-internal-notes-bypass2026-10-29 https://bugbountyreports.com/reports/6147-admin-info-lekage2026-10-29 https://bugbountyreports.com/reports/6830-administration-authentication-bypass-on-https2026-10-29 https://bugbountyreports.com/reports/6618-administrative-access-to-development-deployment-of-web2026-10-29 https://bugbountyreports.com/reports/1339-administrator-access-to-a-django-administration-panel-on-sc2026-10-29 https://bugbountyreports.com/reports/1677-administrator-access-to-management-console2026-10-29 https://bugbountyreports.com/reports/4561-administrator-access-to-staging-railto-com2026-10-29 https://bugbountyreports.com/reports/3475-administrator-can-create-user-without-entering-high2026-10-29 https://bugbountyreports.com/reports/9110-admins-can-change-authentication-details-of-user-configured2026-10-29 https://bugbountyreports.com/reports/8934-adobe-coldfusion-access-control-bypass-cve-2023-38205-at2026-10-29 https://bugbountyreports.com/reports/9113-adobe-coldfusion-access-control-bypass-cve-2023-382052026-10-29 https://bugbountyreports.com/reports/4912-adobe-flash-player-asnative-101-10-memory-corruption2026-10-29 https://bugbountyreports.com/reports/4911-adobe-flash-player-asnative-900-1-call-movieclip-use-after2026-10-29 https://bugbountyreports.com/reports/4910-adobe-flash-player-asnative-900-1-call-textfield-use-after2026-10-29 https://bugbountyreports.com/reports/4908-adobe-flash-player-contentfactory-class-memory-corruption2026-10-29 https://bugbountyreports.com/reports/348-adobe-flash-player-filereference-use-after-free2026-10-29 https://bugbountyreports.com/reports/4906-adobe-flash-player-metadata-class-memory-corruption2026-10-29 https://bugbountyreports.com/reports/453-adobe-flash-player-mp4-use-after-free-vulnerability2026-10-29 https://bugbountyreports.com/reports/454-adobe-flash-player-mp4-use-after-free-vulnerability2026-10-29 https://bugbountyreports.com/reports/4907-adobe-flash-player-opportunitygenerator-class-memory2026-10-29 https://bugbountyreports.com/reports/479-adobe-flash-player-out-of-bound-access-vulnerability2026-10-29 https://bugbountyreports.com/reports/455-adobe-flash-player-out-of-bound-read-write-vulnerability2026-10-29 https://bugbountyreports.com/reports/4897-adobe-flash-player-psdk-class-use-after-free-vulnerability2026-10-29 https://bugbountyreports.com/reports/4913-adobe-flash-player-race-condition-vulnerability2026-10-29 https://bugbountyreports.com/reports/4896-adobe-flash-player-regular-expression-uaf-remote-code2026-10-29 https://bugbountyreports.com/reports/4898-adobe-flash-player-shimadpolicyselector2026-10-29 https://bugbountyreports.com/reports/4905-adobe-flash-player-shimcontentfactory-class-memory2026-10-29 https://bugbountyreports.com/reports/4904-adobe-flash-player-shimcontentfactory-retrieveresolvers2026-10-29 https://bugbountyreports.com/reports/4903-adobe-flash-player-shimcontentresolver-configure-memory2026-10-29 https://bugbountyreports.com/reports/4901-adobe-flash-player-shimcontentresolver-resolvertype-0-class2026-10-29 https://bugbountyreports.com/reports/4900-adobe-flash-player-shimcontentresolver-resolvertype-1-class2026-10-29 https://bugbountyreports.com/reports/4902-adobe-flash-player-shimopportunitygenerator-class-memory2026-10-29 https://bugbountyreports.com/reports/4914-adobe-flash-player-textfield-use-after-free-vulnerability2026-10-29 https://bugbountyreports.com/reports/4899-adobe-flash-player-timedevent-parent-memory-corruption2026-10-29 https://bugbountyreports.com/reports/4909-adobe-flash-player-uninitialised-memory-corruption2026-10-29 https://bugbountyreports.com/reports/376-ads-twitter-com-xss2026-10-29 https://bugbountyreports.com/reports/8706-aem-misconfiguration-leads-to-information-disclosure2026-10-29 https://bugbountyreports.com/reports/5641-affiliates-session-fixation2026-10-29 https://bugbountyreports.com/reports/7783-after-changing-the-storefront-password-the-preview-link-is2026-10-29 https://bugbountyreports.com/reports/9032-after-the-upload-of-an-private-file-using-transformations2026-10-29 https://bugbountyreports.com/reports/10226-ai-playground-xss-to-steal-user-chat-messages-and-access-to2026-10-29 https://bugbountyreports.com/reports/10121-air-force-candidate-pii-recruitment-chat-logs-accessible2026-10-29 https://bugbountyreports.com/reports/2302-airfibre-products-vulnerable-to-http-header-injection2026-10-29 https://bugbountyreports.com/reports/8151-airflow-daemon-mode-insecure-umask-privilege-escalation2026-10-29 https://bugbountyreports.com/reports/3378-airship-persistent-xss-via-comment2026-10-29 https://bugbountyreports.com/reports/5849-ajaxgetachievementsforgame-is-not-guarded-for-unreleased2026-10-29 https://bugbountyreports.com/reports/8369-akismet-api-keys-are-exposed-by-authentication-method2026-10-29 https://bugbountyreports.com/reports/1208-akismet-several-csrf-vulnerabilities2026-10-29 https://bugbountyreports.com/reports/258-album-image-xss2026-10-29 https://bugbountyreports.com/reports/1109-all-active-user-sessions-should-be-deleted-when-user-change2026-10-29 https://bugbountyreports.com/reports/275-all-active-user-sessions-should-be-destroyed-when-user2026-10-29 https://bugbountyreports.com/reports/333-all-active-user-sessions-should-be-destroyed-when-user2026-10-29 https://bugbountyreports.com/reports/4438-all-functions-that-allow-users-to-specify-color-code-are2026-10-29 https://bugbountyreports.com/reports/7125-all-private-support-requests-to-are-being-disclosed-at-https2026-10-29 https://bugbountyreports.com/reports/2865-all-private-tokens-are-leaked-to-an-unauthenticated-attacker2026-10-29 https://bugbountyreports.com/reports/7914-all-user-password-hash-can-be-seen-from-admin-panel2026-10-29 https://bugbountyreports.com/reports/1390-all-vimeo-private-videos-disclosure-via-authorization-bypass2026-10-29 https://bugbountyreports.com/reports/5553-allow-authenticated-users-can-edit-trash-and-add-new-in2026-10-29 https://bugbountyreports.com/reports/2902-allowance-of-meta-null-characters2026-10-29 https://bugbountyreports.com/reports/128-allowed-method-disclosure2026-10-29 https://bugbountyreports.com/reports/5589-allows-any-user-to-share-their-root-level-folder-by-sharing2026-10-29 https://bugbountyreports.com/reports/2291-already-registered-email-disclosure2026-10-29 https://bugbountyreports.com/reports/778-amazon-aws-s3-bucket-content-is-public-http-shopify-com-s32026-10-29 https://bugbountyreports.com/reports/9819-amazon-comprehend-medical-service-reporting-aws-internal2026-10-29 https://bugbountyreports.com/reports/9920-amazon-kendra-intelligent-ranking-service-reporting-aws2026-10-29 https://bugbountyreports.com/reports/9921-amazon-pinpoint-sms-and-voice-version-2-service-reporting2026-10-29 https://bugbountyreports.com/reports/2318-amazon-s3-bucket-misconfiguration-share2026-10-29 https://bugbountyreports.com/reports/2438-an-algobot-s-github-access-token-was-leaked2026-10-29 https://bugbountyreports.com/reports/866-an-administrator-without-any-permission-is-able-to-get2026-10-29 https://bugbountyreports.com/reports/830-an-administrator-without-the-settings-permission-is-able-to2026-10-29 https://bugbountyreports.com/reports/7769-an-attacker-can-archive-and-unarchive-any-structured-scope2026-10-29 https://bugbountyreports.com/reports/5378-an-attacker-can-buy-marketplace-articles-for-lower-prices2026-10-29 https://bugbountyreports.com/reports/8811-an-attacker-can-can-view-any-hacker-email-via2026-10-29 https://bugbountyreports.com/reports/8909-an-attacker-can-flag-draft-job-posts-and-can-disclose-the2026-10-29 https://bugbountyreports.com/reports/5970-an-attacker-can-run-pipeline-jobs-as-arbitrary-user2026-10-29 https://bugbountyreports.com/reports/9135-an-attacker-can-submit-a-pentest-opportunity-and-change-the2026-10-29 https://bugbountyreports.com/reports/9262-an-attacker-can-submit-arbitrary-projects-to-their-service2026-10-29 https://bugbountyreports.com/reports/2419-an-automattic-employee-s-github-personal-access-token2026-10-29 https://bugbountyreports.com/reports/4888-an-integer-overflow-bug-in-php-implode-could-lead-heap2026-10-29 https://bugbountyreports.com/reports/4887-an-integer-overflow-bug-in-php-str-to-str-ex-led-arbitrary2026-10-29 https://bugbountyreports.com/reports/8139-an-internel-important-paths-disclosure-htus2026-10-29 https://bugbountyreports.com/reports/5420-an-invite-only-s-program-submission-state-is-accessible-to2026-10-29 https://bugbountyreports.com/reports/10618-an-organization-admin-can-create-an-attacker-controlled2026-10-29 https://bugbountyreports.com/reports/1190-an-xss-issue2026-10-29 https://bugbountyreports.com/reports/1131-an-xss-issue-in-https-hunter22-slack-com-help-requests2026-10-29 https://bugbountyreports.com/reports/2071-android-possible-to-intercept-broadcasts-about-uploaded2026-10-29 https://bugbountyreports.com/reports/6994-android-app-does-not-clear-end-to-end-encryption-keys2026-10-29 https://bugbountyreports.com/reports/5172-android-content-provider-exposes-password-protected-share2026-10-29 https://bugbountyreports.com/reports/6054-android-webviews-in-twitter-app-are-vulnerable-to-uxss-due2026-10-29 https://bugbountyreports.com/reports/2433-angular-expression-injection-in-the-my-gmc-com-search-page2026-10-29 https://bugbountyreports.com/reports/1696-angular-injection-in-the-profile-name-of-onpatient2026-10-29 https://bugbountyreports.com/reports/8048-anonymous-access-control-payments-status2026-10-29 https://bugbountyreports.com/reports/5856-anonymous-file-drop-page-ignores-user-profile-visibility2026-10-29 https://bugbountyreports.com/reports/194-anonymous-proxy-and-ip-leak2026-10-29 https://bugbountyreports.com/reports/4823-another-crash-in-locale-get-keywords-function2026-10-29 https://bugbountyreports.com/reports/7024-anti-ransomware-service-exe-rest-api-does-not-require2026-10-29 https://bugbountyreports.com/reports/527-anti-mime-sniffing-header-x-content-type-options-header-has2026-10-29 https://bugbountyreports.com/reports/8869-any-non-admin-user-from-an-instance-can-destroy-any-user2026-10-29 https://bugbountyreports.com/reports/2481-any-authenticated-user-can-download-full-list-of-users2026-10-29 https://bugbountyreports.com/reports/8083-any-expired-reset-password-link-can-still-be-used-to-reset2026-10-29 https://bugbountyreports.com/reports/10420-any-installed-app-can-force-immediate-logout-and-persistent2026-10-29 https://bugbountyreports.com/reports/6856-any-meeting-chat-history-can-be-read-and-modified-by-an2026-10-29 https://bugbountyreports.com/reports/8736-any-one-can-view-collaborater-email-address-via-path2026-10-29 https://bugbountyreports.com/reports/8329-any-organization-s-assets-pending-review-can-be-downloaded2026-10-29 https://bugbountyreports.com/reports/4359-any-staff-members-have-the-ability-to-comment-in-discounts2026-10-29 https://bugbountyreports.com/reports/8453-any-user-can-vote-on-friend-only-video-pull2026-10-29 https://bugbountyreports.com/reports/9349-any-user-could-upload-attachments-to-pentest-scoping-form2026-10-29 https://bugbountyreports.com/reports/4734-any-user-with-access-to-program-can-resume-and-suspend2026-10-29 https://bugbountyreports.com/reports/3017-any-user-with-invite-capabilities-can-take-over-any-account2026-10-29 https://bugbountyreports.com/reports/3505-anyone-can-register-organization-legal-type-as-soletrader2026-10-29 https://bugbountyreports.com/reports/8713-anyone-can-view-the-results-of-linkedin-skill-test-if2026-10-29 https://bugbountyreports.com/reports/2684-ap-find-token-buffer-overread2026-10-29 https://bugbountyreports.com/reports/9930-apache-airflow-fab-provider-application-does-not-invalidate2026-10-29 https://bugbountyreports.com/reports/8642-apache-airflow-google-cloud-sql-provider-remote-command2026-10-29 https://bugbountyreports.com/reports/8961-apache-airflow-path-traversal-by-authenticated-user2026-10-29 https://bugbountyreports.com/reports/9915-apache-airflow-sql-injection-by-authenticated-user2026-10-29 https://bugbountyreports.com/reports/9259-apache-airflow-bypass-permission-verification-to-read-code2026-10-29 https://bugbountyreports.com/reports/9745-apache-airflow-sensitive-information-exposure-in-dag-run2026-10-29 https://bugbountyreports.com/reports/889-apache-documentation2026-10-29 https://bugbountyreports.com/reports/91-apache-documentation2026-10-29 https://bugbountyreports.com/reports/7450-apache-flink-dashboard-exposure-at-https-streaming-sales2026-10-29 https://bugbountyreports.com/reports/8289-apache-flink-rce-via-get-jar-plan-api-endpoint2026-10-29 https://bugbountyreports.com/reports/4504-apache-http-2-4-17-2-4-38-local-root-privilege-escalation2026-10-29 https://bugbountyreports.com/reports/2594-apache-http-request-parsing-whitespace-defects2026-10-29 https://bugbountyreports.com/reports/9320-apache-http-server-http-2-dos-by-memory-exhaustion-on2026-10-29 https://bugbountyreports.com/reports/7979-apache-http-server-mod-proxy-ajp-possible-request-smuggling2026-10-29 https://bugbountyreports.com/reports/8569-apache-http-server-mod-proxy-uwsgi-http-response-splitting2026-10-29 https://bugbountyreports.com/reports/8857-apache-mod-negotiation-filename-bruteforcing-https-api2026-10-29 https://bugbountyreports.com/reports/885-apache-range-header-denial-of-service-attack-confirmed-poc2026-10-29 https://bugbountyreports.com/reports/5359-apache-server-version-disclousure2026-10-29 https://bugbountyreports.com/reports/6497-apache-solr-rce-via-velocity-template2026-10-29 https://bugbountyreports.com/reports/1144-apache-version-disclosed-on-developer-leaseweb-com2026-10-29 https://bugbountyreports.com/reports/168-apache2-icons-folder-accessible2026-10-29 https://bugbountyreports.com/reports/5408-api-amazon-s3-bucket-misconfiguration2026-10-29 https://bugbountyreports.com/reports/9696-api-data-leak2026-10-29 https://bugbountyreports.com/reports/7940-api-docs-expose-an-active-token-for-the-sample-domain2026-10-29 https://bugbountyreports.com/reports/2398-api-does-not-apply-access-controls-to-translations2026-10-29 https://bugbountyreports.com/reports/8098-api-key-api-semrush-com-leak-in-js-file2026-10-29 https://bugbountyreports.com/reports/1217-api-key-added-for-one-indices-works-for-all-other-indices2026-10-29 https://bugbountyreports.com/reports/5931-api-key-is-not-validated-for-c-r-m-integration-pipedrive-of2026-10-29 https://bugbountyreports.com/reports/5366-api-keys-hardcoded-in-github-repository2026-10-29 https://bugbountyreports.com/reports/4244-api-last-request-date-time-not-updating2026-10-29 https://bugbountyreports.com/reports/7065-api-on-campus-vtc-com-allows-access-to-100-uber-users-full2026-10-29 https://bugbountyreports.com/reports/4065-api-request-signature-can-be-reused-with-other-parameters2026-10-29 https://bugbountyreports.com/reports/8173-api-route-chat-getthreadslist-leaks-private-message-content2026-10-29 https://bugbountyreports.com/reports/3464-api-token-exposed-in-reverb-com-s-public-github-repository2026-10-29 https://bugbountyreports.com/reports/10513-api-token-sent-to-url-dictated-by-an-untrusted-project2026-10-29 https://bugbountyreports.com/reports/2525-api-webhooks-fire-and-are-unlisted-after-permissions-removed2026-10-29 https://bugbountyreports.com/reports/1941-api-bug-in-method-auth-signup2026-10-29 https://bugbountyreports.com/reports/664-api-bug-in-method-auth-validatephone2026-10-29 https://bugbountyreports.com/reports/583-api-missing-invalidation-of-oauth2-authorization-code2026-10-29 https://bugbountyreports.com/reports/2774-api-vk-com-html-vk-com2026-10-29 https://bugbountyreports.com/reports/398-apis-for-channels-allow-html-entities-that-may-cause-xss2026-10-29 https://bugbountyreports.com/reports/7168-apiservice-fetch-serves-content-as-text-html-and-inline2026-10-29 https://bugbountyreports.com/reports/3868-app-messaging-can-be-hijacked-by-third-party-websites2026-10-29 https://bugbountyreports.com/reports/9108-app-pin-code-can-be-bypassed-in-files-ios2026-10-29 https://bugbountyreports.com/reports/8682-app-pin-of-the-android-app-can-be-bypassed-via-3rdparty2026-10-29 https://bugbountyreports.com/reports/8902-app-stores-client-secret-unencrypted-in-database2026-10-29 https://bugbountyreports.com/reports/2880-app-legalrobot-com-opens-firefox-but-not-in-firefox-esr2026-10-29 https://bugbountyreports.com/reports/2871-app-mixmax-com-information-discloure-on-cal-mixmax-com-and2026-10-29 https://bugbountyreports.com/reports/6302-apparent-website-is-publicly-exposed-suggests-default2026-10-29 https://bugbountyreports.com/reports/6700-apple-pay-cryptogram-replay-and-amount-tampering2026-10-29 https://bugbountyreports.com/reports/9802-applicant-security-exam-attachments-documents-accessible2026-10-29 https://bugbountyreports.com/reports/2906-application-allowing-old-password-to-be-set-as-new-password2026-10-29 https://bugbountyreports.com/reports/10627-application-data-hiding-via-invalid-iconname-causing2026-10-29 https://bugbountyreports.com/reports/4408-application-design-issue-for-phone-number-field-in2026-10-29 https://bugbountyreports.com/reports/6080-application-dos-via-specially-crafted-payload-on-3d-cs-money2026-10-29 https://bugbountyreports.com/reports/4456-application-error-disclosure-verification-token-seen-error2026-10-29 https://bugbountyreports.com/reports/1711-application-error-message2026-10-29 https://bugbountyreports.com/reports/4547-application-level-denial-of-service-due-to-shutting-down2026-10-29 https://bugbountyreports.com/reports/10048-application-level-dos-large-markdown-payload-in-reply2026-10-29 https://bugbountyreports.com/reports/5508-application-level-dos-via-xmlrpc-php2026-10-29 https://bugbountyreports.com/reports/3431-application-vulnerable-to-csrf-remove-invited-user2026-10-29 https://bugbountyreports.com/reports/628-application-xss-filter-function-bypass-may-allow-multiple2026-10-29 https://bugbountyreports.com/reports/3004-application-level-dos-on-image-s-size-parameter2026-10-29 https://bugbountyreports.com/reports/3026-application-x-brave-tab-should-not-be-readable2026-10-29 https://bugbountyreports.com/reports/4521-applovin-api-key-hardcoded-in-a-github-repo2026-10-29 https://bugbountyreports.com/reports/10088-approval-app-allows-users-to-request-approval-for-other2026-10-29 https://bugbountyreports.com/reports/10542-approval-app-s-file-freshness-check-can-be-bypassed-by2026-10-29 https://bugbountyreports.com/reports/439-approve-topup-method-by-sender-of-this-method2026-10-29 https://bugbountyreports.com/reports/831-apps-can-access-channels-beta-api2026-10-29 https://bugbountyreports.com/reports/1000-apps-owncloud-com-csrf-change-privacy-settings2026-10-29 https://bugbountyreports.com/reports/721-apps-owncloud-com-edit-question-didn-t-check-acls2026-10-29 https://bugbountyreports.com/reports/709-apps-owncloud-com-malicious-file-upload-leads-to-remote2026-10-29 https://bugbountyreports.com/reports/763-apps-owncloud-com-mixed-active-scripting-issue2026-10-29 https://bugbountyreports.com/reports/996-apps-owncloud-com-multiple-reflected-xss-by-insecure-url2026-10-29 https://bugbountyreports.com/reports/726-apps-owncloud-com-path-disclosure2026-10-29 https://bugbountyreports.com/reports/801-apps-owncloud-com-potential-xss2026-10-29 https://bugbountyreports.com/reports/886-apps-owncloud-com-referer-protection-bypassed2026-10-29 https://bugbountyreports.com/reports/796-apps-owncloud-com-session-cookie-in-url-can-be-captured-by2026-10-29 https://bugbountyreports.com/reports/725-apps-owncloud-com-ssl-server-allows-anonymous2026-10-29 https://bugbountyreports.com/reports/731-apps-owncloud-com-ssl-session-cookie-without-secure-flag-set2026-10-29 https://bugbountyreports.com/reports/764-apps-owncloud-com-stored-xss-in-profile-page2026-10-29 https://bugbountyreports.com/reports/762-apps-owncloud-com-xss-via-referrer2026-10-29 https://bugbountyreports.com/reports/1903-apps-shopify-com-csrf-token-leakage-through-google-analytics2026-10-29 https://bugbountyreports.com/reports/2567-arbitary-file-download-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2571-arbitary-file-download-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2572-arbitary-file-download-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4890-arbitary-memory-read-via-gdimagerotateinterpolated-array2026-10-29 https://bugbountyreports.com/reports/10639-arbitrary-tmp-read-in-discourse-via-convert-heif-decoder2026-10-29 https://bugbountyreports.com/reports/10541-arbitrary-board-preference-injection-via-deck-config-api2026-10-29 https://bugbountyreports.com/reports/6362-arbitrary-change-of-blog-s-background-image-via-csrf2026-10-29 https://bugbountyreports.com/reports/5867-arbitrary-code-execution-in-desktop-client-via-openssl2026-10-29 https://bugbountyreports.com/reports/675-arbitrary-code-execution-in-str-ireplace-function2026-10-29 https://bugbountyreports.com/reports/9483-arbitrary-code-execution-in-tsec-heavy-secure-return2026-10-29 https://bugbountyreports.com/reports/7055-arbitrary-code-execution-via-npm-misconfiguration2026-10-29 https://bugbountyreports.com/reports/5896-arbitrary-code-execution-via-untrusted-schemas-in-ajv2026-10-29 https://bugbountyreports.com/reports/5853-arbitrary-code-execution-via-untrusted-schemas-in-is-my2026-10-29 https://bugbountyreports.com/reports/1693-arbitrary-code-injection-in-owncloud-s-windows-client2026-10-29 https://bugbountyreports.com/reports/38-arbitrary-command-execution-in-ms-dos2026-10-29 https://bugbountyreports.com/reports/9370-arbitrary-comment-content-change-with-get-csrf2026-10-29 https://bugbountyreports.com/reports/6133-arbitrary-dll-injection-in-mmsminisrv-acronis-managed2026-10-29 https://bugbountyreports.com/reports/6730-arbitrary-file-creation-via-symlink-attack-on-syncagentsrv2026-10-29 https://bugbountyreports.com/reports/4545-arbitrary-file-creation-with-semi-controlled-content-leads2026-10-29 https://bugbountyreports.com/reports/7365-arbitrary-file-delete-via-phar-deserialization2026-10-29 https://bugbountyreports.com/reports/7682-arbitrary-file-deletion-cve-2020-3187-on2026-10-29 https://bugbountyreports.com/reports/3658-arbitrary-file-deletion-in-wp-core-guides-towards-rce-and2026-10-29 https://bugbountyreports.com/reports/7697-arbitrary-file-deletion-via-path-traversal-in-image-edit-php2026-10-29 https://bugbountyreports.com/reports/5088-arbitrary-file-download-as-shopmanager2026-10-29 https://bugbountyreports.com/reports/7954-arbitrary-file-download-due-to-bad-handling-of-redirects-in2026-10-29 https://bugbountyreports.com/reports/7955-arbitrary-file-download-via-save-torrent-file-option-can2026-10-29 https://bugbountyreports.com/reports/384-arbitrary-file-existence-disclosure-in-action-pack2026-10-29 https://bugbountyreports.com/reports/4130-arbitrary-file-overwrites-in-node-tar2026-10-29 https://bugbountyreports.com/reports/7632-arbitrary-file-read-at-via-filename-parameter2026-10-29 https://bugbountyreports.com/reports/6926-arbitrary-file-read-during-project-import2026-10-29 https://bugbountyreports.com/reports/9240-arbitrary-file-read-from-cloudflare-pages-build-environment2026-10-29 https://bugbountyreports.com/reports/7595-arbitrary-file-read-in-rocket-chat-desktop2026-10-29 https://bugbountyreports.com/reports/5144-arbitrary-file-read-via-ffmpeg-hls-parser-at-https-www2026-10-29 https://bugbountyreports.com/reports/7688-arbitrary-file-read-via-the-bulk-imports-uploadspipeline2026-10-29 https://bugbountyreports.com/reports/5432-arbitrary-file-read-via-the-uploadsrewriter-when-moving-and2026-10-29 https://bugbountyreports.com/reports/5023-arbitrary-file-reading-leads-to-rce-in-the-pulse-secure-ssl2026-10-29 https://bugbountyreports.com/reports/7122-arbitrary-file-reading-leads-to-rce-in-the-pulse-secure-ssl2026-10-29 https://bugbountyreports.com/reports/9394-arbitrary-file-reading-leads-to-rce-in-the-pulse-secure-ssl2026-10-29 https://bugbountyreports.com/reports/6661-arbitrary-file-reading-on-uber-ssl-vpn2026-10-29 https://bugbountyreports.com/reports/6630-arbitrary-file-upload-and-stored-xss-via-support-request2026-10-29 https://bugbountyreports.com/reports/1593-arbitrary-file-upload-in-logo-log-in-image-theming-setting2026-10-29 https://bugbountyreports.com/reports/3328-arbitrary-file-upload-when-setting-an-avatar2026-10-29 https://bugbountyreports.com/reports/10049-arbitrary-file-write2026-10-29 https://bugbountyreports.com/reports/3631-arbitrary-file-write-through-archive-extraction2026-10-29 https://bugbountyreports.com/reports/3630-arbitrary-file-write-through-archive-extraction2026-10-29 https://bugbountyreports.com/reports/8817-arbitrary-file-write-triggered-by-deeplink-abuse-metamask2026-10-29 https://bugbountyreports.com/reports/9567-arbitrary-files-and-folders-deletion-vulnerability-with2026-10-29 https://bugbountyreports.com/reports/9369-arbitrary-forum-topic-close-with-get-csrf2026-10-29 https://bugbountyreports.com/reports/2875-arbitrary-heap-exposure-in-json-generate2026-10-29 https://bugbountyreports.com/reports/1676-arbitrary-heap-overread-in-strscan-on-32-bit-ruby-patch2026-10-29 https://bugbountyreports.com/reports/2246-arbitrary-local-file-read-from-admin-restore-from-backup2026-10-29 https://bugbountyreports.com/reports/2519-arbitrary-modification-value-session-cookie-in-badoo-com2026-10-29 https://bugbountyreports.com/reports/7868-arbitrary-post-request-as-victim-user-from-html-injection2026-10-29 https://bugbountyreports.com/reports/8588-arbitrary-read-of-all-svg-files-on-a-nextcloud-server2026-10-29 https://bugbountyreports.com/reports/10034-arbitrary-read-of-another-users-private-repository-without2026-10-29 https://bugbountyreports.com/reports/782-arbitrary-read-on-s3-shopify-delivery-app-storage-files2026-10-29 https://bugbountyreports.com/reports/2043-arbitrary-script-injection-mail-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4370-arbitrary-sql-command-injection2026-10-29 https://bugbountyreports.com/reports/1436-arbitrary-sql-query-execution-and-reflected-xss-in-the-sql2026-10-29 https://bugbountyreports.com/reports/8751-arbitrary-write-in-the-application-s-data-folder-and2026-10-29 https://bugbountyreports.com/reports/779-arbitrary-write-on-s3-shopify-delivery-app-storage-files2026-10-29 https://bugbountyreports.com/reports/947-arbritrary-file-upload-on-airmax2026-10-29 https://bugbountyreports.com/reports/6608-arcgis-rest-service-linked-to-unsecured-survey-data2026-10-29 https://bugbountyreports.com/reports/8274-archived-deleted-private-poll-can-be-viewed-by-another2026-10-29 https://bugbountyreports.com/reports/9185-argo-cd-csrf-leads-to-kubernetes-cluster-compromise2026-10-29 https://bugbountyreports.com/reports/8533-argo-cd-reconciles-apps-outside-configured-namespaces-when2026-10-29 https://bugbountyreports.com/reports/8943-argocd-s-web-terminal-session-doesn-t-expire2026-10-29 https://bugbountyreports.com/reports/10287-argument-injection-in-manage-ssh-via-host-parameter-leads2026-10-29 https://bugbountyreports.com/reports/8851-argument-code-injection-via-activestorage-s-image2026-10-29 https://bugbountyreports.com/reports/7343-array-index-underflow-http-rpc2026-10-29 https://bugbountyreports.com/reports/669-array-fromstring-use-after-free2026-10-29 https://bugbountyreports.com/reports/9171-asar-integrity-bypass-via-filetype-confusion2026-10-29 https://bugbountyreports.com/reports/10144-asbs-analytics-dashboard2026-10-29 https://bugbountyreports.com/reports/10120-asbs-viewing-other-soldiers-pii-board-board-voters-etc2026-10-29 https://bugbountyreports.com/reports/10204-asgirequest-header-concatenation-quadratic-cpu-dos-on2026-10-29 https://bugbountyreports.com/reports/10215-aslr-leak-in-mario-kart-world-through-lan-mode2026-10-29 https://bugbountyreports.com/reports/1149-asn-1-bio-excessive-memory-allocation-cve-2016-21092026-10-29 https://bugbountyreports.com/reports/10131-asp-net-application-trace-enabled2026-10-29 https://bugbountyreports.com/reports/4765-assertion-col-0-col-line-cols-failed-process-aborted-while2026-10-29 https://bugbountyreports.com/reports/4766-assertion-len-1-failed-process-aborted-while-streaming2026-10-29 https://bugbountyreports.com/reports/10252-assertion-error-in-node-url-cc-via-malformed-url-format2026-10-29 https://bugbountyreports.com/reports/9326-assertion-failed-in-node-http2-http2session-http2session2026-10-29 https://bugbountyreports.com/reports/8822-asset-inventory-internal-descriptions-are-leaked-in-csv2026-10-29 https://bugbountyreports.com/reports/6578-assets-vendor-js-file-exposing-sentry-io-token-and-dns-and2026-10-29 https://bugbountyreports.com/reports/99-assigning-a-non-existing-role-to-user-causes-exception-when2026-10-29 https://bugbountyreports.com/reports/6526-async-search-stores-authorization-headers-in-clear-text2026-10-29 https://bugbountyreports.com/reports/5322-athome-starbucks-com-url-parameter-tampering-of-review2026-10-29 https://bugbountyreports.com/reports/925-attach-pinterest-account-no-state-csrf-parameter-in-oauth2026-10-29 https://bugbountyreports.com/reports/9325-attachment-disclosure-via-summary-report2026-10-29 https://bugbountyreports.com/reports/8750-attachment-in-published-hackerone-report-exposure-private2026-10-29 https://bugbountyreports.com/reports/7213-attachment-object-in-graphql-continues-to-grant-access-to2026-10-29 https://bugbountyreports.com/reports/7647-attachment-references-in-markdown-don-t-warn-before2026-10-29 https://bugbountyreports.com/reports/9682-attachments-folder-for-text-app-is-accessible-on-files-drop2026-10-29 https://bugbountyreports.com/reports/6318-attachments-may-be-hijacked-via-appcache-cookiebombing2026-10-29 https://bugbountyreports.com/reports/952-attack-in-not-an-authorized-user2026-10-29 https://bugbountyreports.com/reports/1151-attack-user-privacy-settings-x-frame-options-missing-on-m2026-10-29 https://bugbountyreports.com/reports/1375-attacker-can-access-graphic-representation-of-every-query2026-10-29 https://bugbountyreports.com/reports/7596-attacker-can-access-to-any-ticket-support-on-https-www2026-10-29 https://bugbountyreports.com/reports/4517-attacker-can-add-arbitrary-data-to-the-blockchain-without2026-10-29 https://bugbountyreports.com/reports/9281-attacker-can-add-itself-as-admin-user-and-can-also-change2026-10-29 https://bugbountyreports.com/reports/9412-attacker-can-add-two-free-bags-offered-by-the-site-at-the2026-10-29 https://bugbountyreports.com/reports/4198-attacker-can-book-unlimited-tickets-in-free-at-https-aaf2026-10-29 https://bugbountyreports.com/reports/3921-attacker-can-claim-credentials-for-private-program-that-has2026-10-29 https://bugbountyreports.com/reports/8738-attacker-can-create-malicious-child-epics-linked-to-a2026-10-29 https://bugbountyreports.com/reports/1140-attacker-can-delete-and-read-private-project-webhooks2026-10-29 https://bugbountyreports.com/reports/1395-attacker-can-extract-list-of-private-project-s-project2026-10-29 https://bugbountyreports.com/reports/6567-attacker-can-generate-cancelled-transctions-in-a-user-s2026-10-29 https://bugbountyreports.com/reports/2073-attacker-can-get-vine-repost-user-all-informations-even-ip2026-10-29 https://bugbountyreports.com/reports/6978-attacker-can-obtain-write-access-to-any-federated-share2026-10-29 https://bugbountyreports.com/reports/1139-attacker-can-post-notes-on-private-mr-snippets-and-issues2026-10-29 https://bugbountyreports.com/reports/4292-attacker-can-read-password-from-log-data2026-10-29 https://bugbountyreports.com/reports/2444-attacker-can-trick-other-into-logging-in-as-themselves2026-10-29 https://bugbountyreports.com/reports/8697-attacker-can-unpin-posts-from-companies-he-s-not-part-of2026-10-29 https://bugbountyreports.com/reports/9755-attacker-can-use-any-non-enabled-capability2026-10-29 https://bugbountyreports.com/reports/4338-attacker-is-able-to-access-commit-title-and-team-member2026-10-29 https://bugbountyreports.com/reports/8739-attacker-is-able-to-create-edit-delete-notes-and-leak-the2026-10-29 https://bugbountyreports.com/reports/7392-attacker-is-able-to-join-any-tenant-on-larksuite-and-view2026-10-29 https://bugbountyreports.com/reports/8542-attacker-is-able-to-query-github-repositories-of-arbitrary2026-10-29 https://bugbountyreports.com/reports/5634-attacker-may-be-able-to-bounce-enough-emails-which-suspend2026-10-29 https://bugbountyreports.com/reports/7727-attacker-shall-recieve-order-updates-on-whatsapp-for-users2026-10-29 https://bugbountyreports.com/reports/5561-attacker-with-an-old-account-might-still-be-able-to-dos-ctf2026-10-29 https://bugbountyreports.com/reports/9396-attackers-can-upgrade-and-claim-offer-on-the-premium-trial2026-10-29 https://bugbountyreports.com/reports/4978-attackers-can-control-which-security-questions-they-are2026-10-29 https://bugbountyreports.com/reports/8992-attackers-can-create-unlimited-jobs-by-paying-a-low-price2026-10-29 https://bugbountyreports.com/reports/8908-attackers-can-use-trial-premium-only-by-paying-idr-10-0002026-10-29 https://bugbountyreports.com/reports/8696-attackers-do-not-need-to-pay-for-a-subscription-to-get-the2026-10-29 https://bugbountyreports.com/reports/3601-attcker-can-trick-monero-wallet-into-reporting-it-recived2026-10-29 https://bugbountyreports.com/reports/1902-attempting-double-free-using-the-mruby-compiler-mrbc2026-10-29 https://bugbountyreports.com/reports/661-attention-remote-code-execution-at-http-wpt-ec2-shopify-com2026-10-29 https://bugbountyreports.com/reports/141-atttacker-can-send-invitation-request-to-a-project-that-is2026-10-29 https://bugbountyreports.com/reports/626-audioop-adpcm2lin-buffer-over-read2026-10-29 https://bugbountyreports.com/reports/621-audioop-lin2adpcm-buffer-over-read2026-10-29 https://bugbountyreports.com/reports/3654-audit-log-validation2026-10-29 https://bugbountyreports.com/reports/1221-auth-bypass-on-directory-corp-ubnt-com2026-10-29 https://bugbountyreports.com/reports/10536-authenticated-unsigned-txset-change-spoof-lets-a-malicious2026-10-29 https://bugbountyreports.com/reports/8729-authenticated-but-unauthorized-users-may-enumerate2026-10-29 https://bugbountyreports.com/reports/5091-authenticated-code-execution-through-phar-deserialization2026-10-29 https://bugbountyreports.com/reports/3063-authenticated-cross-site-scripting-in-template-name2026-10-29 https://bugbountyreports.com/reports/10358-authenticated-elasticsearch-painless-script-execution-via2026-10-29 https://bugbountyreports.com/reports/7483-authenticated-kubernetes-principal-with-restricted2026-10-29 https://bugbountyreports.com/reports/7350-authenticated-path-traversal-to-rce2026-10-29 https://bugbountyreports.com/reports/9049-authenticated-path-traversal-to-stored-xss-and-denial-of2026-10-29 https://bugbountyreports.com/reports/3534-authenticated-rce-in-toughswitch2026-10-29 https://bugbountyreports.com/reports/9365-authenticated-rce-via-page-title2026-10-29 https://bugbountyreports.com/reports/3504-authenticated-reflected-xss-on-liberapay-com-via-the-back2026-10-29 https://bugbountyreports.com/reports/5736-authenticated-stored-cross-site-scripting-in-bbpress2026-10-29 https://bugbountyreports.com/reports/6911-authenticated-xxe2026-10-29 https://bugbountyreports.com/reports/9352-authentication-registration-bypass-in-newspack-extended2026-10-29 https://bugbountyreports.com/reports/9427-authentication-registration-bypass-in-newspack-extended2026-10-29 https://bugbountyreports.com/reports/8990-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/4304-authentication-bypass-chaining-two-vulnerabilities-leads-to2026-10-29 https://bugbountyreports.com/reports/7393-authentication-bypass-apachetomcat-misconfiguration-in2026-10-29 https://bugbountyreports.com/reports/9467-authentication-bypass-and-potential-rce-on-the-https-due-to2026-10-29 https://bugbountyreports.com/reports/6501-authentication-bypass-and-rce-on-the-https-due-to-exposed2026-10-29 https://bugbountyreports.com/reports/4248-authentication-bypass-by-abusing-insecure-crypto-tokens-in2026-10-29 https://bugbountyreports.com/reports/8270-authentication-bypass-for-leads-to-take-over-any-users2026-10-29 https://bugbountyreports.com/reports/8342-authentication-bypass-in2026-10-29 https://bugbountyreports.com/reports/9164-authentication-bypass-in-global-site-selector-allows-an2026-10-29 https://bugbountyreports.com/reports/10342-authentication-bypass-in-id4me-handling-via-missing-jwt2026-10-29 https://bugbountyreports.com/reports/9517-authentication-bypass-in-login-token-authentication-method2026-10-29 https://bugbountyreports.com/reports/10063-authentication-bypass-in-subscription-management-endpoint2026-10-29 https://bugbountyreports.com/reports/9596-authentication-bypass-leads-to-complete-account-takeveover2026-10-29 https://bugbountyreports.com/reports/8229-authentication-bypass-leads-to-information-disclosure-at-u2026-10-29 https://bugbountyreports.com/reports/1627-authentication-bypass-leads-to-sensitive-data-exposure2026-10-29 https://bugbountyreports.com/reports/2602-authentication-bypass-on-auth-uber-com-via-subdomain2026-10-29 https://bugbountyreports.com/reports/8650-authentication-bypass-on-gist-github-com-through-ssh2026-10-29 https://bugbountyreports.com/reports/9481-authentication-bypass-on-https2026-10-29 https://bugbountyreports.com/reports/1344-authentication-bypass-on-icinga-monitoring-server2026-10-29 https://bugbountyreports.com/reports/9128-authentication-bypass-on-jetpack-sso-manager-allows-to2026-10-29 https://bugbountyreports.com/reports/1825-authentication-bypass-on-monitoring-server2026-10-29 https://bugbountyreports.com/reports/1715-authentication-bypass-on-sso-ubnt-com-via-subdomain2026-10-29 https://bugbountyreports.com/reports/9425-authentication-bypass-on-tiktok-seller-signup-process2026-10-29 https://bugbountyreports.com/reports/9100-authentication-bypass-to-cve-2023-29822026-10-29 https://bugbountyreports.com/reports/8511-authentication-bypass-using-default-credentials-on2026-10-29 https://bugbountyreports.com/reports/10439-authentication-bypass-via-xml-signature-wrapping-in-saml-sso2026-10-29 https://bugbountyreports.com/reports/1954-authentication-bypass-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/9275-authentication-bypass-with-usage-of-presignedurl2026-10-29 https://bugbountyreports.com/reports/1207-authentication-bypassing-and-sensitive-information2026-10-29 https://bugbountyreports.com/reports/7931-authentication-csrf-resulting-in-unauthorized-account2026-10-29 https://bugbountyreports.com/reports/1087-authentication-data-are-not-clearing2026-10-29 https://bugbountyreports.com/reports/584-authentication-failed-mobile-version2026-10-29 https://bugbountyreports.com/reports/1812-authentication-issue2026-10-29 https://bugbountyreports.com/reports/3833-authentication-issue2026-10-29 https://bugbountyreports.com/reports/7928-authentication-token-and-csrf-token-bypass2026-10-29 https://bugbountyreports.com/reports/10061-authentication-token-theft-via-open-redirect-in-callback2026-10-29 https://bugbountyreports.com/reports/6145-authenticity-token-not-verfied-leads-to-change-business-name2026-10-29 https://bugbountyreports.com/reports/685-authenticity-token-is-not-random-across-page-loads2026-10-29 https://bugbountyreports.com/reports/10494-author-arbitrary-file-deletion-anywhere-on-disk-site2026-10-29 https://bugbountyreports.com/reports/10493-author-stored-xss-in-wp-admin-unescaped-sub-size-filename2026-10-29 https://bugbountyreports.com/reports/7738-authorization-bypass-idor-pii-leakage2026-10-29 https://bugbountyreports.com/reports/10065-authorization-bypass-allows-changing-email-address-of-other2026-10-29 https://bugbountyreports.com/reports/1655-authorization-bypass-in-delivery-chat-logs2026-10-29 https://bugbountyreports.com/reports/10240-authorization-bypass-in-starknet-snap-via-enableauthorize2026-10-29 https://bugbountyreports.com/reports/2826-authorization-bypass-using-login-by-phone-option-horizontal2026-10-29 https://bugbountyreports.com/reports/5199-authorization-for-wp-admin-directory-are-vulnerable-to2026-10-29 https://bugbountyreports.com/reports/10275-authorization-header-leak-in-ssrf-filter-via-cross-host2026-10-29 https://bugbountyreports.com/reports/1928-authorization-issue-in-google-g-suite-allows-dos-through2026-10-29 https://bugbountyreports.com/reports/6293-authorization-token-on-playstation-network-leaks-via2026-10-29 https://bugbountyreports.com/reports/452-auto-approval-of-invitation-to-join-team-as-a-team-member2026-10-29 https://bugbountyreports.com/reports/2182-autoclose-can-close-any-task-regardless-of-policies-spaces2026-10-29 https://bugbountyreports.com/reports/576-autocomplete-enabled-in-paypal-preferences2026-10-29 https://bugbountyreports.com/reports/2824-autocomplete-feature2026-10-29 https://bugbountyreports.com/reports/9477-automatic-admin-access2026-10-29 https://bugbountyreports.com/reports/10322-autotranslate-ddp-method-exposes-private-messages-without2026-10-29 https://bugbountyreports.com/reports/9677-availability-impact-from-exploiting-project-name2026-10-29 https://bugbountyreports.com/reports/5878-availing-zomato-gold-by-using-a-random-third-party-wallet-id2026-10-29 https://bugbountyreports.com/reports/9107-avatar-url-is-exposed-in-patron-export-for-secret-donations2026-10-29 https://bugbountyreports.com/reports/2062-avoid-resend-verification-email-confusion2026-10-29 https://bugbountyreports.com/reports/1419-avoiding-surge-pricing2026-10-29 https://bugbountyreports.com/reports/10437-aws-a2z-com-unauthenticated-clickhouse-ui-database-access2026-10-29 https://bugbountyreports.com/reports/10009-aws-self-registration-internal-librechat-access-to-internal2026-10-29 https://bugbountyreports.com/reports/10111-aws-auto-scaling-service-reporting-aws-internal-for2026-10-29 https://bugbountyreports.com/reports/4064-aws-bucket-leading-to-ios-test-build-code-and-configuration2026-10-29 https://bugbountyreports.com/reports/8514-aws-credentials-disclosure-at2026-10-29 https://bugbountyreports.com/reports/8973-aws-keys-and-user-cookie-leakage-via-uninitialized-memory2026-10-29 https://bugbountyreports.com/reports/1809-aws-s3-bucket-writable-for-authenticated-aws-user2026-10-29 https://bugbountyreports.com/reports/1070-aws-s3-bucket-writeable-for-authenticated-aws-users2026-10-29 https://bugbountyreports.com/reports/5567-aws-s3-bucket-writeable-for-authenticated-aws-users2026-10-29 https://bugbountyreports.com/reports/1577-aws-s3-website-can-t-serve-security-headers-may-allow2026-10-29 https://bugbountyreports.com/reports/1703-aws-signature-disclosure-in-www-digitalsellz-com-allows2026-10-29 https://bugbountyreports.com/reports/7388-aws-subdomain-takeover-of-www2026-10-29 https://bugbountyreports.com/reports/1046-b2i-pvk-bio-heap-corruption2026-10-29 https://bugbountyreports.com/reports/9889-bac-bypass-chatbot-restrictions-via-unauthorized-mention2026-10-29 https://bugbountyreports.com/reports/10478-background-sync-cache-retains-outgoing-additional2026-10-29 https://bugbountyreports.com/reports/3245-backup-source-code-detected2026-10-29 https://bugbountyreports.com/reports/3724-backup-source-code-detected2026-10-29 https://bugbountyreports.com/reports/1845-bad-content-type-in-response-header-when-getting-document2026-10-29 https://bugbountyreports.com/reports/681-bad-extended-ascii-handling-in-http-301-redirects-of-t-co2026-10-29 https://bugbountyreports.com/reports/436-bad-write-in-ttf-font-parsing-win32k-sys2026-10-29 https://bugbountyreports.com/reports/4243-banned-researcher-gets-email-updates-on-a-private-program2026-10-29 https://bugbountyreports.com/reports/8816-banned-user-still-able-to-invited-to-reports-as-a2026-10-29 https://bugbountyreports.com/reports/9978-banned-user-still-has-access-to-their-deleted-account-via2026-10-29 https://bugbountyreports.com/reports/2956-banner-grabbing-apache-server-version-disclousure2026-10-29 https://bugbountyreports.com/reports/3953-banner-grabbing-apache-server-version-disclousure2026-10-29 https://bugbountyreports.com/reports/10331-banner-status-override-by-advertiser-level-users2026-10-29 https://bugbountyreports.com/reports/1612-base-alpha-version-code-exposure2026-10-29 https://bugbountyreports.com/reports/3623-basic-auth-details-is-still-work-on-report-3515552026-10-29 https://bugbountyreports.com/reports/8740-basic-auth-header-on-webdav-requests-is-not-bruteforce2026-10-29 https://bugbountyreports.com/reports/7229-basic-authentication-heap-overflow2026-10-29 https://bugbountyreports.com/reports/4678-bcpowmod-accepts-negative-scale-and-corrupts-one-definition2026-10-29 https://bugbountyreports.com/reports/7908-bd-j-exploit-chain2026-10-29 https://bugbountyreports.com/reports/10428-bedrock-agentcore-starter-toolkit-creates-gateway-iam-roles2026-10-29 https://bugbountyreports.com/reports/10426-bedrock-mantle-api-aws-accepts-bedrock-api-keys-outside-the2026-10-29 https://bugbountyreports.com/reports/6428-being-able-to-change-account-contents-even-after-password2026-10-29 https://bugbountyreports.com/reports/9270-being-able-to-disclose-ibb-bounty-table-of-any-public2026-10-29 https://bugbountyreports.com/reports/1083-beta-version-reveals-paths-environment-variables-and2026-10-29 https://bugbountyreports.com/reports/914-big-bug-in-ssl-breach-compression-attack-cve-2013-35872026-10-29 https://bugbountyreports.com/reports/909-big-bug-with-vault-which-i-have-already-reported-case-6069622026-10-29 https://bugbountyreports.com/reports/7301-big-picture-web-browser-leaks-login-cookies-and-discloses2026-10-29 https://bugbountyreports.com/reports/8749-biometric-key-is-stored-in-windows-credential-manager2026-10-29 https://bugbountyreports.com/reports/7132-bitmoji-source-code-is-accessible2026-10-29 https://bugbountyreports.com/reports/1542-blacklist-bypass-on-callback-urls2026-10-29 https://bugbountyreports.com/reports/1211-bleichenbacher-oracle-in-sslv2-cve-2016-07042026-10-29 https://bugbountyreports.com/reports/5699-blind-command-injection-12026-10-29 https://bugbountyreports.com/reports/6019-blind-http-get-ssrf-via-website-icon-fetch-bypass-of-pull2026-10-29 https://bugbountyreports.com/reports/1410-blind-oob-xxe-at-http-ubermovement-com2026-10-29 https://bugbountyreports.com/reports/10327-blind-post-ssrf-via-web-push-notification-endpoint2026-10-29 https://bugbountyreports.com/reports/8684-blind-server-side-request-forgery-ssrf-allows-scanning2026-10-29 https://bugbountyreports.com/reports/3880-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/6965-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/2174-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/7176-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/7804-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/6250-blind-sql-injection-at-tsftp-informatica-com2026-10-29 https://bugbountyreports.com/reports/8807-blind-sql-injection-https2026-10-29 https://bugbountyreports.com/reports/9582-blind-sql-injection-in-https2026-10-29 https://bugbountyreports.com/reports/8938-blind-sql-injection-in-https-qssearch-aspx2026-10-29 https://bugbountyreports.com/reports/8937-blind-sql-injection-in-https2026-10-29 https://bugbountyreports.com/reports/4723-blind-sql-injection-in-third-party-software-that-allows-to2026-10-29 https://bugbountyreports.com/reports/9219-blind-sql-injection-on-via-uri-path2026-10-29 https://bugbountyreports.com/reports/4609-blind-sql-injection-on2026-10-29 https://bugbountyreports.com/reports/4998-blind-sql-injection-on-dod-site2026-10-29 https://bugbountyreports.com/reports/9078-blind-sql-injection-on-id-indrive-com2026-10-29 https://bugbountyreports.com/reports/4296-blind-sql-injection-on-starbucks-com-gt-and-waf-bypass2026-10-29 https://bugbountyreports.com/reports/10337-blind-sql-injection-via-clientid-parameter-in-zone-include2026-10-29 https://bugbountyreports.com/reports/7270-blind-sql-on-selfcare-mtn-com-af2026-10-29 https://bugbountyreports.com/reports/2449-blind-sqli-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4372-blind-sqli-leading-to-rce-from-unauthenticated-access-to-a2026-10-29 https://bugbountyreports.com/reports/2479-blind-sqli-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/8734-blind-ssrf-as-normal-user-from-mailapp2026-10-29 https://bugbountyreports.com/reports/2621-blind-ssrf-due-to-img-tag-injection-in-career-form2026-10-29 https://bugbountyreports.com/reports/8067-blind-ssrf-external-interaction-on2026-10-29 https://bugbountyreports.com/reports/3031-blind-ssrf-in-integrations-by-abusing-a-bug-in-ruby-s2026-10-29 https://bugbountyreports.com/reports/6377-blind-ssrf-in-ads-tiktok-com2026-10-29 https://bugbountyreports.com/reports/2981-blind-ssrf-in-emblem-editor-22026-10-29 https://bugbountyreports.com/reports/9146-blind-ssrf-in-mail-app2026-10-29 https://bugbountyreports.com/reports/8203-blind-ssrf-in-social-plugins-line-me2026-10-29 https://bugbountyreports.com/reports/3562-blind-ssrf-on-errors-hackerone-net-due-to-sentry2026-10-29 https://bugbountyreports.com/reports/5780-blind-ssrf-on-https-labs-data-gov-dashboard-campaign-json2026-10-29 https://bugbountyreports.com/reports/9035-blind-ssrf-on-https-my-exnessaffiliates-com-allows-for2026-10-29 https://bugbountyreports.com/reports/8079-blind-ssrf-on-platform-dash-cloudflare-com-due-to-sentry2026-10-29 https://bugbountyreports.com/reports/6433-blind-ssrf-on-velodrome-canary-k8s-io2026-10-29 https://bugbountyreports.com/reports/8663-blind-ssrf-to-internal-services-in-matrix-preview-link-api2026-10-29 https://bugbountyreports.com/reports/8221-blind-ssrf-via-image-upload-url-downloader-on-https2026-10-29 https://bugbountyreports.com/reports/9752-blind-ssrf-vulnerability-in-appstore-release-upload-form2026-10-29 https://bugbountyreports.com/reports/9572-blind-ssrf-vulnerability-on-cz-acronis-com2026-10-29 https://bugbountyreports.com/reports/5339-blind-ssrf-while-creating-templates2026-10-29 https://bugbountyreports.com/reports/2828-blind-stored-xss-parcel-grab-com-name-parameter2026-10-29 https://bugbountyreports.com/reports/6546-blind-stored-xss-due-to-insecure-contact-form-at-https-mil2026-10-29 https://bugbountyreports.com/reports/5877-blind-stored-xss-due-to-insecure-contact-form-at-https-www2026-10-29 https://bugbountyreports.com/reports/4412-blind-stored-xss-in-report-a-problem-on-www-data-gov-issue2026-10-29 https://bugbountyreports.com/reports/3345-blind-stored-xss-in-demo-form2026-10-29 https://bugbountyreports.com/reports/6232-blind-stored-xss-in-hackerone-s-sal-4-1-4-2149-sal-com2026-10-29 https://bugbountyreports.com/reports/7111-blind-stored-xss-in-https-partners-acronis-com-admin-which2026-10-29 https://bugbountyreports.com/reports/9208-blind-stored-xss-in-shopify-internal-parquet-viewer2026-10-29 https://bugbountyreports.com/reports/6704-blind-stored-xss-on-leads-to-takeover-admin-account2026-10-29 https://bugbountyreports.com/reports/6710-blind-stored-xss-on-https-after-filling-a-request-at-https2026-10-29 https://bugbountyreports.com/reports/5295-blind-stored-xss-on-ios-app-due-to-unsanitized-webview2026-10-29 https://bugbountyreports.com/reports/9531-blind-stored-xss-on-the-internal-host2026-10-29 https://bugbountyreports.com/reports/6747-blind-stored-xss-payload-fired-at-the-backend-on-https2026-10-29 https://bugbountyreports.com/reports/5910-blind-stored-xss-via-staff-name2026-10-29 https://bugbountyreports.com/reports/7964-blind-user-agent-sql-injection-to-blind-remote-os-command2026-10-29 https://bugbountyreports.com/reports/7488-blind-xss2026-10-29 https://bugbountyreports.com/reports/3307-blind-xss-report-review-admin-panel2026-10-29 https://bugbountyreports.com/reports/7879-blind-xss-in-app-pullrequest-com-via-reviews-ratings-uuid2026-10-29 https://bugbountyreports.com/reports/2712-blind-xss-in-mapbox-com-contact2026-10-29 https://bugbountyreports.com/reports/3226-blind-xss-in-mobpub-marketplace-admin-production-sentry-via2026-10-29 https://bugbountyreports.com/reports/3741-blind-xss-in-the-rocket-chat-registration-email2026-10-29 https://bugbountyreports.com/reports/9662-blind-xss-on-admin-acronis-com-via-delete-account-form-on2026-10-29 https://bugbountyreports.com/reports/6399-blind-xss-on-image-upload2026-10-29 https://bugbountyreports.com/reports/7066-blind-xss-on-twitter-s-internal-big-data-panel-at2026-10-29 https://bugbountyreports.com/reports/7614-blind-xss-on-twitter-s-internal-jira-panel-at-allows2026-10-29 https://bugbountyreports.com/reports/7817-blind-xss-via-feedback-form2026-10-29 https://bugbountyreports.com/reports/3271-blind-xxe-on-pu-vk-com2026-10-29 https://bugbountyreports.com/reports/6944-blocked-user-can-see-live-video2026-10-29 https://bugbountyreports.com/reports/7071-blocked-user-can-send-notification-by-liking-the-message2026-10-29 https://bugbountyreports.com/reports/5067-blocked-user-git-access-through-ci-cd-token2026-10-29 https://bugbountyreports.com/reports/10231-blocking-a-company-page-admin-prevents-him-from-delete-paid2026-10-29 https://bugbountyreports.com/reports/2587-blocking-users-to-sign-up-on-the-site2026-10-29 https://bugbountyreports.com/reports/61-blocking-yourself2026-10-29 https://bugbountyreports.com/reports/7421-blog-posts-atom-feed-of-a-store-with-password-protection2026-10-29 https://bugbountyreports.com/reports/10047-blu-ray-disc-java-sandbox-escape-via-two-vulnerabilities2026-10-29 https://bugbountyreports.com/reports/1045-bn-hex2bn-bn-dec2bn-null-pointer-deref-heap-corruption-cve2026-10-29 https://bugbountyreports.com/reports/1084-bn-mod-exp-may-produce-incorrect-results-on-x86-64-cve-20152026-10-29 https://bugbountyreports.com/reports/1505-boards-leak-private-label-names-and-desciptions2026-10-29 https://bugbountyreports.com/reports/719-body-injection-in-mailto-link-while-commenting-shop-blog2026-10-29 https://bugbountyreports.com/reports/1412-bookmarks-delete-all-existing-bookmarks-of-a-user2026-10-29 https://bugbountyreports.com/reports/9769-boolen-based-blind-sql-injection-via-user-agent-in-mil2026-10-29 https://bugbountyreports.com/reports/7531-bot-setting-information-leakage-in-openchat-room2026-10-29 https://bugbountyreports.com/reports/9602-brave-android-incorrect-url-eliding-in-brave-shields-pop-up2026-10-29 https://bugbountyreports.com/reports/7183-brave-browser-permanently-timestamps-logs-connection-times2026-10-29 https://bugbountyreports.com/reports/6196-brave-browser-potentially-logs-the-last-time-a-tor-window2026-10-29 https://bugbountyreports.com/reports/7000-brave-browser-tor-window-leaks-user-s-real-ip-to-the2026-10-29 https://bugbountyreports.com/reports/3700-brave-browser-unexpectedly-allows-to-send-arbitrary-ipc2026-10-29 https://bugbountyreports.com/reports/8765-brave-news-feeds-can-open-arbitrary-chrome-urls2026-10-29 https://bugbountyreports.com/reports/8766-brave-shield-for-ios-is-weak-against-idn-homograph-attacks2026-10-29 https://bugbountyreports.com/reports/10270-brave-shields-domain-reordering-leads-to-origin-confusion2026-10-29 https://bugbountyreports.com/reports/387-breaking-bugs-as-team-member2026-10-29 https://bugbountyreports.com/reports/1427-bring-grtp-co-up-to-a-grade-on-ssllabs2026-10-29 https://bugbountyreports.com/reports/7926-broken-access-control2026-10-29 https://bugbountyreports.com/reports/9949-broken-access-control-idor-in-booking-detail-and-bids-could2026-10-29 https://bugbountyreports.com/reports/10186-broken-access-control-allows-advertiser-accounts-to-delete2026-10-29 https://bugbountyreports.com/reports/9881-broken-access-control-exposes-email-verification-status-and2026-10-29 https://bugbountyreports.com/reports/9825-broken-access-control-leads-to-disclosure-of-transaction2026-10-29 https://bugbountyreports.com/reports/4301-broken-access-control-on-apps2026-10-29 https://bugbountyreports.com/reports/7739-broken-access-control-can-lead-to-legitimate-user-data-loss2026-10-29 https://bugbountyreports.com/reports/9777-broken-access-control-horizontal-privilege-escalation2026-10-29 https://bugbountyreports.com/reports/6575-broken-access-controls2026-10-29 https://bugbountyreports.com/reports/8225-broken-access-discloses-users-and-pii-at-https-htus2026-10-29 https://bugbountyreports.com/reports/332-broken-authentication2026-10-29 https://bugbountyreports.com/reports/7631-broken-authentication2026-10-29 https://bugbountyreports.com/reports/4307-broken-authentication-security-token-gets-captured-via-man2026-10-29 https://bugbountyreports.com/reports/3737-broken-authentication-session-token-bug2026-10-29 https://bugbountyreports.com/reports/315-broken-authentication-including-slack-oauth-bugs2026-10-29 https://bugbountyreports.com/reports/2332-broken-authentication-session-management-login-bypass-at2026-10-29 https://bugbountyreports.com/reports/280-broken-authentication-and-session-management2026-10-29 https://bugbountyreports.com/reports/373-broken-authentication-and-session-management2026-10-29 https://bugbountyreports.com/reports/1437-broken-authentication-and-session-management-flaw2026-10-29 https://bugbountyreports.com/reports/6206-broken-authentication-and-session-management-flaw-after2026-10-29 https://bugbountyreports.com/reports/10-broken-authentication-and-session-management-owasp-a22026-10-29 https://bugbountyreports.com/reports/1016-broken-authentication-on-badoo2026-10-29 https://bugbountyreports.com/reports/7635-broken-authentication-session-token-bug2026-10-29 https://bugbountyreports.com/reports/7723-broken-domain-link-takeover-from-kubernetes-io-docs2026-10-29 https://bugbountyreports.com/reports/7504-broken-github-link-used-in-deployment-docs-of-github-com2026-10-29 https://bugbountyreports.com/reports/1792-broken-handling-of-maximum-number-of-method-call-arguments2026-10-29 https://bugbountyreports.com/reports/5283-broken-link-for-wrong-domain-entry-may-be-leveraged-for2026-10-29 https://bugbountyreports.com/reports/7417-broken-link-hijacing-in-https-kubernetes-csi-github-io-docs2026-10-29 https://bugbountyreports.com/reports/7704-broken-link-hijacking-in-https-kubernetes-csi-github-io2026-10-29 https://bugbountyreports.com/reports/7416-broken-link-hijacking-on-kubernetes-io-documentation2026-10-29 https://bugbountyreports.com/reports/6835-broken-link-hijacking-on-twitter-link2026-10-29 https://bugbountyreports.com/reports/6996-broken-link-on-ping-identity-s-vulnerability-submission2026-10-29 https://bugbountyreports.com/reports/7326-broken-link-on-tiktokus-info2026-10-29 https://bugbountyreports.com/reports/7012-broken-link-on-urban-company-s-vulnerability-submission-form2026-10-29 https://bugbountyreports.com/reports/7505-broken-link-takeover-from-kubernetes-io-docs2026-10-29 https://bugbountyreports.com/reports/3036-broken-links-for-stale-domains-may-be-leveraged-for2026-10-29 https://bugbountyreports.com/reports/6834-broken-parsing-of-git-diff-allows-an-attacker-to-inject2026-10-29 https://bugbountyreports.com/reports/7430-broken-subdomain-takeover-of-runpanther-which-was-pointing2026-10-29 https://bugbountyreports.com/reports/6358-broken-validation-of-user-id-for-jwt-token2026-10-29 https://bugbountyreports.com/reports/9818-broken-x-twitter-link-on-hemi-xyz-about2026-10-29 https://bugbountyreports.com/reports/361-browser-cross-site-scripting-filter-misconfiguration2026-10-29 https://bugbountyreports.com/reports/7952-browser-is-not-following-proper-flow-for-redirection-cause2026-10-29 https://bugbountyreports.com/reports/3738-browser-self-xss-protection-not-implemented2026-10-29 https://bugbountyreports.com/reports/7179-brute-force-against-vmware-horizon2026-10-29 https://bugbountyreports.com/reports/1988-brute-force-attack-against-pin-on-card-history-page-could2026-10-29 https://bugbountyreports.com/reports/7655-brute-force-attack-of-current-password-on-login-page-by2026-10-29 https://bugbountyreports.com/reports/1556-brute-force-login-and-bypass-locked-account-restrictions2026-10-29 https://bugbountyreports.com/reports/7968-brute-force-of-a-current-password-on-a-disable-2fa-leads-to2026-10-29 https://bugbountyreports.com/reports/8045-brute-force-of-fabric-ca-server-admin-account2026-10-29 https://bugbountyreports.com/reports/8825-brute-force-protection-allows-to-send-more-requests-than2026-10-29 https://bugbountyreports.com/reports/8094-brute-force-protections-don-t-work2026-10-29 https://bugbountyreports.com/reports/1371-brute-forcing-invite-codes-in-partners-uber-com2026-10-29 https://bugbountyreports.com/reports/70-bruteforce-attack-in-login-panel2026-10-29 https://bugbountyreports.com/reports/5168-bruteforce-in-admin-panel2026-10-29 https://bugbountyreports.com/reports/1372-bruteforce-invite-codes-easy-way2026-10-29 https://bugbountyreports.com/reports/5133-bruteforce-password-recovery-code2026-10-29 https://bugbountyreports.com/reports/9156-bruteforce-protection-in-password-verification-can-be2026-10-29 https://bugbountyreports.com/reports/3115-bruteforcing-coupons2026-10-29 https://bugbountyreports.com/reports/186-bruteforcing-irccloud-login2026-10-29 https://bugbountyreports.com/reports/3022-bruteforcing-password-reset-tokens-could-lead-to-account2026-10-29 https://bugbountyreports.com/reports/3002-buddypress-2-9-1-exceeding-the-maximum-upload-size-xss2026-10-29 https://bugbountyreports.com/reports/3380-buffer-out-of-bound-read-in-miniupnpc-xml-parser2026-10-29 https://bugbountyreports.com/reports/507-buffer-over-flow-when-parsing-tar-zip-phar-in-phar-set-inode2026-10-29 https://bugbountyreports.com/reports/708-buffer-over-read-in-exif-read-data-with-tiff-ifd-tag2026-10-29 https://bugbountyreports.com/reports/508-buffer-over-read-in-unserialize-when-parsing-phar2026-10-29 https://bugbountyreports.com/reports/6212-buffer-over-write-in-finfo-open-with-malformed-magic-file2026-10-29 https://bugbountyreports.com/reports/7108-buffer-overflow-in-ext-lm-group-acl-helper2026-10-29 https://bugbountyreports.com/reports/5920-buffer-overflow-in-hl-exe-s-launch-game-argument-allows-an2026-10-29 https://bugbountyreports.com/reports/2368-buffer-overflow-in-http-parse-hostinfo-parse-userinfo-and2026-10-29 https://bugbountyreports.com/reports/1384-buffer-overflow-in-http-url-parsing-functions2026-10-29 https://bugbountyreports.com/reports/4286-buffer-overflow-in-libavi-plugin-memmove-call2026-10-29 https://bugbountyreports.com/reports/1787-buffer-overflow-in-mrb-time-asctime2026-10-29 https://bugbountyreports.com/reports/7574-buffer-overflow-in-optimized-escape-html-method2026-10-29 https://bugbountyreports.com/reports/1057-buffer-overflow-in-php-of-the-airmax-products2026-10-29 https://bugbountyreports.com/reports/7215-buffer-overflow-in-pycarg-repr-in-ctypes-callproc-c-for2026-10-29 https://bugbountyreports.com/reports/7540-buffer-overflow-in-req-parsebody-method-in-lua-request-c2026-10-29 https://bugbountyreports.com/reports/7109-buffer-overflow-in-smblib-c2026-10-29 https://bugbountyreports.com/reports/4486-buffer-overflow-in-yywarning-s2026-10-29 https://bugbountyreports.com/reports/3657-buffer-overflows-in-demo-parsing2026-10-29 https://bugbountyreports.com/reports/6218-buffer-overread-in-base64-code-of-the-xmlrpc-module2026-10-29 https://bugbountyreports.com/reports/7286-buffer-overrun-in-steam-silk-voice-decoder2026-10-29 https://bugbountyreports.com/reports/2001-buffer-underflow-in-sprintf2026-10-29 https://bugbountyreports.com/reports/1605-bug2026-10-29 https://bugbountyreports.com/reports/4084-bug-in-graphql-and-api-integration-leads-to-limited-user2026-10-29 https://bugbountyreports.com/reports/160-bug-in-ios-application-which-could-lead-to-unauthorised2026-10-29 https://bugbountyreports.com/reports/35-bug-in-source-code-files-v1-12026-10-29 https://bugbountyreports.com/reports/283-bug-on-registration-as-new-translator-user2026-10-29 https://bugbountyreports.com/reports/1349-bug-report2026-10-29 https://bugbountyreports.com/reports/10014-bug-report-23jan135-subdomain-takeover-via-shopify2026-10-29 https://bugbountyreports.com/reports/10015-bug-report-23jan136-subdomain-takeover-via-shopify2026-10-29 https://bugbountyreports.com/reports/2166-bug-reporting-template-encourages-users-to-paste-config2026-10-29 https://bugbountyreports.com/reports/2176-bug-reporting-template-encourages-users-to-paste-config2026-10-29 https://bugbountyreports.com/reports/4283-build-fetches-jars-over-http2026-10-29 https://bugbountyreports.com/reports/7281-built-in-tls-module-unexpectedly-treats-rejectunauthorized2026-10-29 https://bugbountyreports.com/reports/5055-bulgaria-subdomain-takeover-of-mail-starbucks-bg2026-10-29 https://bugbountyreports.com/reports/668-bulk-discount-app-in-myshopify-com-exposes-http2026-10-29 https://bugbountyreports.com/reports/1519-bulk-uuid-enumeration-via-invite-codes2026-10-29 https://bugbountyreports.com/reports/6719-bumble-api-exposes-read-status-of-chat-messages2026-10-29 https://bugbountyreports.com/reports/9261-bundler-s-rce-with-response-using-marshal2026-10-29 https://bugbountyreports.com/reports/5734-bunyan-rce-via-insecure-command-formatting2026-10-29 https://bugbountyreports.com/reports/3517-burp-does-not-validate-the-common-name-of-the-presented2026-10-29 https://bugbountyreports.com/reports/10619-burp-suite-openapi-event-log-html-injection-triggers2026-10-29 https://bugbountyreports.com/reports/10352-burp-suite-professional-browser-powered-crawl-can-write2026-10-29 https://bugbountyreports.com/reports/10242-business-logic-bypass-allows-setting-read-access-role2026-10-29 https://bugbountyreports.com/reports/10017-business-logic-error-bypass-of-otp-verification-during2026-10-29 https://bugbountyreports.com/reports/1469-business-logic-failure-browser-cache-management-and-logout2026-10-29 https://bugbountyreports.com/reports/167-business-logic-failure-browser-cache-management-and-logout2026-10-29 https://bugbountyreports.com/reports/5815-business-logic-flaw-a-non-premium-user-can-change-update2026-10-29 https://bugbountyreports.com/reports/8291-business-suite-get-leads-resulting-in-revealing-user-email2026-10-29 https://bugbountyreports.com/reports/419-buying-ondemand-videos-that-0-1-and-sometimes-for-free2026-10-29 https://bugbountyreports.com/reports/2591-by-pass-rate-limit-exceed2026-10-29 https://bugbountyreports.com/reports/1292-byassing-otp-verification2026-10-29 https://bugbountyreports.com/reports/1629-bybass-the-closing-of-the-account-and-logged-again-to-your2026-10-29 https://bugbountyreports.com/reports/4627-bypass-token-in-forms-merchant-kartpay-com2026-10-29 https://bugbountyreports.com/reports/6170-bypass-industry-documents-validation2026-10-29 https://bugbountyreports.com/reports/9992-bypass-no-links-restriction-in-biography-via-protocol2026-10-29 https://bugbountyreports.com/reports/1640-bypass-8-chars-password-complexity-with-6-chars-only-due-to2026-10-29 https://bugbountyreports.com/reports/7489-bypass-a-fix-for-report-7080132026-10-29 https://bugbountyreports.com/reports/736-bypass-access-restrictions-from-api2026-10-29 https://bugbountyreports.com/reports/6941-bypass-apiserver-proxy-filter2026-10-29 https://bugbountyreports.com/reports/30-bypass-auth-email-domains2026-10-29 https://bugbountyreports.com/reports/147-bypass-auth-email-domains2026-10-29 https://bugbountyreports.com/reports/31-bypass-auth-email-domains-22026-10-29 https://bugbountyreports.com/reports/3561-bypass-blocked-profile-protection-on-aircrm-ubnt-com2026-10-29 https://bugbountyreports.com/reports/4948-bypass-captcha-in-the-form-forgot-password2026-10-29 https://bugbountyreports.com/reports/3376-bypass-captcha-protection2026-10-29 https://bugbountyreports.com/reports/8283-bypass-cloudflare-warp-lock-on-ios2026-10-29 https://bugbountyreports.com/reports/5269-bypass-configured-2fa-provider-with-another-provider-that2026-10-29 https://bugbountyreports.com/reports/5604-bypass-email-activation-on-http-axa-dxi-eu2026-10-29 https://bugbountyreports.com/reports/4470-bypass-email-verification-able-to-access-internal-gitlab2026-10-29 https://bugbountyreports.com/reports/5085-bypass-email-verification-and-create-email-template-with2026-10-29 https://bugbountyreports.com/reports/9762-bypass-email-verification-for-monitoring-at-monitor-mozilla2026-10-29 https://bugbountyreports.com/reports/7650-bypass-email-verification-in-customer-portal2026-10-29 https://bugbountyreports.com/reports/9746-bypass-email-verification-on-add-email-monitoring2026-10-29 https://bugbountyreports.com/reports/5070-bypass-email-verification-using-salesforce-reproducible-in2026-10-29 https://bugbountyreports.com/reports/6438-bypass-extension-check-leads-to-stored-xss-at-https-s22026-10-29 https://bugbountyreports.com/reports/2125-bypass-file-access-control-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/3956-bypass-filter-and-get-stored-xss2026-10-29 https://bugbountyreports.com/reports/6063-bypass-filter-on-link-of-build2026-10-29 https://bugbountyreports.com/reports/1607-bypass-fix-in-https-hackerone-com-reports-151516-report2026-10-29 https://bugbountyreports.com/reports/4414-bypass-for-488147-enables-stored-xss-on-https-paypal-com2026-10-29 https://bugbountyreports.com/reports/7610-bypass-for-997350-your-store-myshopify-com-preview-link-is2026-10-29 https://bugbountyreports.com/reports/5560-bypass-for-blind-ssrf-281950-and-2874962026-10-29 https://bugbountyreports.com/reports/8827-bypass-for-forced-re-authentication-upon-biometrics-change2026-10-29 https://bugbountyreports.com/reports/7927-bypass-forced-password-protection-via-circles-app2026-10-29 https://bugbountyreports.com/reports/5527-bypass-front-server-restrictions-and-access-to-forbidden2026-10-29 https://bugbountyreports.com/reports/1364-bypass-glasswire-s-monitoring-of-hosts-file2026-10-29 https://bugbountyreports.com/reports/7860-bypass-global-deny-lists-by-wrapping-domains-using-in-https2026-10-29 https://bugbountyreports.com/reports/4020-bypass-graphql-rate-limit-by-abusing-negative-cost-queries2026-10-29 https://bugbountyreports.com/reports/9432-bypass-incomplete-fix-of-cve-2024-279802026-10-29 https://bugbountyreports.com/reports/3052-bypass-insecure-password-validation2026-10-29 https://bugbountyreports.com/reports/8500-bypass-invite-accept-for-victim2026-10-29 https://bugbountyreports.com/reports/8166-bypass-local-authentication-pin-code2026-10-29 https://bugbountyreports.com/reports/9430-bypass-network-import-restriction-via-data-url2026-10-29 https://bugbountyreports.com/reports/6505-bypass-of-1047119-missing-rate-limit-while-creating-plug2026-10-29 https://bugbountyreports.com/reports/8899-bypass-of-2035332-rxss-at-image-hackerone-live-via-the-url2026-10-29 https://bugbountyreports.com/reports/3604-bypass-of-2fa2026-10-29 https://bugbountyreports.com/reports/4422-bypass-of-biometrics-security-functionality-is-possible-in2026-10-29 https://bugbountyreports.com/reports/10064-bypass-of-cloudflare-s-cache-keys-and-waf-via-header2026-10-29 https://bugbountyreports.com/reports/7784-bypass-of-fix-13707492026-10-29 https://bugbountyreports.com/reports/4157-bypass-of-gitlab-ci-runner-slash-fix-in-yaml-validation2026-10-29 https://bugbountyreports.com/reports/6336-bypass-of-image-rewriting-tracking-blocker-via-srcset2026-10-29 https://bugbountyreports.com/reports/10238-bypass-of-open-redirect-fix-on-lovable-dev-via-path2026-10-29 https://bugbountyreports.com/reports/7167-bypass-of-privacy-filter-tracking-pixel-blocker2026-10-29 https://bugbountyreports.com/reports/6872-bypass-of-rate-limiting-in-secure-session-endpoint-s2026-10-29 https://bugbountyreports.com/reports/3692-bypass-of-request-line-length-limit-to-dos-via-cache2026-10-29 https://bugbountyreports.com/reports/10290-bypass-of-restricted-keyword-mozilla-in-display-name-field2026-10-29 https://bugbountyreports.com/reports/7036-bypass-of-ssrf-vulnerability2026-10-29 https://bugbountyreports.com/reports/7241-bypass-of-the-installation-sandbox-by-injecting-keystrokes2026-10-29 https://bugbountyreports.com/reports/1541-bypass-of-the-ssrf-protection-slack-commands-phabricator2026-10-29 https://bugbountyreports.com/reports/4063-bypass-of-the-ssrf-protection-in-event-subscriptions2026-10-29 https://bugbountyreports.com/reports/5310-bypass-old-password-with-array-in-admin-account-user-email2026-10-29 https://bugbountyreports.com/reports/1213-bypass-otp-verification-when-placing-order2026-10-29 https://bugbountyreports.com/reports/2680-bypass-otp-verification-when-placing-order2026-10-29 https://bugbountyreports.com/reports/8621-bypass-parsing-of-transaction-data-users-on-the-phishing2026-10-29 https://bugbountyreports.com/reports/5206-bypass-password-authentication-for-updating-email-and-phone2026-10-29 https://bugbountyreports.com/reports/6450-bypass-password-authentication-to-update-the-password2026-10-29 https://bugbountyreports.com/reports/6601-bypass-password-authentication-to-update-the-password2026-10-29 https://bugbountyreports.com/reports/9155-bypass-password-confirmation-via-context-dependent-access2026-10-29 https://bugbountyreports.com/reports/5095-bypass-password-reset-rate-limit-protection-at-moneybird2026-10-29 https://bugbountyreports.com/reports/1923-bypass-permissions2026-10-29 https://bugbountyreports.com/reports/506-bypass-pin-4-digit-passcode-on-your-android-app2026-10-29 https://bugbountyreports.com/reports/9056-bypass-r2-payment-screen2026-10-29 https://bugbountyreports.com/reports/1736-bypass-rate-limiting-on-users-password-possibly-site-wide2026-10-29 https://bugbountyreports.com/reports/7143-bypass-rate-limits-on-app-snapchat-com-api-endpoint-via-x2026-10-29 https://bugbountyreports.com/reports/4634-bypass-report-416983-removed-staff-members-who-had-apps2026-10-29 https://bugbountyreports.com/reports/9048-bypass-report-submit-restriction-ban-using-the-api-key2026-10-29 https://bugbountyreports.com/reports/6067-bypass-restrict-of-member-subscription-to-use-custom2026-10-29 https://bugbountyreports.com/reports/552-bypass-setup-by-external-activity-invoke2026-10-29 https://bugbountyreports.com/reports/6393-bypass-sms-verification-to-delete-tiktok-account2026-10-29 https://bugbountyreports.com/reports/7331-bypass-sql-injection-11093112026-10-29 https://bugbountyreports.com/reports/6361-bypass-subscription2026-10-29 https://bugbountyreports.com/reports/6912-bypass-t-co-link-shortener-in-twitter-direct-messages2026-10-29 https://bugbountyreports.com/reports/7064-bypass-the-fix-of-report-1078283-due-to-poor-validation2026-10-29 https://bugbountyreports.com/reports/1689-bypass-the-resend-limit-in-send-invites2026-10-29 https://bugbountyreports.com/reports/3445-bypass-to-defective-fix-of-path-traversal2026-10-29 https://bugbountyreports.com/reports/2179-bypass-to-postmessage-origin-validation-via-ftp2026-10-29 https://bugbountyreports.com/reports/5205-bypass-to-report-280389-thinking-the-issue-is-not-fixed-yet2026-10-29 https://bugbountyreports.com/reports/6376-bypass-tracking-blocker-protection-using-slashes-without2026-10-29 https://bugbountyreports.com/reports/3062-bypass-two-factor-authentication2026-10-29 https://bugbountyreports.com/reports/8201-bypass-two-factor-authentication2026-10-29 https://bugbountyreports.com/reports/8434-bypass-two-factor-authentication-in-android-apps-and-web2026-10-29 https://bugbountyreports.com/reports/8858-bypass-two-factor-authentication2026-10-29 https://bugbountyreports.com/reports/3884-bypass-user-interaction-to-initiate-a-voip-call-to-another2026-10-29 https://bugbountyreports.com/reports/8727-bypass-validation-parts-in-aws-iam-authenticator-for2026-10-29 https://bugbountyreports.com/reports/1456-bypass-verification-of-email-while-creating-account-no-rate2026-10-29 https://bugbountyreports.com/reports/5774-bypass-voting-restriction-due-to-http-header-injection2026-10-29 https://bugbountyreports.com/reports/8501-bypass-stored-xss-with-csp-bypass-via-scoped-labels-color2026-10-29 https://bugbountyreports.com/reports/6588-bypassed-a-fix-to-gain-access-to-pii-of-more-than-1002026-10-29 https://bugbountyreports.com/reports/1088-bypassed-password-authentication-before-enabling-otp2026-10-29 https://bugbountyreports.com/reports/1697-bypassing-you-ve-requested-your-data-the-maximum-number-of2026-10-29 https://bugbountyreports.com/reports/334-bypassing-2fa-for-btc-transfers2026-10-29 https://bugbountyreports.com/reports/9512-bypassing-2fa-with-conventional-session-management-open2026-10-29 https://bugbountyreports.com/reports/2667-bypassing-access-control-changing-owner-s-name-in-a-private2026-10-29 https://bugbountyreports.com/reports/8197-bypassing-authorization-of-linked-instagram-account2026-10-29 https://bugbountyreports.com/reports/9951-bypassing-bronze-partner-wallet-restriction-to-accept-trips2026-10-29 https://bugbountyreports.com/reports/7943-bypassing-cache-deception-armor-using-avif-extension-file2026-10-29 https://bugbountyreports.com/reports/1425-bypassing-callback-url-validation-on-digits2026-10-29 https://bugbountyreports.com/reports/9267-bypassing-collaborator-restrictions-retaining-admin-access2026-10-29 https://bugbountyreports.com/reports/7445-bypassing-commenting-on-restricted-audience-videos2026-10-29 https://bugbountyreports.com/reports/7130-bypassing-content-security-policy-leads-to-open-redirect2026-10-29 https://bugbountyreports.com/reports/5501-bypassing-cors-misconfiguration-leads-to-sensitive-exposure2026-10-29 https://bugbountyreports.com/reports/7730-bypassing-cors-misconfiguration-leads-to-sensitive-exposure2026-10-29 https://bugbountyreports.com/reports/8591-bypassing-creation-of-api-tokens-without-email-verification2026-10-29 https://bugbountyreports.com/reports/3459-bypassing-csrf-token-on-reply-message-send-message2026-10-29 https://bugbountyreports.com/reports/1610-bypassing-csv-injection-using-new-line-charcter2026-10-29 https://bugbountyreports.com/reports/2211-bypassing-digits-bridge-origin-validation2026-10-29 https://bugbountyreports.com/reports/5710-bypassing-digits-origin-validation-which-leads-to-account2026-10-29 https://bugbountyreports.com/reports/1424-bypassing-digits-web-authentication-s-host-validation-with2026-10-29 https://bugbountyreports.com/reports/8242-bypassing-domain-deny-list-rule-in-smokescreen-via-double2026-10-29 https://bugbountyreports.com/reports/7700-bypassing-domain-deny-list-rule-in-smokescreen-via-trailing2026-10-29 https://bugbountyreports.com/reports/8995-bypassing-garbage-collection-with-uppercase-endpoint2026-10-29 https://bugbountyreports.com/reports/9660-bypassing-hackerone-2fa-due-to-race-condition2026-10-29 https://bugbountyreports.com/reports/3243-bypassing-homograph-attack-using-tested-on-windows2026-10-29 https://bugbountyreports.com/reports/7475-bypassing-html-filter-in-packing-slip-template-lead-to-ssrf2026-10-29 https://bugbountyreports.com/reports/10289-bypassing-inbox-privacy-settings-and-enabling-spam-on-pixiv2026-10-29 https://bugbountyreports.com/reports/4383-bypassing-lock-protection2026-10-29 https://bugbountyreports.com/reports/3438-bypassing-one-time-checkout-router-page-revealing-payment2026-10-29 https://bugbountyreports.com/reports/6515-bypassing-passcode-device-credentials2026-10-29 https://bugbountyreports.com/reports/1091-bypassing-password-authentication-of-users-that-have-2fa2026-10-29 https://bugbountyreports.com/reports/800-bypassing-password-requirement-during-deletion-of-accout2026-10-29 https://bugbountyreports.com/reports/1257-bypassing-password-reset2026-10-29 https://bugbountyreports.com/reports/4554-bypassing-push-rules-via-mrs-created-by-email2026-10-29 https://bugbountyreports.com/reports/2019-bypassing-quota-limit2026-10-29 https://bugbountyreports.com/reports/9663-bypassing-recaptcha-protection-in-https-connect-acronis-com2026-10-29 https://bugbountyreports.com/reports/260-bypassing-same-origin-policy-with-jsonp-apis-and-flash2026-10-29 https://bugbountyreports.com/reports/9272-bypassing-the-block-of-security-domain-restriction-and2026-10-29 https://bugbountyreports.com/reports/1708-bypassing-the-email-validation-email-on-sign-up-process-in2026-10-29 https://bugbountyreports.com/reports/6878-bypassing-the-external-link-warning2026-10-29 https://bugbountyreports.com/reports/4079-bypassing-the-fix-of-5039222026-10-29 https://bugbountyreports.com/reports/1204-bypassing-uber-partner-s-3-cancel-limit2026-10-29 https://bugbountyreports.com/reports/8584-bypassing-whitelist-to-perform-ssrf-for-internal-host2026-10-29 https://bugbountyreports.com/reports/9288-bypassing-x-profile-verification-to-receive-instant-blue2026-10-29 https://bugbountyreports.com/reports/629-bytearray-find-buffer-over-read2026-10-29 https://bugbountyreports.com/reports/150-c2fo-com-is-releasing-sensitive-information-about-database2026-10-29 https://bugbountyreports.com/reports/4180-c3p0-may-be-exploited-by-a-billion-laughs-attack-when2026-10-29 https://bugbountyreports.com/reports/8606-cache-deception-allows-account-takeover2026-10-29 https://bugbountyreports.com/reports/255-cache-leads-to-privacy-leaks2026-10-29 https://bugbountyreports.com/reports/7225-cache-manager-acl-bypass2026-10-29 https://bugbountyreports.com/reports/7224-cache-poisoning2026-10-29 https://bugbountyreports.com/reports/8605-cache-poisoning-allows-stored-xss-via-hav-cookie-parameter2026-10-29 https://bugbountyreports.com/reports/7518-cache-poisoning-denial-of-service-affecting-assets-gitlab2026-10-29 https://bugbountyreports.com/reports/7520-cache-poisoning-dos-on-downloads-exodus-com2026-10-29 https://bugbountyreports.com/reports/7517-cache-poisoning-dos-on-updates-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/5311-cache-poisoning-dos-to-various-tts-assets2026-10-29 https://bugbountyreports.com/reports/3693-cache-poisoning-using-null-bytes-and-long-urls2026-10-29 https://bugbountyreports.com/reports/6021-cache-poisoning-via-x-forwarded-host-in-www-shopify-com2026-10-29 https://bugbountyreports.com/reports/10206-cache-pollution-via-unkeyed-get-parameters-on-www-omise-co2026-10-29 https://bugbountyreports.com/reports/7067-cache-posioning-leading-do-denial-of-service-on-www2026-10-29 https://bugbountyreports.com/reports/7347-cache-posioning-leading-to-denial-of-service-at-bypass-fix2026-10-29 https://bugbountyreports.com/reports/4824-cachingiterator-null-dereference-when-convert-to-string2026-10-29 https://bugbountyreports.com/reports/2227-calendar-and-addressbook-names-disclosed-nc-sa-2017-0122026-10-29 https://bugbountyreports.com/reports/10093-calendar-app-allowed-booking-appointments-without-the2026-10-29 https://bugbountyreports.com/reports/10092-calendar-attachments-of-local-files-are-offered-to2026-10-29 https://bugbountyreports.com/reports/8334-calendar-name-length-not-validated-before-writing-to2026-10-29 https://bugbountyreports.com/reports/6606-camera-adoption-dos-unifi-protect2026-10-29 https://bugbountyreports.com/reports/8331-campaign-account-balance-and-history-disclosed-in-api2026-10-29 https://bugbountyreports.com/reports/8011-can-access-the-job-name-creator-name-and-can-report-any2026-10-29 https://bugbountyreports.com/reports/6271-can-buy-atavist-magazine-subscription-for-free2026-10-29 https://bugbountyreports.com/reports/8624-can-delete-other-user-s-post-and-company-page-post2026-10-29 https://bugbountyreports.com/reports/9232-can-download-files-by-zipping-the-folder2026-10-29 https://bugbountyreports.com/reports/10192-can-download-files-on-android-app-without-permission2026-10-29 https://bugbountyreports.com/reports/486-can-message-users-without-the-proper-authorization2026-10-29 https://bugbountyreports.com/reports/3284-can-read-features-from-any-user2026-10-29 https://bugbountyreports.com/reports/4425-can-register-any-mobile-number-in-mfa-without-current-code2026-10-29 https://bugbountyreports.com/reports/9453-can-reshare-read-share-only-folder-with-more-permissions2026-10-29 https://bugbountyreports.com/reports/9678-can-see-phone-numbers-of-others-by-providing-mail-address2026-10-29 https://bugbountyreports.com/reports/951-can-see-private-tweets-via-keyword-searches-on-tweetdeck2026-10-29 https://bugbountyreports.com/reports/2301-can-upload-files-without-authentication-on-airfibre-3-22026-10-29 https://bugbountyreports.com/reports/8978-can-view-videos-on-linkedin-learning-that-require-a2026-10-29 https://bugbountyreports.com/reports/7101-canonical-snapcraft-vulnerable-to-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/2402-captcha-bypass-at-email-reset-can-lead-to-spamming-users2026-10-29 https://bugbountyreports.com/reports/1175-captcha-bypass-enable-login-bruteforce2026-10-29 https://bugbountyreports.com/reports/4306-captcha-bypass-for-the-most-important-function-at-en2026-10-29 https://bugbountyreports.com/reports/2800-captcha-bypass-in-coinbase-signup-form2026-10-29 https://bugbountyreports.com/reports/538-captcha-bypass-in-snapchat-s-geofilter-submission-process2026-10-29 https://bugbountyreports.com/reports/114-captcha-bypass-with-extension2026-10-29 https://bugbountyreports.com/reports/6270-captcha-checker-pd-captcha-form-surveyid-cookie-is2026-10-29 https://bugbountyreports.com/reports/4407-captcha-protection-bypass-on-forgot-password-page2026-10-29 https://bugbountyreports.com/reports/8250-card-requirement-bypass-for-business-trial2026-10-29 https://bugbountyreports.com/reports/8587-cards-in-deck-are-readable-by-any-user2026-10-29 https://bugbountyreports.com/reports/8888-cargo-not-respecting-umask-when-extracting-crate-archives2026-10-29 https://bugbountyreports.com/reports/4440-catch-mails-sent-to-an-smtp-server-over-ssl-using-an-evil2026-10-29 https://bugbountyreports.com/reports/271-category-broken-authentication-and-session-management-leads2026-10-29 https://bugbountyreports.com/reports/1423-cbc-cut-and-paste-attack-may-cause-open-redirect-even-xss2026-10-29 https://bugbountyreports.com/reports/7023-ccc-ctf2026-10-29 https://bugbountyreports.com/reports/7016-ccc-h1-june-2021-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/7008-ccc-h1ctf-com-ctf2026-10-29 https://bugbountyreports.com/reports/8359-cd-false-dnssec-not-respected-in-dns-over-https-json2026-10-29 https://bugbountyreports.com/reports/2028-certain-inputs-cause-tight-c-level-recursion-leading-to2026-10-29 https://bugbountyreports.com/reports/2351-certificate-message-oob-reads-cve-2016-63062026-10-29 https://bugbountyreports.com/reports/4463-certificate-warnings-and-similar-ui-elements-in-web2026-10-29 https://bugbountyreports.com/reports/9837-cgi-scripts-wordlist-entry-for-windmail-exe-has-payload2026-10-29 https://bugbountyreports.com/reports/8315-cgi-cookie2026-10-29 https://bugbountyreports.com/reports/4549-chacha20-poly1305-with-long-nonces2026-10-29 https://bugbountyreports.com/reports/7744-chain-of-idors-between-u4b-and-vouchers-apis-allows2026-10-29 https://bugbountyreports.com/reports/7173-chain-of-vulnerabilities-in-uber-for-business-vouchers2026-10-29 https://bugbountyreports.com/reports/9975-chain-vulnerability-lead-to-full-control-group-live2026-10-29 https://bugbountyreports.com/reports/1730-chain-setstate-type-confusion2026-10-29 https://bugbountyreports.com/reports/10022-chained-broken-access-control-in-tiktok-live-backstage2026-10-29 https://bugbountyreports.com/reports/4024-chained-bugs-to-leak-victim-s-uber-s-fb-oauth-token2026-10-29 https://bugbountyreports.com/reports/8400-chained-open-redirects-and-use-of-ideographic-full-stop2026-10-29 https://bugbountyreports.com/reports/6771-chained-vulnerabilities-create-dos-attack-against-users-on2026-10-29 https://bugbountyreports.com/reports/7439-chainning-bugs-to-get-full-disclosure-of-users-addresses2026-10-29 https://bugbountyreports.com/reports/1340-change-any-uber-user-s-password-through-rt-users2026-10-29 https://bugbountyreports.com/reports/335-change-any-username-and-profile-link-in-hackerone2026-10-29 https://bugbountyreports.com/reports/2439-change-bank-account-numbers2026-10-29 https://bugbountyreports.com/reports/1319-change-contents-of-the-careers-iframe-in-https-corp-badoo2026-10-29 https://bugbountyreports.com/reports/774-change-login-services-settings-without-owner-access2026-10-29 https://bugbountyreports.com/reports/9895-change-part-of-personal-information-all-users2026-10-29 https://bugbountyreports.com/reports/2738-change-password-logic-inversion2026-10-29 https://bugbountyreports.com/reports/9633-change-phone-number-otp-flaw-leads-to-any-phone-number2026-10-29 https://bugbountyreports.com/reports/7533-change-project-visibility-to-a-restricted-option2026-10-29 https://bugbountyreports.com/reports/5388-change-the-rating-of-any-trip-therefore-change-the-average2026-10-29 https://bugbountyreports.com/reports/166-change-user-settings-through-csrf2026-10-29 https://bugbountyreports.com/reports/5533-changes-to-data-in-a-cve-request-after-draft-via-graphql2026-10-29 https://bugbountyreports.com/reports/4011-changing-email-address-on-twitter-for-android-unsets2026-10-29 https://bugbountyreports.com/reports/1547-changing-paymentprofileuuid-when-booking-a-trip-allows-free2026-10-29 https://bugbountyreports.com/reports/6870-changing-the-2fa-secret-key-and-backup-codes-without2026-10-29 https://bugbountyreports.com/reports/9350-changing-the-administrator-password-via-admin-console-does2026-10-29 https://bugbountyreports.com/reports/2337-changing-victim-s-jira-integration-settings-through2026-10-29 https://bugbountyreports.com/reports/5455-character-limitation-bypass-can-lead-to-dos-on-twitter-app2026-10-29 https://bugbountyreports.com/reports/8585-chat-room-member-disclosure-via-autocomplete-api2026-10-29 https://bugbountyreports.com/reports/666-cheating-at-gallery-rating2026-10-29 https://bugbountyreports.com/reports/1202-checking-whether-user-liked-the-media-or-not-even-when-you2026-10-29 https://bugbountyreports.com/reports/5150-china-ecjobsdc-starbucks-com-cn-html-shtml-file-upload2026-10-29 https://bugbountyreports.com/reports/6050-china-idor-on-reservation-staging-non-production-site-https2026-10-29 https://bugbountyreports.com/reports/5369-china-leaked-credentials-permitted-a-limited-ability-to2026-10-29 https://bugbountyreports.com/reports/5745-china-open-redirect-at-trackinghub-starbucks-com-cn2026-10-29 https://bugbountyreports.com/reports/5324-china-president-starbucks-com-cn-dns-configuration-reported2026-10-29 https://bugbountyreports.com/reports/5367-china-limited-partner-pii-regarding-work-scheduling-via2026-10-29 https://bugbountyreports.com/reports/417-chrome-allows-post-requests-with-custom-headers-using-flash2026-10-29 https://bugbountyreports.com/reports/3125-chrome-extension-is-vulnerable-to-the-self-dos-issues-in2026-10-29 https://bugbountyreports.com/reports/3829-chrome-brave-can-still-be-navigated-to-leading-to-rce2026-10-29 https://bugbountyreports.com/reports/3830-chrome-brave-navigation-from-web2026-10-29 https://bugbountyreports.com/reports/3200-ci-for-example-gov-can-be-logged-in-and-accessible2026-10-29 https://bugbountyreports.com/reports/2424-ci-nextcloud-com-cve-2015-5477-bind9-tkey-vulnerability2026-10-29 https://bugbountyreports.com/reports/5268-circle-email-members-have-still-access-to-a-shared-folder2026-10-29 https://bugbountyreports.com/reports/6035-circleci-token-in-github-repo-allows-for-access-to2026-10-29 https://bugbountyreports.com/reports/8967-circuit-breaker-authorization-issue2026-10-29 https://bugbountyreports.com/reports/9641-circular-based-introspetion-query-leading-to-single-request2026-10-29 https://bugbountyreports.com/reports/4246-cisco-asa-denial-of-service-path-traversal-cve-2018-02962026-10-29 https://bugbountyreports.com/reports/9804-cisco-ios-xe-instance-at-vulnerable-to-cve2026-10-29 https://bugbountyreports.com/reports/3723-cisco-rce2026-10-29 https://bugbountyreports.com/reports/1228-cj-vulnerability-in-subdomain2026-10-29 https://bugbountyreports.com/reports/4144-claiming-package-names-in-gitlab-s-automatic-package2026-10-29 https://bugbountyreports.com/reports/7642-claiming-the-listing-of-a-non-delivery-restaurant-through2026-10-29 https://bugbountyreports.com/reports/6039-clear-text-storage-of-proxy-parameters-and-passwords2026-10-29 https://bugbountyreports.com/reports/2775-clearing-shifting-and-pop-value-from-frozen-array2026-10-29 https://bugbountyreports.com/reports/6770-cleartext-password-exposure-allows-access-to-the2026-10-29 https://bugbountyreports.com/reports/3265-cleartext-password-returned-in-json-response2026-10-29 https://bugbountyreports.com/reports/8120-cleartext-storage-of-sensitive-information-at-https-staging2026-10-29 https://bugbountyreports.com/reports/9315-cleartext-transmission-of-password-via-email2026-10-29 https://bugbountyreports.com/reports/5583-cleartext-transmission-of-sensitive-information-leads-to2026-10-29 https://bugbountyreports.com/reports/244-click-jacking2026-10-29 https://bugbountyreports.com/reports/1472-click-jacking2026-10-29 https://bugbountyreports.com/reports/10194-clickjacing-can-lead-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/305-clickjacking2026-10-29 https://bugbountyreports.com/reports/1886-clickjacking2026-10-29 https://bugbountyreports.com/reports/7556-clickjacking2026-10-29 https://bugbountyreports.com/reports/165-clickjacking2026-10-29 https://bugbountyreports.com/reports/120-clickjacking-changing-role2026-10-29 https://bugbountyreports.com/reports/2771-clickjacking-https-mercantile-wordpress-org2026-10-29 https://bugbountyreports.com/reports/331-clickjacking-csrf-attack-can-be-done-at-https-app-mavenlink2026-10-29 https://bugbountyreports.com/reports/7869-clickjacking-at-app-lemlist-com2026-10-29 https://bugbountyreports.com/reports/330-clickjacking-at-https-www-mavenlink-com-main-website2026-10-29 https://bugbountyreports.com/reports/8756-clickjacking-at-open-rocket-chat2026-10-29 https://bugbountyreports.com/reports/4103-clickjacking-at-ylands-com2026-10-29 https://bugbountyreports.com/reports/2410-clickjacking-docs-weblate-org2026-10-29 https://bugbountyreports.com/reports/4520-clickjacking-in-exchangemarketplace-com2026-10-29 https://bugbountyreports.com/reports/3647-clickjacking-in-jobs-wordpress-net2026-10-29 https://bugbountyreports.com/reports/3038-clickjacking-in-legalrobot-app2026-10-29 https://bugbountyreports.com/reports/9799-clickjacking-in-main-domain-https-topechelon-com2026-10-29 https://bugbountyreports.com/reports/5108-clickjacking-in-the-admin-page2026-10-29 https://bugbountyreports.com/reports/5985-clickjacking-lead-to-remove-review2026-10-29 https://bugbountyreports.com/reports/2816-clickjacking-mercantile-wordpress-org2026-10-29 https://bugbountyreports.com/reports/2562-clickjacking-on-authorized-page-https-wakatime-com-share2026-10-29 https://bugbountyreports.com/reports/6190-clickjacking-on-cas-acronis-com-login-page2026-10-29 https://bugbountyreports.com/reports/2459-clickjacking-on-debug2026-10-29 https://bugbountyreports.com/reports/7414-clickjacking-on-deleting-user-s-clips-https-crossclip-com2026-10-29 https://bugbountyreports.com/reports/5798-clickjacking-on-donation-page2026-10-29 https://bugbountyreports.com/reports/3439-clickjacking-on-https-www-goodhire-com-api2026-10-29 https://bugbountyreports.com/reports/5942-clickjacking-on-important-functions-of-yelp2026-10-29 https://bugbountyreports.com/reports/2442-clickjacking-on-mixmax-com2026-10-29 https://bugbountyreports.com/reports/6990-clickjacking-on-profile-page-leading-to-unauthorized-changes2026-10-29 https://bugbountyreports.com/reports/1897-clickjacking-periscope-tv-on-chrome2026-10-29 https://bugbountyreports.com/reports/7547-clickjacking-to-change-email-address2026-10-29 https://bugbountyreports.com/reports/6699-clickjacking-urls2026-10-29 https://bugbountyreports.com/reports/5103-clickjacking-vkpay2026-10-29 https://bugbountyreports.com/reports/7820-clickjacking-vulnerability-can-leads-to-delete-developer-app2026-10-29 https://bugbountyreports.com/reports/2242-clickjacking-vulnerability-found-on-yelp2026-10-29 https://bugbountyreports.com/reports/7972-clickjacking-vulnerability-in-whole-page-ads-tiktok2026-10-29 https://bugbountyreports.com/reports/2516-clickjacking-wordcamp-org2026-10-29 https://bugbountyreports.com/reports/3318-clickjacking-lead-forms-app-php2026-10-29 https://bugbountyreports.com/reports/351-clickjacking-x-frame-options-header-missing2026-10-29 https://bugbountyreports.com/reports/1171-clickjacking-x-frame-options-header-missing2026-10-29 https://bugbountyreports.com/reports/1468-clickjacking-x-frame-options-header-missing2026-10-29 https://bugbountyreports.com/reports/3718-client-dos-due-to-large-dh-parameter-cve-2018-07322026-10-29 https://bugbountyreports.com/reports/7171-client-ip-spoofing-using-x-forwarded-for-127-0-0-1-on2026-10-29 https://bugbountyreports.com/reports/4046-client-secret-server-tokens-for-developer-applications2026-10-29 https://bugbountyreports.com/reports/8578-client-side-authentication-leads-to-auth-bypass2026-10-29 https://bugbountyreports.com/reports/9023-client-side-string-length-check2026-10-29 https://bugbountyreports.com/reports/9221-client-side-template-injection-to-stored-xss-in-image2026-10-29 https://bugbountyreports.com/reports/2891-client-secret-token-disclosure2026-10-29 https://bugbountyreports.com/reports/10563-client-side-denial-of-service-dos-via-memory-exhaustion-on2026-10-29 https://bugbountyreports.com/reports/9616-client-side-path-traversal-on-line-developers-console2026-10-29 https://bugbountyreports.com/reports/4143-client-side-race-condition-using-marketo-allows-sending2026-10-29 https://bugbountyreports.com/reports/3410-client-side-template-injection-in-search-user-email-token2026-10-29 https://bugbountyreports.com/reports/277-clientid-gives-away-platform-ios-android-from-which-a2026-10-29 https://bugbountyreports.com/reports/7312-clients-do-not-verify-server-public-key2026-10-29 https://bugbountyreports.com/reports/4555-clientside-resource-exhausting-by-exploiting-gitlab-math2026-10-29 https://bugbountyreports.com/reports/7193-clipboard-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/9398-cloudflare-cdn-cgi-path-allows-resizing-images-from2026-10-29 https://bugbountyreports.com/reports/8748-cloudflare-casb-confused-deputy-problem2026-10-29 https://bugbountyreports.com/reports/8633-cloudflare-is-not-properly-deleting-user-s-account2026-10-29 https://bugbountyreports.com/reports/9850-cloudflare-waf-bypass-origin-ip-exposure2026-10-29 https://bugbountyreports.com/reports/1887-cloudup-subdomain-takeover-that-resolves-to-desk-com-cname2026-10-29 https://bugbountyreports.com/reports/291-cms-information-disclosure2026-10-29 https://bugbountyreports.com/reports/9324-code-exec-on-github-runner-via-pull-request-name2026-10-29 https://bugbountyreports.com/reports/3535-code-execution-in-restricted-cli-of-edgeswitch2026-10-29 https://bugbountyreports.com/reports/9039-code-inject-via-nginx-ingress-kubernetes-io-permanent2026-10-29 https://bugbountyreports.com/reports/2688-code-injection2026-10-29 https://bugbountyreports.com/reports/10638-code-injection-allows-unprivileged-local-attacker-to2026-10-29 https://bugbountyreports.com/reports/9228-code-injection-and-privilege-escalation-through-linux2026-10-29 https://bugbountyreports.com/reports/6876-code-injection-bug-report2026-10-29 https://bugbountyreports.com/reports/4761-code-injection-in-https-www-semrush-com2026-10-29 https://bugbountyreports.com/reports/5396-code-injection-in-macos-desktop-client2026-10-29 https://bugbountyreports.com/reports/9380-code-injection-in-nextcloud-desktop-client-for-macos2026-10-29 https://bugbountyreports.com/reports/2605-code-injection-in-slack-s-windows-desktop-client-leads-to2026-10-29 https://bugbountyreports.com/reports/5585-code-injection-possible-with-malformed-nextcloud-talk-chat2026-10-29 https://bugbountyreports.com/reports/6860-code-injection-via-insecure-yaml-load2026-10-29 https://bugbountyreports.com/reports/4122-code-injection-vulnerability-in-dot-package2026-10-29 https://bugbountyreports.com/reports/3838-code-injection-vulnerability-in-morgan-package2026-10-29 https://bugbountyreports.com/reports/3997-code-injection-steam-chat-client2026-10-29 https://bugbountyreports.com/reports/4603-code-reversion-allowing-sqli-again-in2026-10-29 https://bugbountyreports.com/reports/3283-code-wordpress-net-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/385-coinbase-android-application-bitcoin-wallet-leaks-oauth2026-10-29 https://bugbountyreports.com/reports/7986-collaborators-and-staff-members-without-all-necessary2026-10-29 https://bugbountyreports.com/reports/8180-com-basecamp-bc3-webview-javascript-injection-and-js-bridge2026-10-29 https://bugbountyreports.com/reports/7320-com-duckduckgo-mobile-android-cache-corruption2026-10-29 https://bugbountyreports.com/reports/7813-com-nextcloud-client-bypass-the-protection-lock-in-andoid2026-10-29 https://bugbountyreports.com/reports/4384-combination-of-content-provider-allows-private-data2026-10-29 https://bugbountyreports.com/reports/5457-command-injection-via-cve-2019-11510-and-cve-2019-115392026-10-29 https://bugbountyreports.com/reports/3400-command-injection-by-overwriting-authorized-keys-file2026-10-29 https://bugbountyreports.com/reports/4221-command-injection-by-setting-a-custom-search-engine2026-10-29 https://bugbountyreports.com/reports/4738-command-injection-due-to-lack-of-sanitisation-of-tar-gz2026-10-29 https://bugbountyreports.com/reports/3489-command-injection-in-pdf-image2026-10-29 https://bugbountyreports.com/reports/8275-command-injection-in-github-actions-containerstephost2026-10-29 https://bugbountyreports.com/reports/4737-command-injection-in-npm-module-name-passed-as-an-argument2026-10-29 https://bugbountyreports.com/reports/4117-command-injection-in-pathname2026-10-29 https://bugbountyreports.com/reports/3107-command-injection-in-the-process-of-downloading-the-latest2026-10-29 https://bugbountyreports.com/reports/3678-command-injection-is-ps-package2026-10-29 https://bugbountyreports.com/reports/3041-command-injection-on-phabricator-instance-with-an-evil-hg2026-10-29 https://bugbountyreports.com/reports/9244-command-injection-using-malicious-hostname-in-expanded2026-10-29 https://bugbountyreports.com/reports/10351-command-injection-via-unsanitized-bundling-options-in-aws2026-10-29 https://bugbountyreports.com/reports/3993-command-injection-vulnerability-in-kill-port-package2026-10-29 https://bugbountyreports.com/reports/5159-command-injection-vulnerability-in-kill-port-process-package2026-10-29 https://bugbountyreports.com/reports/3792-command-injection-vulnerability-in-libnmap-package2026-10-29 https://bugbountyreports.com/reports/517-comment-out-causes-information-disclosure2026-10-29 https://bugbountyreports.com/reports/4002-comment-restriction-in-subsection-workshop-of-domain2026-10-29 https://bugbountyreports.com/reports/9368-comment-channel-unsubscribe-get-csrf2026-10-29 https://bugbountyreports.com/reports/2822-comments-denial-of-service-in-socialclub-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/3176-common-response-suggestion-is-sent-to-google-analytics-when2026-10-29 https://bugbountyreports.com/reports/8904-complete-admin-account-takeover-due-to-phpdebugbar-turned2026-10-29 https://bugbountyreports.com/reports/10284-complete-authentication-bypass-to-admin-permissions2026-10-29 https://bugbountyreports.com/reports/6477-complete-destruction-of-the-grinch-server2026-10-29 https://bugbountyreports.com/reports/1173-complete-or-edit-another-user-s-profile2026-10-29 https://bugbountyreports.com/reports/1037-complete-profile-url-is-not-random-and-not-expiring2026-10-29 https://bugbountyreports.com/reports/2482-completed-compromise-source-code-disclosure-via-exposed2026-10-29 https://bugbountyreports.com/reports/8282-completely-remove-vpn-profile-from-locked-warp-ios-cient2026-10-29 https://bugbountyreports.com/reports/6175-compromise-of-auth-via-subset-superset-namespace-names2026-10-29 https://bugbountyreports.com/reports/6174-compromise-of-node-can-lead-to-compromise-of-pods-on-other2026-10-29 https://bugbountyreports.com/reports/1226-compromising-atlassian-confluence-team-uberinternal-com-via2026-10-29 https://bugbountyreports.com/reports/3775-compromising-the-user-id2026-10-29 https://bugbountyreports.com/reports/4328-computing-hash-of-crafted-block-leads-to-crash-in-tree-hash2026-10-29 https://bugbountyreports.com/reports/203-concrete5-path-disclosure2026-10-29 https://bugbountyreports.com/reports/7859-conduit-feed-publish-api-allows-you-to-spoof-other-users-or2026-10-29 https://bugbountyreports.com/reports/4037-confidential-data-of-users-and-limited-metadata-of-programs2026-10-29 https://bugbountyreports.com/reports/1138-confidential-issues-leaked-in-public-projects-when-attached2026-10-29 https://bugbountyreports.com/reports/760-config2026-10-29 https://bugbountyreports.com/reports/6679-config-override-using-non-validated-query-parameter-allows2026-10-29 https://bugbountyreports.com/reports/1270-configure-a-redirect-uri-for-facebook-oauth2026-10-29 https://bugbountyreports.com/reports/9344-confirmed-2118458-intentional-redirect-from-www-hackerone2026-10-29 https://bugbountyreports.com/reports/10528-conflux-queued-zero-length-relay-end-triggers-heap-out-of2026-10-29 https://bugbountyreports.com/reports/8492-connect-8x8-com-admin-user-can-send-invites-on-behalf-of2026-10-29 https://bugbountyreports.com/reports/10499-connect-8x8-com-automation-builder-input-validation-issue2026-10-29 https://bugbountyreports.com/reports/8703-connect-8x8-com-blind-ssrf-via-api-v2-chats-image-check2026-10-29 https://bugbountyreports.com/reports/8491-connect-8x8-com-deactivated-users-remain-access-to-api-v12026-10-29 https://bugbountyreports.com/reports/10498-connect-8x8-com-deserialization-vulnerability-in-automation2026-10-29 https://bugbountyreports.com/reports/8800-connect-8x8-com-too-much-resource-consumption-of-the-server2026-10-29 https://bugbountyreports.com/reports/8493-connect-8x8-com-users-with-no-permission-can-track-access2026-10-29 https://bugbountyreports.com/reports/10434-connect-8x8-com-api-v1-jwt-algorithm-confusion-vulnerability2026-10-29 https://bugbountyreports.com/reports/10305-connection-count-bug-in-monero-node-enables-outbound-peer2026-10-29 https://bugbountyreports.com/reports/10557-connector-c-out-of-bounds-read-in-unpack-fields-from-short2026-10-29 https://bugbountyreports.com/reports/10584-connector-c-heap-out-of-bounds-read-when-malicious-server2026-10-29 https://bugbountyreports.com/reports/10556-connector-j-malicious-server-crashes-client-jvm-via2026-10-29 https://bugbountyreports.com/reports/10585-connector-odbc-malicious-server-s-long-version-string-wraps2026-10-29 https://bugbountyreports.com/reports/1799-constant-cache-page-secret-in-regolith2026-10-29 https://bugbountyreports.com/reports/3619-constant-time-comparison-is-not-always-implemented-critical2026-10-29 https://bugbountyreports.com/reports/5824-contacts-menu-not-app-fails-to-restrict-to-local-groups-for2026-10-29 https://bugbountyreports.com/reports/8795-contacts-only-sanitizes-photo-svg-if-mime-type-is-all-lower2026-10-29 https://bugbountyreports.com/reports/5062-container-scanning-and-dependency-scanning-report-leaked-to2026-10-29 https://bugbountyreports.com/reports/1720-content-text-injection-at-nextcloud-server-9-0-52-via-http2026-10-29 https://bugbountyreports.com/reports/911-content-injection2026-10-29 https://bugbountyreports.com/reports/1460-content-injection-apps-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/1465-content-injection-demo-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/1280-content-injection-404-page2026-10-29 https://bugbountyreports.com/reports/8178-content-injection-in-jira-issue-title-enabling-sending2026-10-29 https://bugbountyreports.com/reports/1282-content-injection-in-subdomain2026-10-29 https://bugbountyreports.com/reports/1283-content-injection-in-subdomain2026-10-29 https://bugbountyreports.com/reports/5377-content-injection-on-api-semrush-com-to-reflected-xss2026-10-29 https://bugbountyreports.com/reports/2103-content-length-restriction-bypass-can-lead-to-dos-by2026-10-29 https://bugbountyreports.com/reports/8853-content-security-policy-is-only-active-for-html-responses2026-10-29 https://bugbountyreports.com/reports/3110-content-security-policy-not-applied-to-error-pages-at2026-10-29 https://bugbountyreports.com/reports/235-content-sniffing-not-disabled2026-10-29 https://bugbountyreports.com/reports/359-content-sniffing-not-disabled2026-10-29 https://bugbountyreports.com/reports/860-content-sniffing-not-enabled2026-10-29 https://bugbountyreports.com/reports/2434-content-spoof-in-opel-es-wpsegment2-gm-com2026-10-29 https://bugbountyreports.com/reports/1474-content-spoof-in-webcaps-ecomm-gm-com2026-10-29 https://bugbountyreports.com/reports/545-content-spoofing2026-10-29 https://bugbountyreports.com/reports/1278-content-spoofing2026-10-29 https://bugbountyreports.com/reports/2272-content-spoofing2026-10-29 https://bugbountyreports.com/reports/2285-content-spoofing2026-10-29 https://bugbountyreports.com/reports/5889-content-spoofing2026-10-29 https://bugbountyreports.com/reports/555-content-spoofing-external-link-warning-page2026-10-29 https://bugbountyreports.com/reports/3098-content-spoofing-https-irclogs-wordpress-org2026-10-29 https://bugbountyreports.com/reports/4488-content-spoofing-text-injection-in-https-docs-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/318-content-spoofing-all-integrations-in-https-team-slack-com2026-10-29 https://bugbountyreports.com/reports/1096-content-spoofing-and-local-redirect-in-mapbox-studio2026-10-29 https://bugbountyreports.com/reports/3618-content-spoofing-and-potential-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/308-content-spoofing-at-stripe-integrations2026-10-29 https://bugbountyreports.com/reports/2316-content-spoofing-due-to-the-improper-behavior-of-the-4032026-10-29 https://bugbountyreports.com/reports/2317-content-spoofing-due-to-the-improper-behavior-of-the-4032026-10-29 https://bugbountyreports.com/reports/1643-content-spoofing-due-to-the-improper-behavior-of-the-4032026-10-29 https://bugbountyreports.com/reports/1417-content-spoofing-due-to-the-improper-behavior-of-the-not2026-10-29 https://bugbountyreports.com/reports/2003-content-spoofing-in-files-app2026-10-29 https://bugbountyreports.com/reports/1484-content-spoofing-in-cloud-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/2290-content-spoofing-in-error-message2026-10-29 https://bugbountyreports.com/reports/1606-content-spoofing-in-lookup-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/1461-content-spoofing-in-moneybird2026-10-29 https://bugbountyreports.com/reports/2635-content-spoofing-in-udemy2026-10-29 https://bugbountyreports.com/reports/4003-content-spoofing-on-error-pages-or-text-injection2026-10-29 https://bugbountyreports.com/reports/6609-content-spoofing-on-https-surveyserver-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/784-content-spoofing-on-invitations-page2026-10-29 https://bugbountyreports.com/reports/2652-content-spoofing-on-link-greenhouse-io2026-10-29 https://bugbountyreports.com/reports/910-content-spoofing-or-text-injection-in-https-withinsecurity2026-10-29 https://bugbountyreports.com/reports/3363-content-spoofing-or-text-injection-support-mycrypto-com2026-10-29 https://bugbountyreports.com/reports/2637-content-spoofing-possible-in-concrete5-org2026-10-29 https://bugbountyreports.com/reports/700-content-spoofing-through-referel-header2026-10-29 https://bugbountyreports.com/reports/1201-content-spoofing-via-reports2026-10-29 https://bugbountyreports.com/reports/1409-content-spoofing-text-injection2026-10-29 https://bugbountyreports.com/reports/1281-content-spoofing-text-injection-docs-nextcloud-org2026-10-29 https://bugbountyreports.com/reports/2207-content-spoofing-text-injection-in-https-demo-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/6242-content-spoofing-text-injection-in-https-support-cs-money2026-10-29 https://bugbountyreports.com/reports/2164-content-spoofing-text-injection-in-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/4987-content-injection-xss2026-10-29 https://bugbountyreports.com/reports/2064-content-length-restriction-bypass-to-heap-overflow-in-gip2026-10-29 https://bugbountyreports.com/reports/9515-content-security-policy-bypass-with-file-uploads2026-10-29 https://bugbountyreports.com/reports/1334-content-type-sniffing-leads-to-stored-xss-in-cms-airship-on2026-10-29 https://bugbountyreports.com/reports/9004-context-isolation-bypass-via-nested-unserializable-return2026-10-29 https://bugbountyreports.com/reports/66-control-character-allowed-in-username2026-10-29 https://bugbountyreports.com/reports/7884-control-character-filtering-misses-leading-and-trailing2026-10-29 https://bugbountyreports.com/reports/2344-control-character-injection-in-messages2026-10-29 https://bugbountyreports.com/reports/2513-control-characters-incorrectly-handled-on-crew-status-update2026-10-29 https://bugbountyreports.com/reports/26-control-characters-not-stripped-from-username-on-signup2026-10-29 https://bugbountyreports.com/reports/7976-controllable-read-beyond-bounds-in-lua-websocket-readbytes2026-10-29 https://bugbountyreports.com/reports/2026-controlled-address-leak-due-to-type-confusion-aslr-bypass2026-10-29 https://bugbountyreports.com/reports/3308-controlled-buffer-under-read-in-pack-unpack-internal2026-10-29 https://bugbountyreports.com/reports/3225-cookie-bomb2026-10-29 https://bugbountyreports.com/reports/6651-cookie-bombing-cause-dos-businesses-uber-com2026-10-29 https://bugbountyreports.com/reports/870-cookie-bug2026-10-29 https://bugbountyreports.com/reports/1059-cookie-does-not-contain-the-secure-attribute2026-10-29 https://bugbountyreports.com/reports/287-cookie-fixation2026-10-29 https://bugbountyreports.com/reports/9170-cookie-headers-are-not-cleared-in-cross-domain-redirect-in2026-10-29 https://bugbountyreports.com/reports/4337-cookie-injection-allow-dos-attack-to-periscope-tv2026-10-29 https://bugbountyreports.com/reports/6136-cookie-injection-leads-to-complete-dos-over-whole-domain2026-10-29 https://bugbountyreports.com/reports/279-cookie-not-marked-as-secure2026-10-29 https://bugbountyreports.com/reports/6659-cookie-poisoning-leads-to-dos-and-privacy-violation2026-10-29 https://bugbountyreports.com/reports/844-cookie-securing-your-opening-soon-store-is-not-secured2026-10-29 https://bugbountyreports.com/reports/6838-cookie-steal-through-content-uri2026-10-29 https://bugbountyreports.com/reports/1573-cookie-based-injection2026-10-29 https://bugbountyreports.com/reports/5006-corda-server-xss2026-10-29 https://bugbountyreports.com/reports/7436-corporate-jira-credentials-disclosed-in-public-gist2026-10-29 https://bugbountyreports.com/reports/3289-corrupt-rpc-responses-from-remote-daemon-nodes-can-lead-to2026-10-29 https://bugbountyreports.com/reports/4139-corrupted-authorization-header-can-cause-logs-not-to-be2026-10-29 https://bugbountyreports.com/reports/9906-corrupted-pointer-in-node-fs-readfileutf8-const2026-10-29 https://bugbountyreports.com/reports/1596-cors-cross-origin-resource-sharing2026-10-29 https://bugbountyreports.com/reports/6414-cors-bypass-on-tiktok-ads-endpoint2026-10-29 https://bugbountyreports.com/reports/3948-cors-misconfig-account-takeover2026-10-29 https://bugbountyreports.com/reports/7773-cors-misconfiguration2026-10-29 https://bugbountyreports.com/reports/10526-cors-misconfiguration-broken-access-control2026-10-29 https://bugbountyreports.com/reports/8517-cors-misconfiguration-in-https-accounts-login2026-10-29 https://bugbountyreports.com/reports/6411-cors-misconfiguration-in-tiktok-ads-portal2026-10-29 https://bugbountyreports.com/reports/4279-cors-misconfiguration-leading-to-private-information2026-10-29 https://bugbountyreports.com/reports/5500-cors-misconfiguration-leads-to-exposing-user-data2026-10-29 https://bugbountyreports.com/reports/6243-cors-misconfiguration-leads-to-users-information-disclosure2026-10-29 https://bugbountyreports.com/reports/9194-cors-misconfiguration-on2026-10-29 https://bugbountyreports.com/reports/2533-cors-misconfiguration-on-www-zomato-com2026-10-29 https://bugbountyreports.com/reports/6305-cors-misconfiguration-which-leads-to-the-disclosure2026-10-29 https://bugbountyreports.com/reports/5232-cors-misconfiguration-which-leads-to-the-disclosure-of2026-10-29 https://bugbountyreports.com/reports/6973-cors-misconfiguration-could-lead-to-disclosure-of-sensitive2026-10-29 https://bugbountyreports.com/reports/5543-cors-misconfiguration-could-lead-to-disclosure-of-sensitive2026-10-29 https://bugbountyreports.com/reports/6675-cors-misconfiguration-could-lead-to-disclosure-of-users2026-10-29 https://bugbountyreports.com/reports/3781-cors-on-ws-infogram-com2026-10-29 https://bugbountyreports.com/reports/7490-cors-origin-validation-failure2026-10-29 https://bugbountyreports.com/reports/6898-corss-tenant-idor-on-business-allowing-escalation-privilege2026-10-29 https://bugbountyreports.com/reports/9533-course-registration-form-allowing-an-attacker-to-dump-all2026-10-29 https://bugbountyreports.com/reports/2636-cpu-utilization-99-on-visiting-wordpress-site-url-open2026-10-29 https://bugbountyreports.com/reports/3147-crafted-frame-injection-leading-to-form-based-ui-redressing2026-10-29 https://bugbountyreports.com/reports/9945-crafted-smart-contract-can-take-23-seconds-to-execute-due2026-10-29 https://bugbountyreports.com/reports/9946-crafted-smart-contract-can-take-1-5-minutes-to-execute-due2026-10-29 https://bugbountyreports.com/reports/9954-crafted-smart-contract-can-take-8-minutes-to-execute-due-to2026-10-29 https://bugbountyreports.com/reports/4218-crash2026-10-29 https://bugbountyreports.com/reports/4640-crash-dos-when-parsing-a-hostile-tiff2026-10-29 https://bugbountyreports.com/reports/2251-crash-in-ary-concat2026-10-29 https://bugbountyreports.com/reports/4820-crash-in-bzcompress-function2026-10-29 https://bugbountyreports.com/reports/4821-crash-in-get-icu-value-internal-function2026-10-29 https://bugbountyreports.com/reports/4815-crash-in-gzcompress-and-3-other-compress-functions2026-10-29 https://bugbountyreports.com/reports/4818-crash-in-implode-function2026-10-29 https://bugbountyreports.com/reports/4835-crash-in-locale-compose-function2026-10-29 https://bugbountyreports.com/reports/4822-crash-in-locale-get-keywords-when-keyword-value-in-locale2026-10-29 https://bugbountyreports.com/reports/4484-crash-in-mrb-ary-push2026-10-29 https://bugbountyreports.com/reports/4814-crash-in-openssl-random-pseudo-bytes-function2026-10-29 https://bugbountyreports.com/reports/1908-crash-in-print-backtrace2026-10-29 https://bugbountyreports.com/reports/4831-crash-in-simplestring-addn-function2026-10-29 https://bugbountyreports.com/reports/5433-crash-node-js-process-from-handlebars-using-a-small-and2026-10-29 https://bugbountyreports.com/reports/1763-crash-a-call-to-symbol-new-leads-to-a-crash-when-inspecting2026-10-29 https://bugbountyreports.com/reports/1761-crash-calling-proc-initialize-copy-with-a-proc-instance2026-10-29 https://bugbountyreports.com/reports/1753-crash-initialize-decimal-with-itself-triggers-an-assertion2026-10-29 https://bugbountyreports.com/reports/1764-crash-mrb-any-to-s-can-t-handle-nilclass-symbol-and-fixnum2026-10-29 https://bugbountyreports.com/reports/1990-crash-overwriting-nomethoderror-with-a-builtin-class2026-10-29 https://bugbountyreports.com/reports/10182-create-account-without-auth-via-response-manipulation2026-10-29 https://bugbountyreports.com/reports/6951-create-alias-does-not-validate-account-id2026-10-29 https://bugbountyreports.com/reports/6409-create-an-account-on-auth-sandbox-elastic-co-with-email2026-10-29 https://bugbountyreports.com/reports/4671-create-an-unexpected-object-and-don-t-invoke-wakeup-in2026-10-29 https://bugbountyreports.com/reports/4662-create-an-unexpected-object-and-don-t-invoke-wakeup-in2026-10-29 https://bugbountyreports.com/reports/2017-create-and-update-patients-vulnerability2026-10-29 https://bugbountyreports.com/reports/7282-create-free-shopify-application-credits2026-10-29 https://bugbountyreports.com/reports/8874-create-miscellaneous-support-ticket-on-anyone-s-account2026-10-29 https://bugbountyreports.com/reports/8158-create-product-discounts-of-any-shop2026-10-29 https://bugbountyreports.com/reports/976-create-staff-member-without-owner-access2026-10-29 https://bugbountyreports.com/reports/5143-creating-malformed-urls-via-new-line-character-in-between2026-10-29 https://bugbountyreports.com/reports/1248-creating-multiple-user-with-the-same-link-which-is-sent-to2026-10-29 https://bugbountyreports.com/reports/1579-creating-post-on-a-restricted-channel2026-10-29 https://bugbountyreports.com/reports/75-creating-titleless-and-non-closable-bugs2026-10-29 https://bugbountyreports.com/reports/9286-creation-of-bounties-through-customer-api-leads-to-private2026-10-29 https://bugbountyreports.com/reports/6384-creatorid-leaked-from-public-content-posted-to-snapmaps2026-10-29 https://bugbountyreports.com/reports/10269-credential-disclosure-via-unvalidated-directdownloadurl2026-10-29 https://bugbountyreports.com/reports/8668-credential-leak-on-github-https-github-com-peoplesoft-crm2026-10-29 https://bugbountyreports.com/reports/6850-credentials-found-in-config-file-on-github2026-10-29 https://bugbountyreports.com/reports/4098-credentials-leakage-in-public-lead-to-view-dev-websites2026-10-29 https://bugbountyreports.com/reports/9558-credentials-leaked-via-github2026-10-29 https://bugbountyreports.com/reports/4054-credientals-over-get-method-in-plain-text2026-10-29 https://bugbountyreports.com/reports/460-credit-card-validation-issue2026-10-29 https://bugbountyreports.com/reports/135-criptographic-issue-strisct-transport-security-with-not2026-10-29 https://bugbountyreports.com/reports/138-criptographic-issue-strisct-transport-security-with-not2026-10-29 https://bugbountyreports.com/reports/252-criptographic-issue-strisct-transport-security-with-not2026-10-29 https://bugbountyreports.com/reports/1247-critical-insecure-direct-object-reference-deleting-any2026-10-29 https://bugbountyreports.com/reports/1393-critical-access-to-group-videos-where-videos-are-restricted2026-10-29 https://bugbountyreports.com/reports/7250-critical-unrestricted-access-to-private-github-repos-and2026-10-29 https://bugbountyreports.com/reports/10543-critical-broken-access-control-api-only-delegated-admin-can2026-10-29 https://bugbountyreports.com/reports/7876-critical-broken-cookie-signing-on-dagobah-flickr-com2026-10-29 https://bugbountyreports.com/reports/36-critical-bug2026-10-29 https://bugbountyreports.com/reports/9753-critical-data-breach-big-data-for-all-domains2026-10-29 https://bugbountyreports.com/reports/10306-critical-deadlock-vulnerability-in-monero-rpc-leading-to2026-10-29 https://bugbountyreports.com/reports/7585-critical-full-compromise-of-jarvis-new-urbanclap-com-via2026-10-29 https://bugbountyreports.com/reports/554-critical-full-source-code-config-disclosure-for-cameo2026-10-29 https://bugbountyreports.com/reports/1232-critical-idor-can-select-any-parent-while-creating-new-venue2026-10-29 https://bugbountyreports.com/reports/1246-critical-idor-delete-any-group-of-any-organization-remotely2026-10-29 https://bugbountyreports.com/reports/1244-critical-idor-delete-any-rule-of-any-organization-remotely2026-10-29 https://bugbountyreports.com/reports/1243-critical-idor-delete-any-terminal-gatekeeper-of-any2026-10-29 https://bugbountyreports.com/reports/1245-critical-idor-delete-any-venue-of-any-organization-remotely2026-10-29 https://bugbountyreports.com/reports/1239-critical-idor-get-anyone-s-terminal-data-remotely2026-10-29 https://bugbountyreports.com/reports/1241-critical-idor-get-authentication-details-of-any-terminal2026-10-29 https://bugbountyreports.com/reports/1234-critical-idor-get-rules-of-any-organization-remotely2026-10-29 https://bugbountyreports.com/reports/1231-critical-idor-get-venue-data-of-any-organization-remotely2026-10-29 https://bugbountyreports.com/reports/1233-critical-idor-make-rule-for-any-group-any-venue-remotely2026-10-29 https://bugbountyreports.com/reports/1240-critical-idor-set-anyone-s-terminal-data-remotely2026-10-29 https://bugbountyreports.com/reports/6713-critical-information-disclosure2026-10-29 https://bugbountyreports.com/reports/6714-critical-information-disclosure2026-10-29 https://bugbountyreports.com/reports/4984-critical-information-disclosure-at-https2026-10-29 https://bugbountyreports.com/reports/6766-critical-information-disclosure-of-rtapi-token-for-any-user2026-10-29 https://bugbountyreports.com/reports/10029-critical-information-disclosure-via-talos-api-v1-files2026-10-29 https://bugbountyreports.com/reports/5919-critical-insecure-direct-object-reference-i-d-o-r-link2026-10-29 https://bugbountyreports.com/reports/10137-critical-pii-data-exposure-in-order-error-log2026-10-29 https://bugbountyreports.com/reports/8444-critical-sensitive-information-disclosure-htus2026-10-29 https://bugbountyreports.com/reports/7390-critical-server-misconfiguration-lead-to-access-to-any-user2026-10-29 https://bugbountyreports.com/reports/10485-critical-sql-injection-wdm-api2026-10-29 https://bugbountyreports.com/reports/9192-critical-unauthenticated-access-to-sensitive-employee-and2026-10-29 https://bugbountyreports.com/reports/471-critical-vulnerability-insecure-direct-object-reference2026-10-29 https://bugbountyreports.com/reports/4919-critical-vulnerability-in-json-web-encryption-jwe-rfc-75162026-10-29 https://bugbountyreports.com/reports/5943-critical-clickjacking-at-yelp-reservations-resulting-in2026-10-29 https://bugbountyreports.com/reports/7607-critically-sensitive-spring-boot-endpoints-exposed2026-10-29 https://bugbountyreports.com/reports/2581-crlf-and-xss-stored-on-ton-twitter-com2026-10-29 https://bugbountyreports.com/reports/8788-crlf-inection-at2026-10-29 https://bugbountyreports.com/reports/5099-crlf-injection2026-10-29 https://bugbountyreports.com/reports/6814-crlf-injection2026-10-29 https://bugbountyreports.com/reports/7755-crlf-injection-http-response-splitting2026-10-29 https://bugbountyreports.com/reports/5562-crlf-injection-http-stage-static-cdn-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/5564-crlf-injection-http-stage-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/6301-crlf-injection-ssrf-in-git-protocal-lead-to-arbitrary-code2026-10-29 https://bugbountyreports.com/reports/5733-crlf-injection-agentcrm-8x8-com2026-10-29 https://bugbountyreports.com/reports/4060-crlf-injection-at-https-mariadb-org2026-10-29 https://bugbountyreports.com/reports/2454-crlf-injection-at-vpn-bitstrips-com2026-10-29 https://bugbountyreports.com/reports/2219-crlf-injection-in-info-hacker-one2026-10-29 https://bugbountyreports.com/reports/8505-crlf-injection-in-nodejs-undici-via-host2026-10-29 https://bugbountyreports.com/reports/8600-crlf-injection-in-nodejs-undici-via-host2026-10-29 https://bugbountyreports.com/reports/5453-crlf-injection-in-urllib2026-10-29 https://bugbountyreports.com/reports/9051-crlf-injection-leads-to-internal-xss-on-pangleglobal2026-10-29 https://bugbountyreports.com/reports/4999-crlf-injection-on2026-10-29 https://bugbountyreports.com/reports/4039-crlf-injection-on-https-buildbot-mariadb-org2026-10-29 https://bugbountyreports.com/reports/2418-crlf-injection-on-https-vpn-mixmax-com2026-10-29 https://bugbountyreports.com/reports/2561-crlf-injection-on-openvpn-svc-ubnt-com2026-10-29 https://bugbountyreports.com/reports/5986-crlf-injection-on-www-starbucks-com2026-10-29 https://bugbountyreports.com/reports/8892-crlf-to-xss-open-redirection2026-10-29 https://bugbountyreports.com/reports/4305-cross-domain-leakage-of-sensitive-information-leading-to2026-10-29 https://bugbountyreports.com/reports/8435-cross-origin-resource-sharing-misconfiguration2026-10-29 https://bugbountyreports.com/reports/2163-cross-siite-scripting-in-the-blog2026-10-29 https://bugbountyreports.com/reports/5239-cross-site-request-forgery-in-auth-in-https-auth2026-10-29 https://bugbountyreports.com/reports/656-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/1506-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/6907-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/7113-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/821-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/3926-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/9534-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/989-cross-site-scripting-type-patameter2026-10-29 https://bugbountyreports.com/reports/5644-cross-site-scripting-xsrf-token2026-10-29 https://bugbountyreports.com/reports/3945-cross-site-scripting-content-sniffing2026-10-29 https://bugbountyreports.com/reports/7443-cross-site-scripting-reflected-on-https-www-acronis-cz2026-10-29 https://bugbountyreports.com/reports/9554-cross-site-scripting-reflected-on-https-www-acronis-cz2026-10-29 https://bugbountyreports.com/reports/338-cross-site-scripting-stored2026-10-29 https://bugbountyreports.com/reports/288-cross-site-scripting-xss-app-relateiq-com2026-10-29 https://bugbountyreports.com/reports/6075-cross-site-scripting-xss-reflected2026-10-29 https://bugbountyreports.com/reports/6060-cross-site-scripting-xss-stored-private-messaging2026-10-29 https://bugbountyreports.com/reports/6527-cross-site-scripting-and-open-redirect-in-affiliate-preview2026-10-29 https://bugbountyreports.com/reports/4259-cross-site-scripting-at-https-app-oberlo-com2026-10-29 https://bugbountyreports.com/reports/8044-cross-site-scripting-in-mtn-bj2026-10-29 https://bugbountyreports.com/reports/1086-cross-site-scripting-in-apps-owncloud-com2026-10-29 https://bugbountyreports.com/reports/293-cross-site-scripting-in-type-parameter2026-10-29 https://bugbountyreports.com/reports/354-cross-site-scripting-on-ads-twitter-com2026-10-29 https://bugbountyreports.com/reports/958-cross-site-scripting-on-api-calculator-api-requests2026-10-29 https://bugbountyreports.com/reports/9590-cross-site-scripting-reflected2026-10-29 https://bugbountyreports.com/reports/6410-cross-site-scripting-using-email-parameter-in-ads-endpoint-12026-10-29 https://bugbountyreports.com/reports/6413-cross-site-scripting-using-email-parameter-in-ads-endpoint-22026-10-29 https://bugbountyreports.com/reports/5246-cross-site-scripting-via-cve-2018-5230-on-https-apps2026-10-29 https://bugbountyreports.com/reports/7576-cross-site-scripting-via-file-upload-in-subdomain-ads2026-10-29 https://bugbountyreports.com/reports/1322-cross-site-scripting-xss-on-irccloud-badges-page-using2026-10-29 https://bugbountyreports.com/reports/10669-cross-account-xss-on-app-basecamp-com-oembed-option2026-10-29 https://bugbountyreports.com/reports/825-cross-domain-ajax-request2026-10-29 https://bugbountyreports.com/reports/9346-cross-domain-leakage-of-x-username-userid-due-to2026-10-29 https://bugbountyreports.com/reports/3771-cross-origin-page-stays-focused-before-after-downloading2026-10-29 https://bugbountyreports.com/reports/3123-cross-origin-resource-sharing-misconfig-steal-user2026-10-29 https://bugbountyreports.com/reports/6983-cross-origin-resource-sharing-misconfig-steal-user2026-10-29 https://bugbountyreports.com/reports/1561-cross-protocol-attack-on-tls-using-sslv2-drown-cve-2016-08002026-10-29 https://bugbountyreports.com/reports/10316-cross-repository-idor-in-settings-security-analysis-bypass2026-10-29 https://bugbountyreports.com/reports/10628-cross-room-signaling-injection-enabling-unauthorized-force2026-10-29 https://bugbountyreports.com/reports/3672-cross-site-information-assertion-leak-via-content-security2026-10-29 https://bugbountyreports.com/reports/7426-cross-site-leak-allows-attacker-to-de-anonymize-members-of2026-10-29 https://bugbountyreports.com/reports/9055-cross-site-request-forgery2026-10-29 https://bugbountyreports.com/reports/1611-cross-site-request-forgery-csrf2026-10-29 https://bugbountyreports.com/reports/8268-cross-site-request-forgery-csrf-to-xss2026-10-29 https://bugbountyreports.com/reports/2498-cross-site-request-forgery-csrf-vulnerability-in-a-dod2026-10-29 https://bugbountyreports.com/reports/2470-cross-site-request-forgery-csrf-vulnerability-on-a-dod2026-10-29 https://bugbountyreports.com/reports/4299-cross-site-request-forgery-csrf-vulnerability-on-api2026-10-29 https://bugbountyreports.com/reports/2887-cross-site-request-forgery-on-the-federalist-api-all2026-10-29 https://bugbountyreports.com/reports/2035-cross-site-request-forgery-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/1741-cross-site-scripting-reflected2026-10-29 https://bugbountyreports.com/reports/1160-cross-site-scripting-xss2026-10-29 https://bugbountyreports.com/reports/6113-cross-site-scripting-xss-dom-iqcard-informatica-com2026-10-29 https://bugbountyreports.com/reports/5766-cross-site-scripting-xss-reflected2026-10-29 https://bugbountyreports.com/reports/8267-cross-site-scripting-xss-reflected2026-10-29 https://bugbountyreports.com/reports/9538-cross-site-scripting-xss-reflected2026-10-29 https://bugbountyreports.com/reports/7737-cross-site-scripting-xss-reflected-at-https2026-10-29 https://bugbountyreports.com/reports/9544-cross-site-scripting-xss-reflected-on-http-callertunez-mtn2026-10-29 https://bugbountyreports.com/reports/9543-cross-site-scripting-xss-reflected-on-http-h1b4e-n2-ips-mtn2026-10-29 https://bugbountyreports.com/reports/9545-cross-site-scripting-xss-reflected-on-https-api-mtn-sd2026-10-29 https://bugbountyreports.com/reports/7598-cross-site-scripting-xss-stored-forum-acronis-com2026-10-29 https://bugbountyreports.com/reports/5077-cross-site-scripting-xss-stored-in-rdoc-wiki-pages2026-10-29 https://bugbountyreports.com/reports/7566-cross-site-scripting-xss-stored-on-ads-tiktok-com-in-text2026-10-29 https://bugbountyreports.com/reports/2543-cross-site-scripting-xss-in-updates-pro-archive2026-10-29 https://bugbountyreports.com/reports/10162-cross-site-scripting-xss-in-asp-net-via-resolveurl-on2026-10-29 https://bugbountyreports.com/reports/10163-cross-site-scripting-xss-in-asp-net-via-resolveurl-on2026-10-29 https://bugbountyreports.com/reports/10171-cross-site-scripting-xss-in-asp-net-via-resolveurl-on2026-10-29 https://bugbountyreports.com/reports/10172-cross-site-scripting-xss-in-asp-net-via-resolveurl-on2026-10-29 https://bugbountyreports.com/reports/10170-cross-site-scripting-xss-in-asp-net-via-resolveurl-on2026-10-29 https://bugbountyreports.com/reports/2707-cross-site-scripting-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2199-cross-site-scripting-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4055-cross-site-scripting-xss-on-hackerone-careers-page2026-10-29 https://bugbountyreports.com/reports/5744-cross-site-scripting-xss-on-www-starbucks-com-co-uk-login2026-10-29 https://bugbountyreports.com/reports/2038-cross-site-scripting-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2124-cross-site-scripting-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2576-cross-site-scripting-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2703-cross-site-scripting-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2709-cross-site-scripting-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/10152-cross-site-scripting-xss-vulnerability-via-parameter-c0-id2026-10-29 https://bugbountyreports.com/reports/10145-cross-site-scripting-xss-vulnerability-via-post-method2026-10-29 https://bugbountyreports.com/reports/3127-cross-site-scripting-in-contact-customer-form2026-10-29 https://bugbountyreports.com/reports/303-cross-site-scripting-in-getmarketplacepurchaseframe2026-10-29 https://bugbountyreports.com/reports/394-cross-site-scripting-in-mailing-username2026-10-29 https://bugbountyreports.com/reports/8380-cross-site-scripting-on-algorithm-collaborator2026-10-29 https://bugbountyreports.com/reports/8214-cross-site-scripting-on-api-collabs-shopify-com2026-10-29 https://bugbountyreports.com/reports/7874-cross-site-scripting-on-dashboard2-omise-co2026-10-29 https://bugbountyreports.com/reports/1582-cross-site-scripting-reflected-on-main-domain2026-10-29 https://bugbountyreports.com/reports/1678-cross-site-scripting-stored-on-rich-media2026-10-29 https://bugbountyreports.com/reports/6970-cross-site-scripting-through-search-form-on-mtnplay-co-zm2026-10-29 https://bugbountyreports.com/reports/10166-cross-site-scripting-via-autoplay-parameter2026-10-29 https://bugbountyreports.com/reports/10174-cross-site-scripting-via-currentimage-parameter2026-10-29 https://bugbountyreports.com/reports/10165-cross-site-scripting-via-description-extra-parameter2026-10-29 https://bugbountyreports.com/reports/10161-cross-site-scripting-via-event-description-parameter2026-10-29 https://bugbountyreports.com/reports/10154-cross-site-scripting-via-fname-parameter-in2026-10-29 https://bugbountyreports.com/reports/10167-cross-site-scripting-via-raised-funds-desc-parameter2026-10-29 https://bugbountyreports.com/reports/10159-cross-site-scripting-via-return-link-url-parameter2026-10-29 https://bugbountyreports.com/reports/10173-cross-site-scripting-via-wikitext-parameter2026-10-29 https://bugbountyreports.com/reports/8381-cross-site-scripting-via-hardcoded-front-end-watched2026-10-29 https://bugbountyreports.com/reports/10168-cross-site-scripting-via-url-on2026-10-29 https://bugbountyreports.com/reports/10169-cross-site-scripting-via-url-on2026-10-29 https://bugbountyreports.com/reports/10175-cross-site-scripting-via-url-on2026-10-29 https://bugbountyreports.com/reports/249-cross-site-scripting-vulnerability-detected2026-10-29 https://bugbountyreports.com/reports/1123-cross-site-scripting-vulnerability-in-urbandictionary-com2026-10-29 https://bugbountyreports.com/reports/2036-cross-site-scripting-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/5829-cross-site-websocket-hijacking-lead-to-steal-xsrf-token2026-10-29 https://bugbountyreports.com/reports/2223-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/8688-cross-site-scripting-in-search-messages2026-10-29 https://bugbountyreports.com/reports/6290-cross-site-scripting-on-www-tiktok-com-and-m-tiktok-com2026-10-29 https://bugbountyreports.com/reports/6796-cross-tenant-idor-graphql-addrulestopixelevents-query2026-10-29 https://bugbountyreports.com/reports/10545-cross-user-lock-unlock-via-absolute-dav-path2026-10-29 https://bugbountyreports.com/reports/863-crossdomain-xml-settings-on-api-imgur-com-too-open2026-10-29 https://bugbountyreports.com/reports/2782-crossdomain-xml-too-permissive-on-eu1-badoo-com-us1-badoo2026-10-29 https://bugbountyreports.com/reports/6706-crxde-lite-crx-is-on-exposed-that-leads-to-pii-disclosure2026-10-29 https://bugbountyreports.com/reports/363-cryptographic-side-channel-in-oauth-library2026-10-29 https://bugbountyreports.com/reports/4334-cryptonote-remote-node-dos2026-10-29 https://bugbountyreports.com/reports/6909-cs-go-server-client-rce-through-oob-access-in-csvcmsg2026-10-29 https://bugbountyreports.com/reports/6334-csi-snapshot-controller-crashes-when-processing2026-10-29 https://bugbountyreports.com/reports/6431-csi-snapshot-controller-crashes-when-processing2026-10-29 https://bugbountyreports.com/reports/2580-csp-bypass-xss2026-10-29 https://bugbountyreports.com/reports/9234-csp-bypass-on-portswigger-net-using-google-script-resources2026-10-29 https://bugbountyreports.com/reports/433-csp-bypass-click-handler-for-links-with-data-method-post2026-10-29 https://bugbountyreports.com/reports/3-csp-not-consistently-applied2026-10-29 https://bugbountyreports.com/reports/2768-csp-script-src-includes-unsafe-inline2026-10-29 https://bugbountyreports.com/reports/8297-csp-bypass-xss-in-project-settings-page2026-10-29 https://bugbountyreports.com/reports/44-csrf2026-10-29 https://bugbountyreports.com/reports/1521-csrf2026-10-29 https://bugbountyreports.com/reports/2380-csrf2026-10-29 https://bugbountyreports.com/reports/1434-csrf-add-optional-two-factor-mobile-number2026-10-29 https://bugbountyreports.com/reports/2888-csrf-adding-unlimited-number-of-saved-items-via-get-request2026-10-29 https://bugbountyreports.com/reports/2405-csrf-changing-the-full-name-adding-a-secondary-email2026-10-29 https://bugbountyreports.com/reports/5618-csrf-close-account2026-10-29 https://bugbountyreports.com/reports/156-csrf-creating-accounts2026-10-29 https://bugbountyreports.com/reports/7678-csrf-delete-account-urgent2026-10-29 https://bugbountyreports.com/reports/5614-csrf-modify-company-info2026-10-29 https://bugbountyreports.com/reports/5179-csrf-modify-project-settings2026-10-29 https://bugbountyreports.com/reports/7681-csrf-modify-user-settings-with-one-click-account-takeover2026-10-29 https://bugbountyreports.com/reports/2303-csrf-lock-and-unlock-translation2026-10-29 https://bugbountyreports.com/reports/2305-csrf-reset-api2026-10-29 https://bugbountyreports.com/reports/7922-csrf-protection-bypassed-to-force-a-below-18-user-into2026-10-29 https://bugbountyreports.com/reports/2359-csrf-configuration2026-10-29 https://bugbountyreports.com/reports/3999-csrf-ban-or-unban-users-in-broadcast-s-chat2026-10-29 https://bugbountyreports.com/reports/5776-csrf-account-deletion-on-website2026-10-29 https://bugbountyreports.com/reports/8062-csrf-account-takeover2026-10-29 https://bugbountyreports.com/reports/1485-csrf-add-album-on-onpatient-com2026-10-29 https://bugbountyreports.com/reports/4069-csrf-add-user-templates2026-10-29 https://bugbountyreports.com/reports/10043-csrf-allowing-unauthorized-modification-of-user-notes-on2026-10-29 https://bugbountyreports.com/reports/6896-csrf-allows-to-test-email-forwarding2026-10-29 https://bugbountyreports.com/reports/4071-csrf-and-probable-account-takeover-on-https-www-niche-co2026-10-29 https://bugbountyreports.com/reports/9555-csrf-and-xss-on-www-acronis-com2026-10-29 https://bugbountyreports.com/reports/3566-csrf-at-apply-to-this-program-that-lead-to-submit-your2026-10-29 https://bugbountyreports.com/reports/5750-csrf-at-https-chatstory-pixiv-net-imported2026-10-29 https://bugbountyreports.com/reports/1537-csrf-at-inviting-people-though-phone-number2026-10-29 https://bugbountyreports.com/reports/9970-csrf-at-network-feature2026-10-29 https://bugbountyreports.com/reports/1023-csrf-at-selecting-zamato-handle2026-10-29 https://bugbountyreports.com/reports/9732-csrf-attack-leads-to-delete-album-at2026-10-29 https://bugbountyreports.com/reports/9728-csrf-attack-leads-to-delete-album-at2026-10-29 https://bugbountyreports.com/reports/1896-csrf-attack-on-m-badoo-com-deleting-account-and-erasing2026-10-29 https://bugbountyreports.com/reports/9733-csrf-attack-on-changing-security-questions-leads-to-full2026-10-29 https://bugbountyreports.com/reports/7047-csrf-based-xss-https2026-10-29 https://bugbountyreports.com/reports/2400-csrf-bypass-delate-source-translation-from-dictionaries-in2026-10-29 https://bugbountyreports.com/reports/5209-csrf-bypass-using-flash-file-307-redirect-method-at-plugins2026-10-29 https://bugbountyreports.com/reports/7924-csrf-bypassed-on-logout-endpoint2026-10-29 https://bugbountyreports.com/reports/1943-csrf-exploit-adding-editing-comment-of-wishlist-items2026-10-29 https://bugbountyreports.com/reports/6395-csrf-for-deleting-videos2026-10-29 https://bugbountyreports.com/reports/1426-csrf-full-account-takeover2026-10-29 https://bugbountyreports.com/reports/5569-csrf-header-is-sent-to-external-websites-when-using-data2026-10-29 https://bugbountyreports.com/reports/2020-csrf-in-set-php-via-age-causes-stored-xss-on-get-php-http2026-10-29 https://bugbountyreports.com/reports/7287-csrf-in-account-deletion-feature-https-www-flickr-com2026-10-29 https://bugbountyreports.com/reports/93-csrf-in-adding-phrase2026-10-29 https://bugbountyreports.com/reports/2081-csrf-in-all-api-endpoints-when-authenticated-using-http2026-10-29 https://bugbountyreports.com/reports/998-csrf-in-apps-owncloud-com2026-10-29 https://bugbountyreports.com/reports/8301-csrf-in-appsearch-allows-creation-of-curations2026-10-29 https://bugbountyreports.com/reports/6938-csrf-in-changing-password-after-using-reset-password-link2026-10-29 https://bugbountyreports.com/reports/8129-csrf-in-changing-user-verification-email2026-10-29 https://bugbountyreports.com/reports/6403-csrf-in-changing-users-donation-settings-https-streamlabs2026-10-29 https://bugbountyreports.com/reports/928-csrf-in-connecting-pinterest-account2026-10-29 https://bugbountyreports.com/reports/323-csrf-in-crashlytics-com2026-10-29 https://bugbountyreports.com/reports/9693-csrf-in-delete-pet-function2026-10-29 https://bugbountyreports.com/reports/199-csrf-in-function-set-as-primary-on-accounts-page2026-10-29 https://bugbountyreports.com/reports/3059-csrf-in-generating-a-new-personal-key2026-10-29 https://bugbountyreports.com/reports/4760-csrf-in-generating-developer-api-key2026-10-29 https://bugbountyreports.com/reports/1680-csrf-in-github-integration2026-10-29 https://bugbountyreports.com/reports/6832-csrf-in-https2026-10-29 https://bugbountyreports.com/reports/5768-csrf-in-https-www-rockstargames-com-reddeadonline-feedback2026-10-29 https://bugbountyreports.com/reports/8550-csrf-in-importing-csv-files-app-taxjar-com2026-10-29 https://bugbountyreports.com/reports/4110-csrf-in-inviting-users2026-10-29 https://bugbountyreports.com/reports/1285-csrf-in-login-form-would-led-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/5552-csrf-in-profile-fields-allows-deleting-any-field-in2026-10-29 https://bugbountyreports.com/reports/2878-csrf-in-report-lost-or-stolen-page-https-www-starbucks-com2026-10-29 https://bugbountyreports.com/reports/8841-csrf-in-seller-us-tiktok-com-profile-account-setting2026-10-29 https://bugbountyreports.com/reports/2832-csrf-in-the-add-restaurant-picture-function2026-10-29 https://bugbountyreports.com/reports/9669-csrf-in-ticket-function2026-10-29 https://bugbountyreports.com/reports/3021-csrf-in-twitterflightschool-com-can-post-on-timeline2026-10-29 https://bugbountyreports.com/reports/2723-csrf-in-watch-unwatch-projects2026-10-29 https://bugbountyreports.com/reports/10397-csrf-in-zone-include-php-allows-unauthorized-banner-and2026-10-29 https://bugbountyreports.com/reports/4468-csrf-leads-to-a-stored-self-xss2026-10-29 https://bugbountyreports.com/reports/7362-csrf-leads-to-account-deactivation-of-users2026-10-29 https://bugbountyreports.com/reports/9736-csrf-leads-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/9737-csrf-leads-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/12-csrf-login2026-10-29 https://bugbountyreports.com/reports/862-csrf-near-report-abuse-meme2026-10-29 https://bugbountyreports.com/reports/270-csrf-on-set-as-primary-option-on-the-accounts-page2026-10-29 https://bugbountyreports.com/reports/7136-csrf-on-api-graphql-allows-executing-mutations-through-get2026-10-29 https://bugbountyreports.com/reports/64-csrf-on-add-comment-section2026-10-29 https://bugbountyreports.com/reports/2136-csrf-on-cards-api2026-10-29 https://bugbountyreports.com/reports/5392-csrf-on-connecting-paypal-as-payment-provider2026-10-29 https://bugbountyreports.com/reports/1119-csrf-on-eng-uber-com-may-lead-to-server-side-compromise2026-10-29 https://bugbountyreports.com/reports/6363-csrf-on-https-apps-topcoder-com-wiki-pages-doattachfile2026-10-29 https://bugbountyreports.com/reports/5475-csrf-on-https-apps-topcoder-com-wiki-plugins2026-10-29 https://bugbountyreports.com/reports/5472-csrf-on-https-apps-topcoder-com-wiki-users-general-and2026-10-29 https://bugbountyreports.com/reports/5473-csrf-on-https-apps-topcoder-com-wiki-users-editmyprofile2026-10-29 https://bugbountyreports.com/reports/6364-csrf-on-https-apps-topcoder-com-wiki-users2026-10-29 https://bugbountyreports.com/reports/956-csrf-on-https-shopify-com-plus2026-10-29 https://bugbountyreports.com/reports/4074-csrf-on-https-www-niche-co-leads-to-account-disconnection2026-10-29 https://bugbountyreports.com/reports/6172-csrf-on-launchpad-37signals-com-oauth2-authorization2026-10-29 https://bugbountyreports.com/reports/2648-csrf-on-periscope-web-oauth-authorization-endpoint2026-10-29 https://bugbountyreports.com/reports/1992-csrf-on-signup-endpoint-auto-api-yelp-com2026-10-29 https://bugbountyreports.com/reports/6934-csrf-on-tiktok-ads-portal2026-10-29 https://bugbountyreports.com/reports/1389-csrf-on-vimeo-via-cross-site-flashing-leading-to-info2026-10-29 https://bugbountyreports.com/reports/883-csrf-possible-when-sop-bypass-uxss-is-available2026-10-29 https://bugbountyreports.com/reports/7759-csrf-protection-bypass-in-github-enterprise-management2026-10-29 https://bugbountyreports.com/reports/1572-csrf-protection-bypass-on-any-django-powered-site-via2026-10-29 https://bugbountyreports.com/reports/8823-csrf-protection-bypass-on-tiktok-webcast-endpoints2026-10-29 https://bugbountyreports.com/reports/8608-csrf-protection-on-oidc-login-is-broken2026-10-29 https://bugbountyreports.com/reports/9409-csrf-resulting-in-adding-pet-at2026-10-29 https://bugbountyreports.com/reports/9095-csrf-that-makes-any-linkedin-user-follow-attacker2026-10-29 https://bugbountyreports.com/reports/9094-csrf-that-makes-any-user-send-invitations-to-the-attacker2026-10-29 https://bugbountyreports.com/reports/322-csrf-to-account-take-over-bug2026-10-29 https://bugbountyreports.com/reports/6229-csrf-to-account-takeover-in-https2026-10-29 https://bugbountyreports.com/reports/6120-csrf-to-account-takeover-in-https-mil2026-10-29 https://bugbountyreports.com/reports/2536-csrf-to-add-admin-wordpress2026-10-29 https://bugbountyreports.com/reports/6203-csrf-to-add-new-app-in-developer-account-and-bypassing-json2026-10-29 https://bugbountyreports.com/reports/8412-csrf-to-ato-at-https-user-account-htus2026-10-29 https://bugbountyreports.com/reports/2997-csrf-to-change-account-security-keys-on-secure-login-gov2026-10-29 https://bugbountyreports.com/reports/1546-csrf-to-change-email-notification-settings2026-10-29 https://bugbountyreports.com/reports/2214-csrf-to-connect-third-party-account2026-10-29 https://bugbountyreports.com/reports/6745-csrf-to-cross-site-scripting-xss2026-10-29 https://bugbountyreports.com/reports/6746-csrf-to-cross-site-scripting-xss2026-10-29 https://bugbountyreports.com/reports/8924-csrf-to-delete-a-pet2026-10-29 https://bugbountyreports.com/reports/9203-csrf-to-delete-a-pet-on2026-10-29 https://bugbountyreports.com/reports/4236-csrf-to-html-injection-in-comments2026-10-29 https://bugbountyreports.com/reports/9080-csrf-to-information-disclosure-on-password-reset2026-10-29 https://bugbountyreports.com/reports/2532-csrf-to-like-unlike-photos2026-10-29 https://bugbountyreports.com/reports/9835-csrf-to-reflected-xss-at-echo-urbandictionary-biz-via2026-10-29 https://bugbountyreports.com/reports/6338-csrf-to-stored-html-injection-at-https-www2026-10-29 https://bugbountyreports.com/reports/9730-csrf-to-xss2026-10-29 https://bugbountyreports.com/reports/9024-csrf-to-xss-in-htdocs-modules-system-admin-php2026-10-29 https://bugbountyreports.com/reports/2173-csrf-token-bypass-in-account-deletion2026-10-29 https://bugbountyreports.com/reports/2925-csrf-token-does-not-valided-during-blog-comment2026-10-29 https://bugbountyreports.com/reports/3369-csrf-token-fixation-and-potential-account-takeover2026-10-29 https://bugbountyreports.com/reports/620-csrf-token-fixation-in-facebook-store-app-that-can-lead-to2026-10-29 https://bugbountyreports.com/reports/7722-csrf-token-validation-system-is-disabled-on-stripe-dashboard2026-10-29 https://bugbountyreports.com/reports/7889-csrf-token-validation-system-is-disabled-on-stripe-dashboard2026-10-29 https://bugbountyreports.com/reports/4068-csrf-trial-14-days-express-subscription2026-10-29 https://bugbountyreports.com/reports/2673-csrf-vulnerability-allows-attackers-to-steal-socialclub2026-10-29 https://bugbountyreports.com/reports/10030-csrf-vulnerability-allows-disabling-gmail-contacts-link-for2026-10-29 https://bugbountyreports.com/reports/8438-csrf-vulnerability-in-nextcloud-desktop-client-3-6-1-on2026-10-29 https://bugbountyreports.com/reports/2259-csrf-vulnerability-in-saving-payment-card-on-store2026-10-29 https://bugbountyreports.com/reports/273-csrf-vulnerability-on-https-sehacure-slack-com-account2026-10-29 https://bugbountyreports.com/reports/5623-csrf-vulnerability-on-https-signin-rockstargames-com-tpa2026-10-29 https://bugbountyreports.com/reports/5769-csrf-vulnerability-on-post-creation-page-community-create2026-10-29 https://bugbountyreports.com/reports/5038-csrf-vulnerability-that-allows-an-attacker-to-modify2026-10-29 https://bugbountyreports.com/reports/5717-csrf-vulnerabiliy-on-facebook-linkage-page-allows-full2026-10-29 https://bugbountyreports.com/reports/7126-csrf-when-unlocking-lenses-leads-to-lenses-being-forcefully2026-10-29 https://bugbountyreports.com/reports/8757-csrf-with-logout-action2026-10-29 https://bugbountyreports.com/reports/7404-csrf-m-vk-com2026-10-29 https://bugbountyreports.com/reports/7413-csrf2026-10-29 https://bugbountyreports.com/reports/2375-csrf-framing-2fa2026-10-29 https://bugbountyreports.com/reports/2964-csrf2026-10-29 https://bugbountyreports.com/reports/3389-csrf2026-10-29 https://bugbountyreports.com/reports/7407-csrf2026-10-29 https://bugbountyreports.com/reports/2588-csrf2026-10-29 https://bugbountyreports.com/reports/6923-csrf2026-10-29 https://bugbountyreports.com/reports/3267-csrf2026-10-29 https://bugbountyreports.com/reports/2829-csrf2026-10-29 https://bugbountyreports.com/reports/3208-csrf-id2026-10-29 https://bugbountyreports.com/reports/2914-csrf-token-leak-by-request-forgery2026-10-29 https://bugbountyreports.com/reports/3620-csrf-tokens-on-pages-without-no-cache-headers-resulting-in2026-10-29 https://bugbountyreports.com/reports/2403-csrf-add-item-to-victim-s-cart-automatically-starbucks-com2026-10-29 https://bugbountyreports.com/reports/3072-csrf-replacing-the-router-configuration-backup-having-an2026-10-29 https://bugbountyreports.com/reports/9698-csrftoken-not-unique-to-session-or-specific-user-and2026-10-29 https://bugbountyreports.com/reports/5050-css-injection-in-avito-ru-via-ie112026-10-29 https://bugbountyreports.com/reports/9523-css-injection-in-message-avatar2026-10-29 https://bugbountyreports.com/reports/5526-css-injection-on-static-mackeeper-com-potential-xss2026-10-29 https://bugbountyreports.com/reports/4788-css-injection-to-disable-app-potential-message-exfil2026-10-29 https://bugbountyreports.com/reports/4539-css-injection-via-bb-code-tag2026-10-29 https://bugbountyreports.com/reports/8280-css-injection-via-client-side-path-traversal-open-redirect2026-10-29 https://bugbountyreports.com/reports/23-css-leaks-scss-debug-info2026-10-29 https://bugbountyreports.com/reports/751-csv-excel-macro-injection-in-export-response2026-10-29 https://bugbountyreports.com/reports/843-csv-excel-macro-injection-vulnerability-in-export-list-of2026-10-29 https://bugbountyreports.com/reports/2293-csv-export-filter-bypass-leads-to-formula-injection2026-10-29 https://bugbountyreports.com/reports/1440-csv-injection-at-camptix-event-ticketing2026-10-29 https://bugbountyreports.com/reports/8406-csv-injection-at-https-assets-paris-demo-codefi-network2026-10-29 https://bugbountyreports.com/reports/4154-csv-injection-at-the-csv-export-feature2026-10-29 https://bugbountyreports.com/reports/2972-csv-injection-https-hub-grab-com2026-10-29 https://bugbountyreports.com/reports/1076-csv-injection-in-business-uber-com2026-10-29 https://bugbountyreports.com/reports/1608-csv-injection-in-camptix2026-10-29 https://bugbountyreports.com/reports/2629-csv-injection-in-gitlab-com-via-issues-export-feature2026-10-29 https://bugbountyreports.com/reports/3010-csv-injection-in-gratipay-com-via-payment-history-export2026-10-29 https://bugbountyreports.com/reports/832-csv-injection-in-polldaddy-com2026-10-29 https://bugbountyreports.com/reports/7305-csv-injection-in-the-credentials-export2026-10-29 https://bugbountyreports.com/reports/5976-csv-injection-via-student-password-name-leads-to-client2026-10-29 https://bugbountyreports.com/reports/954-csv-injection-via-the-csv-export-feature2026-10-29 https://bugbountyreports.com/reports/1113-csv-injection-via-the-csv-export-feature2026-10-29 https://bugbountyreports.com/reports/1251-csv-injection-with-the-csv-export-feature2026-10-29 https://bugbountyreports.com/reports/2304-csv-injection-with-the-csv-export-feature2026-10-29 https://bugbountyreports.com/reports/739-csv-injection-with-the-cvs-export-feature2026-10-29 https://bugbountyreports.com/reports/2278-csv-injection-with-the-cvs-export-feature-glossary2026-10-29 https://bugbountyreports.com/reports/6504-ctf-walkthrough2026-10-29 https://bugbountyreports.com/reports/6512-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/3907-ctf-writeup-flag-cha1n1ng-bugs-f0r-fun-4nd-pr0f1t-or-rep0rt2026-10-29 https://bugbountyreports.com/reports/7629-cui-labelled-document-out-in-the-open2026-10-29 https://bugbountyreports.com/reports/7198-cui-labled-and-and-restricted-intelligence2026-10-29 https://bugbountyreports.com/reports/7221-cui-labled-and-restricted-pdf-on2026-10-29 https://bugbountyreports.com/reports/3163-curl-libcurl-cve-2016-8624-invalid-url-parsing-with2026-10-29 https://bugbountyreports.com/reports/9125-curl-cookie-mixed-case-psl-bypass2026-10-29 https://bugbountyreports.com/reports/9172-curl-hsts-long-file-name-clears-contents2026-10-29 https://bugbountyreports.com/reports/674-curl-setopt-array-type-confusion2026-10-29 https://bugbountyreports.com/reports/9610-curl-stack-buffer-overread-during-punycode-conversions2026-10-29 https://bugbountyreports.com/reports/7342-custom-crafted-message-object-in-meteor-call-allows-remote2026-10-29 https://bugbountyreports.com/reports/4342-custom-field-attributes-may-be-created-and-updated-for2026-10-29 https://bugbountyreports.com/reports/10079-customer-can-cancel-a-individual-booking-in-a-batch-causing2026-10-29 https://bugbountyreports.com/reports/9916-customer-data-exposure-via-insecure-endpoint-of-coupon2026-10-29 https://bugbountyreports.com/reports/5534-customer-private-program-can-disclose-email-any-users2026-10-29 https://bugbountyreports.com/reports/6283-customer-s-full-name-disclosure-via-shopify-chat-by-email2026-10-29 https://bugbountyreports.com/reports/756-customers-password-hash-leak2026-10-29 https://bugbountyreports.com/reports/6625-cve-2020-14179-on-jira-instance2026-10-29 https://bugbountyreports.com/reports/10223-cve-35813-in2026-10-29 https://bugbountyreports.com/reports/9583-cve-2010-1429-jboss-insecure-storage-of-sensitive2026-10-29 https://bugbountyreports.com/reports/503-cve-2014-0224-openssl-ccs-vulnerability2026-10-29 https://bugbountyreports.com/reports/4683-cve-2015-8874-stack-overflow-with-imagefilltoborder2026-10-29 https://bugbountyreports.com/reports/1479-cve-2016-0772-python-smtplib-starttls-stripping-attack2026-10-29 https://bugbountyreports.com/reports/1044-cve-2016-0799-memory-issues-in-bio-printf-functions2026-10-29 https://bugbountyreports.com/reports/4937-cve-2016-1924-openjpeg-opj-tgt-reset-out-of-bounds-read2026-10-29 https://bugbountyreports.com/reports/1559-cve-2016-2177-undefined-pointer-arithmetic-in-ssl-code2026-10-29 https://bugbountyreports.com/reports/4939-cve-2016-3182-openjpeg-color-esycc-to-rgb-out-of-bounds2026-10-29 https://bugbountyreports.com/reports/4940-cve-2016-3183-openjpeg-sycc422-to-rgb-out-of-bounds-read2026-10-29 https://bugbountyreports.com/reports/4938-cve-2016-4796-openjpeg-color-cmyk-to-rgb-out-of-bounds-read2026-10-29 https://bugbountyreports.com/reports/4942-cve-2016-5157-openjpeg-opj-dwt-interleave-v-out-of-bounds2026-10-29 https://bugbountyreports.com/reports/4941-cve-2016-7163-openjpeg-opj-pi-create-decode-integer2026-10-29 https://bugbountyreports.com/reports/6093-cve-2016-7418-php-out-of-bounds-read-in-php-wddx-push2026-10-29 https://bugbountyreports.com/reports/3462-cve-2017-1000101-curl-url-globbing-out-of-bounds-read2026-10-29 https://bugbountyreports.com/reports/4584-cve-2017-10965-null-pointer-dereference-in-irssi-1-0-42026-10-29 https://bugbountyreports.com/reports/4692-cve-2017-10966-heap-use-after-free-in-irssi-1-0-42026-10-29 https://bugbountyreports.com/reports/4585-cve-2017-11367-global-buffer-overflow-read-of-size-4-in2026-10-29 https://bugbountyreports.com/reports/4623-cve-2017-12858-heap-uaf-in-zip-buffer-free-double-free-in2026-10-29 https://bugbountyreports.com/reports/4617-cve-2017-12985-the-ipv6-parser-in-tcpdump-before-4-9-2-has2026-10-29 https://bugbountyreports.com/reports/4621-cve-2017-12986-the-ipv6-routing-header-parser-in-tcpdump2026-10-29 https://bugbountyreports.com/reports/4622-cve-2017-13008-the-ieee-802-11-parser-in-tcpdump-before-4-92026-10-29 https://bugbountyreports.com/reports/4618-cve-2017-13009-the-ipv6-mobility-parser-in-tcpdump-before-42026-10-29 https://bugbountyreports.com/reports/4619-cve-2017-13010-the-beep-parser-in-tcpdump-before-4-9-2-has2026-10-29 https://bugbountyreports.com/reports/7207-cve-2017-13019-the-pgm-parser-in-tcpdump-before-4-9-2-has-a2026-10-29 https://bugbountyreports.com/reports/4620-cve-2017-13038-the-ppp-parser-in-tcpdump-before-4-9-2-has-a2026-10-29 https://bugbountyreports.com/reports/7069-cve-2017-13040-the-mptcp-parser-in-tcpdump-before-4-9-2-has2026-10-29 https://bugbountyreports.com/reports/7068-cve-2017-13041-the-icmpv6-parser-in-tcpdump-before-4-9-22026-10-29 https://bugbountyreports.com/reports/7208-cve-2017-13050-the-rpki-router-parser-in-tcpdump-before-4-92026-10-29 https://bugbountyreports.com/reports/4926-cve-2017-13089-wget-stack-smash2026-10-29 https://bugbountyreports.com/reports/4925-cve-2017-13090-wget-heap-smash2026-10-29 https://bugbountyreports.com/reports/3279-cve-2017-15277-on-profile-page2026-10-29 https://bugbountyreports.com/reports/1915-cve-2017-3730-bad-ec-dhe-parameters-cause-a-client-crash2026-10-29 https://bugbountyreports.com/reports/4612-cve-2017-5204-the-ipv6-parser-in-tcpdump-before-4-9-0-has-a2026-10-29 https://bugbountyreports.com/reports/4613-cve-2017-5341-the-otv-parser-in-tcpdump-before-4-9-0-has-a2026-10-29 https://bugbountyreports.com/reports/4615-cve-2017-5342-in-tcpdump-before-4-9-0-a-bug-in-multiple2026-10-29 https://bugbountyreports.com/reports/4616-cve-2017-5482-the-q-933-parser-in-tcpdump-before-4-9-0-has2026-10-29 https://bugbountyreports.com/reports/4614-cve-2017-5484-the-atm-parser-in-tcpdump-before-4-9-0-has-a2026-10-29 https://bugbountyreports.com/reports/8235-cve-2017-5929-hyperledger-arbitrary-deserialization-of2026-10-29 https://bugbountyreports.com/reports/4583-cve-2017-5969-libxml2-when-used-in-recover-mode-allows2026-10-29 https://bugbountyreports.com/reports/5215-cve-2017-8779-exploit-on-open-rpcbind-port-could-lead-to2026-10-29 https://bugbountyreports.com/reports/4932-cve-2017-8798-miniupnp-gethttpresponse-chunked-encoding2026-10-29 https://bugbountyreports.com/reports/9685-cve-2017-9822-dotnetnuke-cookie-deserialization-remote-code2026-10-29 https://bugbountyreports.com/reports/4293-cve-2018-02962026-10-29 https://bugbountyreports.com/reports/9584-cve-2018-0296-cisco-asa-denial-of-service-path-traversal2026-10-29 https://bugbountyreports.com/reports/3666-cve-2018-12882-heap-use-after-free-in-php-7-2-through-7-2-62026-10-29 https://bugbountyreports.com/reports/7191-cve-2018-6389-exploitation-using-scripts-loader2026-10-29 https://bugbountyreports.com/reports/8647-cve-2018-6389-exploitation-using-scripts-loader2026-10-29 https://bugbountyreports.com/reports/9218-cve-2018-6389-exploitation-using-scripts-loader2026-10-29 https://bugbountyreports.com/reports/3471-cve-2018-6797-a-crafted-regular-expression-can-cause-a-heap2026-10-29 https://bugbountyreports.com/reports/4499-cve-2019-0196-mod-http2-with-scoreboard-use-after-free-read2026-10-29 https://bugbountyreports.com/reports/6211-cve-2019-11043-a-buffer-underflow-in-fpm-main-c-can-lead-to2026-10-29 https://bugbountyreports.com/reports/8005-cve-2019-11248-on-http-9100-debug-pprof-goroutine2026-10-29 https://bugbountyreports.com/reports/6324-cve-2019-11250-remains-in-effect2026-10-29 https://bugbountyreports.com/reports/4957-cve-2019-13132-libzmq-4-1-series-is-vulnerable2026-10-29 https://bugbountyreports.com/reports/9343-cve-2019-1551-rsaz-512-sqr-overflow-bug-on-x86-642026-10-29 https://bugbountyreports.com/reports/5818-cve-2019-19935-dom-based-xss-in-the-froala-editor2026-10-29 https://bugbountyreports.com/reports/6966-cve-2019-3403-on-https-rest-api-2-user-picker-query2026-10-29 https://bugbountyreports.com/reports/6346-cve-2019-5435-an-integer-overflow-found-in-lib-urlapi-c2026-10-29 https://bugbountyreports.com/reports/4269-cve-2019-5436-heap-buffer-overflow-at-lib-tftp-c2026-10-29 https://bugbountyreports.com/reports/4323-cve-2019-5443-windows-privilege-escalation-malicious2026-10-29 https://bugbountyreports.com/reports/6248-cve-2019-5481-krb5-double-free-in-read-data-after-realloc2026-10-29 https://bugbountyreports.com/reports/6249-cve-2019-5482-heap-buffer-overflow-in-tftp-when-using-small2026-10-29 https://bugbountyreports.com/reports/4543-cve-2019-5736-escape-from-docker-and-kubernetes-containers2026-10-29 https://bugbountyreports.com/reports/7206-cve-2020-10938-buffer-overflow-out-of-bounds-write-in2026-10-29 https://bugbountyreports.com/reports/6291-cve-2020-14179-on-https-jira-theendlessweb-com-secure2026-10-29 https://bugbountyreports.com/reports/6044-cve-2020-3187-unauthenticated-arbitrary-file-deletion2026-10-29 https://bugbountyreports.com/reports/7840-cve-2020-3187-unauthenticated-arbitrary-file-deletion2026-10-29 https://bugbountyreports.com/reports/7841-cve-2020-3187-unauthenticated-arbitrary-file-deletion2026-10-29 https://bugbountyreports.com/reports/7149-cve-2020-3452-unauthenticated-file-read-on-anyconnect2026-10-29 https://bugbountyreports.com/reports/7666-cve-2020-3452-cisco-asa-firepower-read-only-path-traversal2026-10-29 https://bugbountyreports.com/reports/7683-cve-2020-3452-on-https2026-10-29 https://bugbountyreports.com/reports/5995-cve-2020-3452-unauthenticated-file-read-in-cisco-asa-cisco2026-10-29 https://bugbountyreports.com/reports/9654-cve-2020-7961-rce-liferay-portal-unauthenticated-via-https2026-10-29 https://bugbountyreports.com/reports/6344-cve-2020-8169-partial-password-leak-over-dns-on-http2026-10-29 https://bugbountyreports.com/reports/6345-cve-2020-8177-curl-overwrite-local-file-with-j2026-10-29 https://bugbountyreports.com/reports/6202-cve-2020-8231-connect-only-connections-can-use-the-wrong2026-10-29 https://bugbountyreports.com/reports/6577-cve-2020-8284-trusting-ftp-pasv-responses2026-10-29 https://bugbountyreports.com/reports/6434-cve-2020-8285-ftp-wildcard-stack-overflow2026-10-29 https://bugbountyreports.com/reports/6352-cve-2020-8286-inferior-ocsp-verification2026-10-29 https://bugbountyreports.com/reports/7203-cve-2020-9383-floppy-oob-read2026-10-29 https://bugbountyreports.com/reports/6857-cve-2021-22876-automatic-referer-leaks-credentials2026-10-29 https://bugbountyreports.com/reports/6858-cve-2021-22890-tls-1-3-session-ticket-proxy-host-mixup2026-10-29 https://bugbountyreports.com/reports/6928-cve-2021-22897-schannel-cipher-selection-surprise2026-10-29 https://bugbountyreports.com/reports/6929-cve-2021-22898-telnet-stack-contents-disclosure2026-10-29 https://bugbountyreports.com/reports/6930-cve-2021-22901-tls-session-caching-disaster2026-10-29 https://bugbountyreports.com/reports/7091-cve-2021-22922-wrong-content-via-metalink-not-discarded2026-10-29 https://bugbountyreports.com/reports/7092-cve-2021-22923-metalink-download-sends-credentials2026-10-29 https://bugbountyreports.com/reports/7094-cve-2021-22924-bad-connection-reuse-due-to-flawed-path-name2026-10-29 https://bugbountyreports.com/reports/7096-cve-2021-22925-telnet-stack-contents-disclosure-again2026-10-29 https://bugbountyreports.com/reports/7093-cve-2021-22926-curlopt-sslcert-mixup-with-secure-transport2026-10-29 https://bugbountyreports.com/reports/7291-cve-2021-22945-uaf-and-double-free-in-mqtt-sending2026-10-29 https://bugbountyreports.com/reports/7317-cve-2021-22946-protocol-downgrade-required-tls-bypassed2026-10-29 https://bugbountyreports.com/reports/7316-cve-2021-22947-starttls-protocol-injection-via-mitm2026-10-29 https://bugbountyreports.com/reports/6752-cve-2021-26855-on-resulting-in-ssrf2026-10-29 https://bugbountyreports.com/reports/7322-cve-2021-3711-sm2-decrypt-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/8102-cve-2021-38314-https-www-mtn-ci2026-10-29 https://bugbountyreports.com/reports/8101-cve-2021-38314-https-www-mtn-co-rw2026-10-29 https://bugbountyreports.com/reports/9387-cve-2021-39226-discovered-on-endpoint-https-api-snapshots2026-10-29 https://bugbountyreports.com/reports/7993-cve-2021-40438-on-cp-eu2-acronis-com2026-10-29 https://bugbountyreports.com/reports/7433-cve-2021-40870-in2026-10-29 https://bugbountyreports.com/reports/7335-cve-2021-40870-on-52-204-160-312026-10-29 https://bugbountyreports.com/reports/7677-cve-2021-42567-apereo-cas-reflected-xss-on-https2026-10-29 https://bugbountyreports.com/reports/9250-cve-2022-21371-oracle-weblogic-server-local-file-inclusion2026-10-29 https://bugbountyreports.com/reports/8121-cve-2022-21831-possible-code-injection-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/7800-cve-2022-22576-oauth2-bearer-bypass-in-connection-re-use2026-10-29 https://bugbountyreports.com/reports/8407-cve-2022-23519-rails-html-safelistsanitizer-vulnerable-to2026-10-29 https://bugbountyreports.com/reports/8408-cve-2022-23520-incomplete-fix-for-cve-2022-32209-xss-in2026-10-29 https://bugbountyreports.com/reports/7720-cve-2022-24288-apache-airflow-two-rces-in-example-dags2026-10-29 https://bugbountyreports.com/reports/7792-cve-2022-27774-credential-leak-on-redirect2026-10-29 https://bugbountyreports.com/reports/7796-cve-2022-27774-credential-leak-on-redirect2026-10-29 https://bugbountyreports.com/reports/7793-cve-2022-27775-bad-local-ipv6-connection-reuse2026-10-29 https://bugbountyreports.com/reports/7797-cve-2022-27775-bad-local-ipv6-connection-reuse2026-10-29 https://bugbountyreports.com/reports/7794-cve-2022-27776-auth-cookie-leak-on-redirect2026-10-29 https://bugbountyreports.com/reports/7798-cve-2022-27776-auth-cookie-leak-on-redirect2026-10-29 https://bugbountyreports.com/reports/7829-cve-2022-27778-curl-removes-wrong-file-on-error2026-10-29 https://bugbountyreports.com/reports/7845-cve-2022-27778-curl-removes-wrong-file-on-error2026-10-29 https://bugbountyreports.com/reports/7830-cve-2022-27779-cookie-for-trailing-dot-tld2026-10-29 https://bugbountyreports.com/reports/7911-cve-2022-27779-cookie-for-trailing-dot-tld2026-10-29 https://bugbountyreports.com/reports/7834-cve-2022-27780-percent-encoded-path-separator-in-url-host2026-10-29 https://bugbountyreports.com/reports/7912-cve-2022-27780-percent-encoded-path-separator-in-url-host2026-10-29 https://bugbountyreports.com/reports/7853-cve-2022-27781-certinfo-never-ending-busy-loop2026-10-29 https://bugbountyreports.com/reports/8022-cve-2022-27781-certinfo-never-ending-busy-loop2026-10-29 https://bugbountyreports.com/reports/7832-cve-2022-27782-tls-and-ssh-connection-too-eager-reuse2026-10-29 https://bugbountyreports.com/reports/7844-cve-2022-27782-tls-and-ssh-connection-too-eager-reuse2026-10-29 https://bugbountyreports.com/reports/7885-cve-2022-28738-double-free-in-regexp-compilation2026-10-29 https://bugbountyreports.com/reports/7835-cve-2022-30115-hsts-bypass-via-trailing-dot2026-10-29 https://bugbountyreports.com/reports/7913-cve-2022-30115-hsts-bypass-via-trailing-dot2026-10-29 https://bugbountyreports.com/reports/7938-cve-2022-32205-set-cookie-denial-of-service2026-10-29 https://bugbountyreports.com/reports/7948-cve-2022-32205-set-cookie-denial-of-service2026-10-29 https://bugbountyreports.com/reports/7937-cve-2022-32206-http-compression-denial-of-service2026-10-29 https://bugbountyreports.com/reports/7949-cve-2022-32206-http-compression-denial-of-service2026-10-29 https://bugbountyreports.com/reports/7936-cve-2022-32207-unpreserved-file-permissions2026-10-29 https://bugbountyreports.com/reports/7947-cve-2022-32207-unpreserved-file-permissions2026-10-29 https://bugbountyreports.com/reports/7935-cve-2022-32208-ftp-krb-bad-message-verification2026-10-29 https://bugbountyreports.com/reports/7950-cve-2022-32208-ftp-krb-bad-message-verification2026-10-29 https://bugbountyreports.com/reports/8015-cve-2022-32213-http-request-smuggling-due-to-flawed-parsing2026-10-29 https://bugbountyreports.com/reports/8258-cve-2022-32213-bypass-via-obs-fold-mechanic2026-10-29 https://bugbountyreports.com/reports/8016-cve-2022-32214-http-request-smuggling-due-to-improper2026-10-29 https://bugbountyreports.com/reports/8014-cve-2022-32215-http-request-smuggling-due-to-incorrect2026-10-29 https://bugbountyreports.com/reports/8323-cve-2022-32221-post-following-put-confusion2026-10-29 https://bugbountyreports.com/reports/8080-cve-2022-35252-control-code-in-cookie-denial-of-service2026-10-29 https://bugbountyreports.com/reports/8281-cve-2022-35252-control-code-in-cookie-denial-of-service2026-10-29 https://bugbountyreports.com/reports/8262-cve-2022-35260-netrc-parser-out-of-bounds-access2026-10-29 https://bugbountyreports.com/reports/8346-cve-2022-35260-netrc-parser-out-of-bounds-access2026-10-29 https://bugbountyreports.com/reports/8182-cve-2022-35948-crlf-injection-in-nodejs-undici-via-content2026-10-29 https://bugbountyreports.com/reports/8181-cve-2022-38362-apache-airflow-docker-provider-3-0-rce2026-10-29 https://bugbountyreports.com/reports/8409-cve-2022-40127-rce-in-apache-airflow-2-4-0-bash-example2026-10-29 https://bugbountyreports.com/reports/9758-cve-2022-40604-apache-airflow-format-string-vulnerability2026-10-29 https://bugbountyreports.com/reports/8324-cve-2022-42915-http-proxy-double-free2026-10-29 https://bugbountyreports.com/reports/8263-cve-2022-42916-hsts-bypass-via-idn2026-10-29 https://bugbountyreports.com/reports/8273-cve-2022-42916-hsts-bypass-via-idn2026-10-29 https://bugbountyreports.com/reports/8378-cve-2022-43551-another-hsts-bypass-via-idn2026-10-29 https://bugbountyreports.com/reports/8471-cve-2022-43551-another-hsts-bypass-via-idn2026-10-29 https://bugbountyreports.com/reports/8395-cve-2022-43552-http-proxy-deny-use-after-free2026-10-29 https://bugbountyreports.com/reports/8333-cve-2022-45402-apache-airflow-open-redirect-during-login2026-10-29 https://bugbountyreports.com/reports/8495-cve-2023-23914-curl-hsts-ignored-on-multiple-requests2026-10-29 https://bugbountyreports.com/reports/8522-cve-2023-23914-hsts-ignored-on-multiple-requests2026-10-29 https://bugbountyreports.com/reports/8494-cve-2023-23915-hsts-amnesia-with-parallel2026-10-29 https://bugbountyreports.com/reports/8521-cve-2023-23915-hsts-amnesia-with-parallel2026-10-29 https://bugbountyreports.com/reports/8504-cve-2023-23916-http-multi-header-compression-denial-of2026-10-29 https://bugbountyreports.com/reports/8599-cve-2023-23919-multiple-openssl-error-handling-issues-in2026-10-29 https://bugbountyreports.com/reports/8941-cve-2023-24488-xss-on-https2026-10-29 https://bugbountyreports.com/reports/8641-cve-2023-25692-apache-airflow-google-provider-google-cloud2026-10-29 https://bugbountyreports.com/reports/9459-cve-2023-26347-in-https-mil-hax-cfide-adminapi2026-10-29 https://bugbountyreports.com/reports/8564-cve-2023-27533-telnet-option-iac-injection2026-10-29 https://bugbountyreports.com/reports/8558-cve-2023-27533-telnet-option-iac-injection2026-10-29 https://bugbountyreports.com/reports/8559-cve-2023-27534-sftp-path-resolving-discrepancy2026-10-29 https://bugbountyreports.com/reports/8565-cve-2023-27534-sftp-path-resolving-discrepancy2026-10-29 https://bugbountyreports.com/reports/8560-cve-2023-27535-ftp-too-eager-connection-reuse2026-10-29 https://bugbountyreports.com/reports/8566-cve-2023-27535-ftp-too-eager-connection-reuse2026-10-29 https://bugbountyreports.com/reports/8561-cve-2023-27536-gss-delegation-too-eager-connection-re-use2026-10-29 https://bugbountyreports.com/reports/8567-cve-2023-27536-gss-delegation-too-eager-connection-re-use2026-10-29 https://bugbountyreports.com/reports/8557-cve-2023-27537-hsts-double-free2026-10-29 https://bugbountyreports.com/reports/8570-cve-2023-27537-hsts-double-free2026-10-29 https://bugbountyreports.com/reports/8568-cve-2023-27538-ssh-connection-too-eager-reuse-still2026-10-29 https://bugbountyreports.com/reports/8645-cve-2023-27538-ssh-connection-too-eager-reuse-still2026-10-29 https://bugbountyreports.com/reports/8726-cve-2023-28319-uaf-in-ssh-sha256-fingerprint-check2026-10-29 https://bugbountyreports.com/reports/8796-cve-2023-28319-uaf-in-ssh-sha256-fingerprint-check2026-10-29 https://bugbountyreports.com/reports/8731-cve-2023-28320-siglongjmp-race-condition2026-10-29 https://bugbountyreports.com/reports/8715-cve-2023-28320-siglongjmp-race-condition2026-10-29 https://bugbountyreports.com/reports/8717-cve-2023-28321-idn-wildcard-match2026-10-29 https://bugbountyreports.com/reports/8798-cve-2023-28321-idn-wildcard-match2026-10-29 https://bugbountyreports.com/reports/8716-cve-2023-28322-more-post-after-put-confusion2026-10-29 https://bugbountyreports.com/reports/8797-cve-2023-28322-more-post-after-put-confusion2026-10-29 https://bugbountyreports.com/reports/8824-cve-2023-28710-apache-airflow-spark-provider-arbitrary-file2026-10-29 https://bugbountyreports.com/reports/8664-cve-2023-28755-redos-vulnerability-in-uri2026-10-29 https://bugbountyreports.com/reports/8753-cve-2023-29489-xss-in-cpanel-at-www-securado-oman2026-10-29 https://bugbountyreports.com/reports/8993-cve-2023-30587-process-based-permissions-can-be-bypassed2026-10-29 https://bugbountyreports.com/reports/8839-cve-2023-32001-fopen-race-condition2026-10-29 https://bugbountyreports.com/reports/8891-cve-2023-36617-redos-vulnerability-in-uri-ruby2026-10-29 https://bugbountyreports.com/reports/8956-cve-2023-38039-http-header-allocation-dos2026-10-29 https://bugbountyreports.com/reports/9012-cve-2023-38545-socks5-heap-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/9013-cve-2023-38546-cookie-injection-with-none-file2026-10-29 https://bugbountyreports.com/reports/8933-cve-2023-40195-apache-airflow-spark-provider2026-10-29 https://bugbountyreports.com/reports/8927-cve-2023-40273-session-fixation-in-apache-airflow-web2026-10-29 https://bugbountyreports.com/reports/9045-cve-2023-40611-apache-airflow-dag-runs-broken-access2026-10-29 https://bugbountyreports.com/reports/9815-cve-2023-41763-business-elevation-of-privilege2026-10-29 https://bugbountyreports.com/reports/9062-cve-2023-42663-apache-airflow-bypass-permission2026-10-29 https://bugbountyreports.com/reports/9084-cve-2023-42780-apache-airflow-improper-access-control2026-10-29 https://bugbountyreports.com/reports/9142-cve-2023-461322026-10-29 https://bugbountyreports.com/reports/9093-cve-2023-46218-cookie-mixed-case-psl-bypass2026-10-29 https://bugbountyreports.com/reports/9098-cve-2023-46219-hsts-long-file-name-clears-contents2026-10-29 https://bugbountyreports.com/reports/9086-cve-2023-46695-potential-denial-of-service-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/9087-cve-2023-47037-airflow-broken-access-control-vulnerability2026-10-29 https://bugbountyreports.com/reports/9143-cve-2023-49920-apache-airflow-missing-csrf-protection-on2026-10-29 https://bugbountyreports.com/reports/9123-cve-2023-5528-insufficient-input-sanitization-in-in-tree2026-10-29 https://bugbountyreports.com/reports/9828-cve-2023-5561-on-payapps-com2026-10-29 https://bugbountyreports.com/reports/9193-cve-2024-0853-ocsp-verification-bypass-with-tls-session2026-10-29 https://bugbountyreports.com/reports/9293-cve-2024-0853-ocsp-verification-bypass-with-tls-session2026-10-29 https://bugbountyreports.com/reports/9720-cve-2024-11053-netrc-redirect-credential-leak2026-10-29 https://bugbountyreports.com/reports/9294-cve-2024-2004-usage-of-disabled-protocol2026-10-29 https://bugbountyreports.com/reports/9186-cve-2024-21733-apache-tomcat-http-request-smuggling-client2026-10-29 https://bugbountyreports.com/reports/9290-cve-2024-2379-quic-certificate-check-bypass-with-wolfssl2026-10-29 https://bugbountyreports.com/reports/9297-cve-2024-2379-quic-certificate-check-bypass-with-wolfssl2026-10-29 https://bugbountyreports.com/reports/9291-cve-2024-2398-http-2-push-headers-memory-leak2026-10-29 https://bugbountyreports.com/reports/9317-cve-2024-2398-http-2-push-headers-memory-leak2026-10-29 https://bugbountyreports.com/reports/9292-cve-2024-2466-tls-certificate-check-bypass-with-mbedtls2026-10-29 https://bugbountyreports.com/reports/9298-cve-2024-2466-tls-certificate-check-bypass-with-mbedtls2026-10-29 https://bugbountyreports.com/reports/9323-cve-2024-25128-apache-airflow-authentication-bypass-when2026-10-29 https://bugbountyreports.com/reports/9300-cve-2024-27281-rce-vulnerability-with-rdoc-options-in-rdoc2026-10-29 https://bugbountyreports.com/reports/9322-cve-2024-27351-potential-regular-expression-denial-of2026-10-29 https://bugbountyreports.com/reports/9420-cve-2024-31079-in-nginx2026-10-29 https://bugbountyreports.com/reports/9421-cve-2024-32760-in-nginx2026-10-29 https://bugbountyreports.com/reports/9441-cve-2024-3416-mtu-of-4096-or-greater-without-fragmentation2026-10-29 https://bugbountyreports.com/reports/9426-cve-2024-34750-apache-tomcat-dos-vulnerability-in-http-22026-10-29 https://bugbountyreports.com/reports/9419-cve-2024-35200-in-nginx2026-10-29 https://bugbountyreports.com/reports/10255-cve-2024-36137-patch-bypass-filehandle-chmod-chown2026-10-29 https://bugbountyreports.com/reports/9541-cve-2024-38875-denial-of-service-through-uncontrolled2026-10-29 https://bugbountyreports.com/reports/9588-cve-2024-41937-apache-airflow-stored-xss-vulnerability-on2026-10-29 https://bugbountyreports.com/reports/9611-cve-2024-41989-denial-of-service-vulnerability-in-the2026-10-29 https://bugbountyreports.com/reports/9715-cve-2024-41990-potential-denial-of-service-in-django-utils2026-10-29 https://bugbountyreports.com/reports/9548-cve-2024-42005-potential-sql-injection-in-queryset-values2026-10-29 https://bugbountyreports.com/reports/9877-cve-2024-43398-dos-vulnerability-in-rexml2026-10-29 https://bugbountyreports.com/reports/9784-cve-2024-45230-potential-denial-of-service-in-django-utils2026-10-29 https://bugbountyreports.com/reports/9718-cve-2024-45498-apache-airflow-command-injection-in-read2026-10-29 https://bugbountyreports.com/reports/9714-cve-2024-49761-redos-vulnerability-in-rexml2026-10-29 https://bugbountyreports.com/reports/9797-cve-2024-53908-django-potential-sql-injection-in-haskey-lhs2026-10-29 https://bugbountyreports.com/reports/9793-cve-2024-56374-potential-denial-of-service-in-ipv62026-10-29 https://bugbountyreports.com/reports/9912-cve-2024-56374-denial-of-service-vulnerability-in-ipv62026-10-29 https://bugbountyreports.com/reports/9490-cve-2024-6197-freeing-stack-buffer-in-utf8asn1str2026-10-29 https://bugbountyreports.com/reports/9489-cve-2024-6874-macidn-punycode-buffer-overread2026-10-29 https://bugbountyreports.com/reports/9507-cve-2024-7264-asn-1-date-parser-overread2026-10-29 https://bugbountyreports.com/reports/9576-cve-2024-7347-buffer-overread-in-the-ngx-http-mp4-module2026-10-29 https://bugbountyreports.com/reports/9591-cve-2024-8096-ocsp-stapling-bypass-with-gnutls2026-10-29 https://bugbountyreports.com/reports/9672-cve-2024-9681-hsts-subdomain-overwrites-parent-cache-entry2026-10-29 https://bugbountyreports.com/reports/9796-cve-2025-0167-netrc-and-default-credential-leak2026-10-29 https://bugbountyreports.com/reports/9795-cve-2025-0665-eventfd-double-close2026-10-29 https://bugbountyreports.com/reports/9782-cve-2025-0725-gzip-integer-overflow2026-10-29 https://bugbountyreports.com/reports/9873-cve-2025-0725-heap-overflow-in-curl-with-content-encoding2026-10-29 https://bugbountyreports.com/reports/10018-cve-2025-10148-predictable-websocket-mask2026-10-29 https://bugbountyreports.com/reports/10056-cve-2025-10966-missing-sftp-host-verification-with-wolfssh2026-10-29 https://bugbountyreports.com/reports/10115-cve-2025-14524-bearer-token-leak-on-cross-protocol-redirect2026-10-29 https://bugbountyreports.com/reports/10114-cve-2025-15079-libssh-global-knownhost-override2026-10-29 https://bugbountyreports.com/reports/10113-cve-2025-15224-libssh-key-passphrase-bypass-without-agent2026-10-29 https://bugbountyreports.com/reports/9875-cve-2025-24813-remote-code-execution-and-or-information2026-10-29 https://bugbountyreports.com/reports/9927-cve-2025-4947-quic-certificate-check-skip-with-wolfssl2026-10-29 https://bugbountyreports.com/reports/9928-cve-2025-5025-no-quic-certificate-pinning-with-wolfssl2026-10-29 https://bugbountyreports.com/reports/9937-cve-2025-5399-websocket-endless-loop2026-10-29 https://bugbountyreports.com/reports/10019-cve-2025-9086-out-of-bounds-read-for-cookie-path2026-10-29 https://bugbountyreports.com/reports/10379-cve-2026-10536-http-2-stream-dependency-tree-uaf2026-10-29 https://bugbountyreports.com/reports/10612-cve-2026-107928-info-leak-uploading-over-websockets-with2026-10-29 https://bugbountyreports.com/reports/10611-cve-2026-107929-local-interface-connection-reuse-mixup2026-10-29 https://bugbountyreports.com/reports/10645-cve-2026-111480-pause-uaf-from-within-callback2026-10-29 https://bugbountyreports.com/reports/10646-cve-2026-111481-server-set-cookie-still-aborts-cookie-jar2026-10-29 https://bugbountyreports.com/reports/10647-cve-2026-111482-libssh2-knownhosts-prefix-match2026-10-29 https://bugbountyreports.com/reports/10640-cve-2026-111483-gnutls-accepts-non-successful-ocsp-staples2026-10-29 https://bugbountyreports.com/reports/10648-cve-2026-111484-openssl-with-sectrust-accepts-bad-ocsp2026-10-29 https://bugbountyreports.com/reports/10643-cve-2026-111878-openssl-provider-uaf-on-tls-shutdown2026-10-29 https://bugbountyreports.com/reports/10649-cve-2026-111950-tls-session-cache-diff-scheme-reuse2026-10-29 https://bugbountyreports.com/reports/10642-cve-2026-111951-curl-oj-truncate-without-filename2026-10-29 https://bugbountyreports.com/reports/10644-cve-2026-111952-openssl-provider-use-after-free-again2026-10-29 https://bugbountyreports.com/reports/10650-cve-2026-111953-gnutls-sectrust-ocsp-staple-bypass2026-10-29 https://bugbountyreports.com/reports/10651-cve-2026-111954-upload-reader-failed-redirect-uaf2026-10-29 https://bugbountyreports.com/reports/10380-cve-2026-11352-quic-zero-length-udp-datagrams-busy-loop2026-10-29 https://bugbountyreports.com/reports/10641-cve-2026-115528-wolfssl-tls-connect-without-cert2026-10-29 https://bugbountyreports.com/reports/10652-cve-2026-115529-schannel-tls-auto-client-session-resumption2026-10-29 https://bugbountyreports.com/reports/10383-cve-2026-11564-native-ca-trust-persist2026-10-29 https://bugbountyreports.com/reports/10381-cve-2026-11586-ws-auto-pong-memory-exhaustion2026-10-29 https://bugbountyreports.com/reports/10365-cve-2026-11856-cross-origin-digest-auth-state-leak2026-10-29 https://bugbountyreports.com/reports/10382-cve-2026-12064-proto-default-skips-ssh-verification2026-10-29 https://bugbountyreports.com/reports/10503-cve-2026-13608-openldap-sasl-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/10500-cve-2026-18924-http-2-server-push-uaf2026-10-29 https://bugbountyreports.com/reports/10509-cve-2026-19931-negotiate-ambient-user-conn-reuse2026-10-29 https://bugbountyreports.com/reports/10235-cve-2026-3783-token-leak-with-redirect-and-netrc2026-10-29 https://bugbountyreports.com/reports/10236-cve-2026-3784-wrong-proxy-connection-reuse-with-credentials2026-10-29 https://bugbountyreports.com/reports/10237-cve-2026-3805-use-after-free-in-smb-connection-reuse2026-10-29 https://bugbountyreports.com/reports/10294-cve-2026-4873-connection-reuse-ignores-tls-requirement2026-10-29 https://bugbountyreports.com/reports/10297-cve-2026-5545-wrong-reuse-of-http-negotiate-connection2026-10-29 https://bugbountyreports.com/reports/10293-cve-2026-5773-wrong-reuse-of-smb-connection2026-10-29 https://bugbountyreports.com/reports/10298-cve-2026-6253-proxy-credentials-leak-over-redirect-to-proxy2026-10-29 https://bugbountyreports.com/reports/10296-cve-2026-6276-stale-custom-cookie-host-causes-cookie-leak2026-10-29 https://bugbountyreports.com/reports/10295-cve-2026-6429-netrc-credential-leak-with-reused-proxy2026-10-29 https://bugbountyreports.com/reports/10299-cve-2026-7009-ocsp-stapling-bypass-with-apple-sectrust2026-10-29 https://bugbountyreports.com/reports/10300-cve-2026-7168-cross-proxy-digest-auth-state-leak2026-10-29 https://bugbountyreports.com/reports/10508-cve-2026-80229-openssl-provider-use-after-free2026-10-29 https://bugbountyreports.com/reports/10507-cve-2026-80230-openssl-pinning-bypass2026-10-29 https://bugbountyreports.com/reports/10506-cve-2026-80231-native-ca-store-conn-reuse2026-10-29 https://bugbountyreports.com/reports/10504-cve-2026-80255-secure-cookie-attribute-bypass-with-tab2026-10-29 https://bugbountyreports.com/reports/10502-cve-2026-80256-wcurl-backslash-bypass2026-10-29 https://bugbountyreports.com/reports/10505-cve-2026-82208-wolfssl-ca-cache-hit-overrides-callback2026-10-29 https://bugbountyreports.com/reports/10510-cve-2026-82209-domain-scoped-psl-domain-cookie2026-10-29 https://bugbountyreports.com/reports/10373-cve-2026-8286-wrong-starttls-connection-reuse2026-10-29 https://bugbountyreports.com/reports/10368-cve-2026-8458-wrong-reuse-for-different-services2026-10-29 https://bugbountyreports.com/reports/10598-cve-2026-86409-stale-sigv4-headers-sent-unintended2026-10-29 https://bugbountyreports.com/reports/10597-cve-2026-86410-redirect-to-sftp-or-scp-bypasses-host2026-10-29 https://bugbountyreports.com/reports/10600-cve-2026-86411-ftp-connection-reuse-inherits-client2026-10-29 https://bugbountyreports.com/reports/10601-cve-2026-86412-server-set-cookie-erases-cookie-jar2026-10-29 https://bugbountyreports.com/reports/10610-cve-2026-86413-negotiate-credentials-sent-to-redirected2026-10-29 https://bugbountyreports.com/reports/10602-cve-2026-86414-leaking-host-credentials-to-http-proxy2026-10-29 https://bugbountyreports.com/reports/10604-cve-2026-86415-auto-client-cert-connection-reuse-mixup2026-10-29 https://bugbountyreports.com/reports/10590-cve-2026-87861-cross-origin-reuse-of-a-negotiate-connection2026-10-29 https://bugbountyreports.com/reports/10603-cve-2026-87862-hsts-cache-import-drops-longer-lived-child2026-10-29 https://bugbountyreports.com/reports/10606-cve-2026-87863-hsts-response-erases-persisted-entries2026-10-29 https://bugbountyreports.com/reports/10605-cve-2026-87864-imap-append-plus-crlf-conversion-command2026-10-29 https://bugbountyreports.com/reports/10593-cve-2026-87865-knownhost-callback-mismatches-key-as-missing2026-10-29 https://bugbountyreports.com/reports/10594-cve-2026-87866-wolfssl-public-key-pinning-bypass2026-10-29 https://bugbountyreports.com/reports/10378-cve-2026-8924-trailing-dot-domain-super-cookie2026-10-29 https://bugbountyreports.com/reports/10370-cve-2026-8925-sasl-double-free2026-10-29 https://bugbountyreports.com/reports/10369-cve-2026-8926-password-leak-with-netrc-and-user-in-url2026-10-29 https://bugbountyreports.com/reports/10371-cve-2026-8927-env-set-cross-proxy-digest-auth-state-leak2026-10-29 https://bugbountyreports.com/reports/10372-cve-2026-8932-incomplete-mtls-config-matching-in-conn-reuse2026-10-29 https://bugbountyreports.com/reports/10375-cve-2026-9079-stale-proxy-password-leak2026-10-29 https://bugbountyreports.com/reports/10374-cve-2026-9080-uaf-after-pause-in-socket-callback2026-10-29 https://bugbountyreports.com/reports/10608-cve-2026-92386-server-set-cookie-aborts-cookie-jar-load2026-10-29 https://bugbountyreports.com/reports/10607-cve-2026-92387-never-ending-loop-via-server-response2026-10-29 https://bugbountyreports.com/reports/10595-cve-2026-92388-ftp-wildcard-write-callback-mixup2026-10-29 https://bugbountyreports.com/reports/10599-cve-2026-92389-tftp-direction-confusion2026-10-29 https://bugbountyreports.com/reports/10596-cve-2026-92390-j-no-clobber-guarantee-bypassed-with-1032026-10-29 https://bugbountyreports.com/reports/10609-cve-2026-92391-curl-mime-free-stack-overflow-by-recursion2026-10-29 https://bugbountyreports.com/reports/10589-cve-2026-92392-http-2-upload-use-after-free2026-10-29 https://bugbountyreports.com/reports/10591-cve-2026-94265-authorization-negotiate-sent-to-foreign2026-10-29 https://bugbountyreports.com/reports/10592-cve-2026-94266-password-leak-in-curlinfo-effective-url2026-10-29 https://bugbountyreports.com/reports/10366-cve-2026-9545-exposing-http-3-early-data2026-10-29 https://bugbountyreports.com/reports/10376-cve-2026-9546-sending-old-referer2026-10-29 https://bugbountyreports.com/reports/10377-cve-2026-9547-ssh-improper-host-validation2026-10-29 https://bugbountyreports.com/reports/10141-cve-2025-4123-grafana-open-redirect-stored-xss-ssrf-full2026-10-29 https://bugbountyreports.com/reports/720-daily-owncloud-com-information-disclosure2026-10-29 https://bugbountyreports.com/reports/6010-damage-to-the-timeline-so-that-comment-fields-cannot-be2026-10-29 https://bugbountyreports.com/reports/153-dangerous-persistent-xss2026-10-29 https://bugbountyreports.com/reports/6701-dangling-cloud-instance-at-vpn-inverselink-com2026-10-29 https://bugbountyreports.com/reports/8607-dangling-dns-record-docs-jitsi-net-unsuccessful-gsuite2026-10-29 https://bugbountyreports.com/reports/676-dangling-pointer-in-the-unserialization-of-arrayobject-items2026-10-29 https://bugbountyreports.com/reports/699-dashboard-panel-embedded-onto-itself-causes-a-denial-of2026-10-29 https://bugbountyreports.com/reports/6631-dashboard-sharing-enables-code-injection-into-emails2026-10-29 https://bugbountyreports.com/reports/202-dashboard-pages-types-unknown-column-array-in-where-clause2026-10-29 https://bugbountyreports.com/reports/10572-data-index-directory-abuse2026-10-29 https://bugbountyreports.com/reports/388-data-exports-stored-on-s3-can-be-scraped-easily2026-10-29 https://bugbountyreports.com/reports/1011-data-tags-and-the-new-html-sanitizer-subverts-csrf2026-10-29 https://bugbountyreports.com/reports/6572-database-error-shown-to-the-user-when-using-a-long-guest2026-10-29 https://bugbountyreports.com/reports/8321-database-resource-exhaustion-for-logged-in-users-via-sharee2026-10-29 https://bugbountyreports.com/reports/9178-datadog-api-keys-exposed-can-be-used-to-do-all-the-read-and2026-10-29 https://bugbountyreports.com/reports/2326-dav-sharing-permissions-issue2026-10-29 https://bugbountyreports.com/reports/9276-dbms-information-getting-exposed-publicly-on2026-10-29 https://bugbountyreports.com/reports/791-ddos-using-xmlrpc-php2026-10-29 https://bugbountyreports.com/reports/10472-ddp-methods-getthreadslist-getthreadmessages-leaks-private2026-10-29 https://bugbountyreports.com/reports/5072-de-anonymization-attack-cross-site-information-leakage2026-10-29 https://bugbountyreports.com/reports/3560-de-anonymization-by-visiting-specially-crafted-bookmark2026-10-29 https://bugbountyreports.com/reports/7640-de-anonymize-anonymous-tips-through-the-tumblr-blog-network2026-10-29 https://bugbountyreports.com/reports/9833-deadlock-in-x86-hvm-standard-vga-handling2026-10-29 https://bugbountyreports.com/reports/10467-debug-deep-link-abuse-allows-repeated-forced-logout-and2026-10-29 https://bugbountyreports.com/reports/10180-debug-info-disclose2026-10-29 https://bugbountyreports.com/reports/5262-debug-information-disclosure-on-oauth-redirector-services2026-10-29 https://bugbountyreports.com/reports/9068-debug-log-file-exposure-that-exposes-user-username-and2026-10-29 https://bugbountyreports.com/reports/9897-debug-log-leaked2026-10-29 https://bugbountyreports.com/reports/8594-debugging-panel-exposure2026-10-29 https://bugbountyreports.com/reports/10094-deck-app-allowed-user-with-can-share-permission-to-modify2026-10-29 https://bugbountyreports.com/reports/10107-deck-app-allows-to-spoof-file-extensions-by-using-rtlo2026-10-29 https://bugbountyreports.com/reports/10626-deck-app-invalid-tag-color-is-accepted-by-api-and-breaks2026-10-29 https://bugbountyreports.com/reports/3853-defacement-of-catalog-data-gov-via-web-cache-poisoning-to2026-10-29 https://bugbountyreports.com/reports/7620-default-creds-on-https2026-10-29 https://bugbountyreports.com/reports/9116-default-admin-username-and-password-on2026-10-29 https://bugbountyreports.com/reports/6987-default-admin-username-and-password-on-server-at-mil2026-10-29 https://bugbountyreports.com/reports/8087-default-admin-username-and-password-on-remedysso2026-10-29 https://bugbountyreports.com/reports/6357-default-behavior-of-fastifys-versioned-routes-can-be-used2026-10-29 https://bugbountyreports.com/reports/9198-default-credentials-at-https-52-42-105-712026-10-29 https://bugbountyreports.com/reports/5653-default-credentials-for-the-temporary-poc-site-alipoc-stg2026-10-29 https://bugbountyreports.com/reports/7536-default-credentials-lead-to-spring-boot-admin-dashboard2026-10-29 https://bugbountyreports.com/reports/2554-default-credentials-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/8704-default-credentials-on-kinetic-core-system-console-https2026-10-29 https://bugbountyreports.com/reports/5895-default-creds-spring-boot-admin2026-10-29 https://bugbountyreports.com/reports/8074-default-login-credentials-on-https-broadbandmaps-mtn-com-gh2026-10-29 https://bugbountyreports.com/reports/6985-default-nextcloud-server-and-android-client-leak-sharee2026-10-29 https://bugbountyreports.com/reports/6950-default-nextcloud-server-config-and-ios-nextcloud-client2026-10-29 https://bugbountyreports.com/reports/4990-default-page-exposes-admin-functions-and-all-metods-and2026-10-29 https://bugbountyreports.com/reports/8303-default-password-on-34-120-209-1752026-10-29 https://bugbountyreports.com/reports/6977-default-settings-leak-federated-cloud-id-to-lookup-server2026-10-29 https://bugbountyreports.com/reports/3889-delay-of-arrears-notification-allows-riders-to-take2026-10-29 https://bugbountyreports.com/reports/5286-delete-all-data-of-any-user2026-10-29 https://bugbountyreports.com/reports/10410-delete-any-folder-for-any-user-within-the-organization2026-10-29 https://bugbountyreports.com/reports/8695-delete-any-linkedin-comment-on-learning-api-of-other-users2026-10-29 https://bugbountyreports.com/reports/8654-delete-any-user-s-added-email-telephone-fax-address-skype2026-10-29 https://bugbountyreports.com/reports/8538-delete-anyone-s-content-spotlight-remotely2026-10-29 https://bugbountyreports.com/reports/339-delete-credit-cards-from-any-twitter-account-in-ads-twitter2026-10-29 https://bugbountyreports.com/reports/6292-delete-direct-message-history-without-access-the-proper2026-10-29 https://bugbountyreports.com/reports/4168-delete-directory-using-symlink-when-decompressing-tar2026-10-29 https://bugbountyreports.com/reports/9074-delete-external-storage-of-any-user2026-10-29 https://bugbountyreports.com/reports/4479-delete-permission-can-be-added-on-reshare2026-10-29 https://bugbountyreports.com/reports/1415-delete-modify-your-own-comment-after-limited-access-idor2026-10-29 https://bugbountyreports.com/reports/1098-deleted-name-still-present-via-mouseover-functionality-for2026-10-29 https://bugbountyreports.com/reports/1599-deleted-post-and-administrative-function-access-in2026-10-29 https://bugbountyreports.com/reports/829-deleted-staff-member-can-add-his-amazon-marketplace-web2026-10-29 https://bugbountyreports.com/reports/7374-deleting-all-dms-on-redditgifts-com2026-10-29 https://bugbountyreports.com/reports/106-deleting-groups-in-any-project-without-permission2026-10-29 https://bugbountyreports.com/reports/1810-deleting-key-value-pair-from-frozen-hash-or-clearing-a2026-10-29 https://bugbountyreports.com/reports/4017-deleting-other-people-s-comments-on-moderatormessages2026-10-29 https://bugbountyreports.com/reports/2527-deleting-payment-profile-during-active-trip-puts-account2026-10-29 https://bugbountyreports.com/reports/7767-deleting-someone-else-s-profile-image-with-a-graphql-query2026-10-29 https://bugbountyreports.com/reports/137-deleting-team-members2026-10-29 https://bugbountyreports.com/reports/8064-delimiter-injection-in-github-actions-core-exportvariable2026-10-29 https://bugbountyreports.com/reports/1481-demo-nextcloud-com-content-spoofing-due-to-default-apache2026-10-29 https://bugbountyreports.com/reports/1580-demo-nextcloud-com-content-spoofing-due-to-default-apache2026-10-29 https://bugbountyreports.com/reports/759-demo-owncloud-org-http-compression-is-enabled-potentially2026-10-29 https://bugbountyreports.com/reports/724-demo-owncloud-org-web-server-http-trace-track-method2026-10-29 https://bugbountyreports.com/reports/2269-demo-weblate-org-is-vulnerable-to-sweet32-vulnerability2026-10-29 https://bugbountyreports.com/reports/9747-denial-of-access-to-static-resources-via-cache-poisoning-on2026-10-29 https://bugbountyreports.com/reports/528-denial-of-service2026-10-29 https://bugbountyreports.com/reports/10406-denial-of-service-dos-vulnerability-in-drafts-creation2026-10-29 https://bugbountyreports.com/reports/6564-denial-of-service-out-of-memory-on-updating-bounty-table2026-10-29 https://bugbountyreports.com/reports/1978-denial-of-service-segfault-due-to-null-pointer-dereference2026-10-29 https://bugbountyreports.com/reports/1979-denial-of-service-segfault-due-to-null-pointer-dereference2026-10-29 https://bugbountyreports.com/reports/5821-denial-of-service-chrome2026-10-29 https://bugbountyreports.com/reports/5990-denial-of-service-twitter-com-mobile-twitter-com2026-10-29 https://bugbountyreports.com/reports/995-denial-of-service-any-report2026-10-29 https://bugbountyreports.com/reports/1935-denial-of-service-attack-on-brave-browser2026-10-29 https://bugbountyreports.com/reports/1633-denial-of-service-attack-window-object-on-brave-browser2026-10-29 https://bugbountyreports.com/reports/9876-denial-of-service-by-memory-exhaustion-in-net-imap2026-10-29 https://bugbountyreports.com/reports/6551-denial-of-service-by-requesting-to-reset-a-password2026-10-29 https://bugbountyreports.com/reports/6129-denial-of-service-by-resource-exhaustion-cwe-400-due-to2026-10-29 https://bugbountyreports.com/reports/9269-denial-of-service-by-resource-exhaustion-in-fetch-brotli2026-10-29 https://bugbountyreports.com/reports/9316-denial-of-service-caused-by-http-2-continuation-flood2026-10-29 https://bugbountyreports.com/reports/1777-denial-of-service-due-to-invalid-memory-access-in-mrb-ary2026-10-29 https://bugbountyreports.com/reports/1209-denial-of-service-in-account-statistics-endpoint2026-10-29 https://bugbountyreports.com/reports/610-denial-of-service-in-action-pack-exception-handling2026-10-29 https://bugbountyreports.com/reports/7026-denial-of-service-in-anti-ransomware-service-exe-via-logs2026-10-29 https://bugbountyreports.com/reports/4582-denial-of-service-in-libxml2-using-malicious-lzma-file-to2026-10-29 https://bugbountyreports.com/reports/1781-denial-of-service-in-mruby-due-to-null-pointer-dereference2026-10-29 https://bugbountyreports.com/reports/5149-denial-of-service-in-strapi-framework-using-argument2026-10-29 https://bugbountyreports.com/reports/5410-denial-of-service-to-wp-json-api-by-cache-poisoning-the2026-10-29 https://bugbountyreports.com/reports/10256-denial-of-service-via-proto-header-name-in-req2026-10-29 https://bugbountyreports.com/reports/3971-denial-of-service-via-cache-poisoning2026-10-29 https://bugbountyreports.com/reports/7328-denial-of-service-via-hyperlinks-in-posts2026-10-29 https://bugbountyreports.com/reports/5226-denial-of-service-nghttp2-use-of-uninitialized-pointer2026-10-29 https://bugbountyreports.com/reports/5897-denial-of-service-by-cache-poisoning-the-cross-origin2026-10-29 https://bugbountyreports.com/reports/9029-deny-admin-from-editing-linkedin-company-page-using-gen2026-10-29 https://bugbountyreports.com/reports/8209-deny-of-service-via-malicious-content-type2026-10-29 https://bugbountyreports.com/reports/8900-dependency-policy-bypass-via-process-binding2026-10-29 https://bugbountyreports.com/reports/8944-dependency-policy-bypass-via-process-binding2026-10-29 https://bugbountyreports.com/reports/4138-deprecated-hacker101-coursework-repository-mentions-heroku2026-10-29 https://bugbountyreports.com/reports/7890-deprecated-owners-query-api-bypasses-object-view-policy2026-10-29 https://bugbountyreports.com/reports/4193-deserialization-of-untrusted-data-in-www-delivery-adxmlrpc2026-10-29 https://bugbountyreports.com/reports/4192-deserialization-of-untrusted-data-in-www-delivery-dxmlrpc2026-10-29 https://bugbountyreports.com/reports/2397-design-flaw-in-session-management-of-password-reset2026-10-29 https://bugbountyreports.com/reports/2512-design-issue-with-webhook-several-notifications-on-mixmax2026-10-29 https://bugbountyreports.com/reports/2114-design-issues-on-lead-to-show-ips-of-users2026-10-29 https://bugbountyreports.com/reports/6198-desktop-app-rce-276031-bypass2026-10-29 https://bugbountyreports.com/reports/8482-desktop-client-can-be-tricked-into-opening-executing-local2026-10-29 https://bugbountyreports.com/reports/8671-desktop-client-does-not-verify-received-singed-certificate2026-10-29 https://bugbountyreports.com/reports/4265-detect-tor-browser-s-language2026-10-29 https://bugbountyreports.com/reports/4247-detecting-tor-browser-ui-language2026-10-29 https://bugbountyreports.com/reports/8391-developer-mistake2026-10-29 https://bugbountyreports.com/reports/7526-developer-uploaded-files-missing-authentication-on-line2026-10-29 https://bugbountyreports.com/reports/3171-development-configuration-file2026-10-29 https://bugbountyreports.com/reports/2040-differential-show-raw-file-feature-exposes-generated-files2026-10-29 https://bugbountyreports.com/reports/8806-diffiehellman-doesn-t-generate-keys-after-setting-a-key2026-10-29 https://bugbountyreports.com/reports/8836-diffiehellman-doesn-t-generate-keys-after-setting-a-key2026-10-29 https://bugbountyreports.com/reports/7568-direct-access-to-admin-dashboard2026-10-29 https://bugbountyreports.com/reports/8528-direct-access-to-tox-ini-file-which-is-contain2026-10-29 https://bugbountyreports.com/reports/988-direct-url-access-to-completed-reports2026-10-29 https://bugbountyreports.com/reports/2491-directory-disclose-email-disclose-zendmail-vulnerability2026-10-29 https://bugbountyreports.com/reports/2087-directory-index-and-information-disclosure2026-10-29 https://bugbountyreports.com/reports/6500-directory-indexing-on-the-https-leads-to-the-backups2026-10-29 https://bugbountyreports.com/reports/1357-directory-listening2026-10-29 https://bugbountyreports.com/reports/1536-directory-listening2026-10-29 https://bugbountyreports.com/reports/1508-directory-listening-enabled-in-88-198-160-1302026-10-29 https://bugbountyreports.com/reports/2462-directory-listing2026-10-29 https://bugbountyreports.com/reports/8302-directory-listing-at-https2026-10-29 https://bugbountyreports.com/reports/884-directory-listing-in-https-demo-owncloud-org-doc2026-10-29 https://bugbountyreports.com/reports/5174-directory-listing-is-enabled-that-exposes-non-public-data2026-10-29 https://bugbountyreports.com/reports/5600-directory-listing-of-https-get8x8-com2026-10-29 https://bugbountyreports.com/reports/10037-directory-listing-of-publicly-available-assets2026-10-29 https://bugbountyreports.com/reports/8187-directory-listing-vulnerability-on-packet8-net-php-include2026-10-29 https://bugbountyreports.com/reports/8132-directory-traversal-at2026-10-29 https://bugbountyreports.com/reports/304-directory-traversal-at-http-staging-jsdelivr-net2026-10-29 https://bugbountyreports.com/reports/3511-directory-traversal-at-https-msg-algolia-com2026-10-29 https://bugbountyreports.com/reports/2915-directory-traversal-at-https-nightly-ubnt-com2026-10-29 https://bugbountyreports.com/reports/654-directory-traversal-attack-in-view-resolver2026-10-29 https://bugbountyreports.com/reports/6215-directoryiterator-class-silently-truncates-after-a-null-byte2026-10-29 https://bugbountyreports.com/reports/5739-disable-test-send-feature-if-user-s-email-address-isn-t2026-10-29 https://bugbountyreports.com/reports/8056-disable-xmlrpc-php-file2026-10-29 https://bugbountyreports.com/reports/5308-disabled-account-can-still-use-graphql-endpoint2026-10-29 https://bugbountyreports.com/reports/8402-disabled-download-shares-still-allow-download-through2026-10-29 https://bugbountyreports.com/reports/5290-disabled-user-can-reset-their-password2026-10-29 https://bugbountyreports.com/reports/8059-disabling-context-isolation-nodeintegrationinsubframes2026-10-29 https://bugbountyreports.com/reports/5175-disclose-any-store-products-files-purchase-orders-via-email2026-10-29 https://bugbountyreports.com/reports/1966-disclose-any-user-s-private-email-through-api2026-10-29 https://bugbountyreports.com/reports/7848-disclose-customer-orders-details-by-shopify-chat-application2026-10-29 https://bugbountyreports.com/reports/10195-disclose-hidden-comments-on-media-section-of-hub-vroid-com2026-10-29 https://bugbountyreports.com/reports/7849-disclose-stuff-member-name-and-make-actions2026-10-29 https://bugbountyreports.com/reports/4321-disclosing-a-private-program-in-an-external-link-if-program2026-10-29 https://bugbountyreports.com/reports/9760-disclosing-policypageassetgroup-in-private-programs-via2026-10-29 https://bugbountyreports.com/reports/7214-disclosure-handle-private-program-with-external-link2026-10-29 https://bugbountyreports.com/reports/4974-disclosure-of-payment-transactions-for-programs-via-graphql2026-10-29 https://bugbountyreports.com/reports/4406-disclosure-of-152-cookie-names-via-crafted-input2026-10-29 https://bugbountyreports.com/reports/1849-disclosure-of-administrators-via-json-on-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/3682-disclosure-of-all-uploads-to-cloudinary-via-hardcoded-api2026-10-29 https://bugbountyreports.com/reports/6665-disclosure-of-co-rider-user-uber-pooling-profile-picture-at2026-10-29 https://bugbountyreports.com/reports/4637-disclosure-of-email-title-report-in-quick-award-paypout2026-10-29 https://bugbountyreports.com/reports/1493-disclosure-of-external-users-invited-to-a-specific-report2026-10-29 https://bugbountyreports.com/reports/3874-disclosure-of-github-issues2026-10-29 https://bugbountyreports.com/reports/4032-disclosure-of-h1-challenges-name-through-the-calendar2026-10-29 https://bugbountyreports.com/reports/3988-disclosure-of-information-about-the-system-configuration2026-10-29 https://bugbountyreports.com/reports/7142-disclosure-of-internal-information-using-hidden-ntlm2026-10-29 https://bugbountyreports.com/reports/1094-disclosure-of-map-information2026-10-29 https://bugbountyreports.com/reports/6695-disclosure-of-merchant-id-into-the-source-code-without2026-10-29 https://bugbountyreports.com/reports/1052-disclosure-of-private-programs-that-have-an-external-page2026-10-29 https://bugbountyreports.com/reports/4490-disclosure-of-program-email-title-report-when-being-removed2026-10-29 https://bugbountyreports.com/reports/2892-disclosure-of-sensitive-information-through-google-cloud2026-10-29 https://bugbountyreports.com/reports/5555-disclosure-of-the-name-of-a-program-that-has-a-private-part2026-10-29 https://bugbountyreports.com/reports/3872-disclosure-of-top-10-vulnerability-types-for-programs-that2026-10-29 https://bugbountyreports.com/reports/5139-disclosure-of-users-information-on-wordpress-api-https2026-10-29 https://bugbountyreports.com/reports/9235-disclosure-of-users-ip-address-whenever-they-view-my-fright2026-10-29 https://bugbountyreports.com/reports/7910-disclosure-the-live-analytics-information-of-any-livestream2026-10-29 https://bugbountyreports.com/reports/8340-disconnecting-an-external-login-provider-does-not-revoke2026-10-29 https://bugbountyreports.com/reports/7613-discoverability-by-phone-number-email-restriction-bypass2026-10-29 https://bugbountyreports.com/reports/4194-discrepancy-in-hacker-profile-report-count-may-reveal2026-10-29 https://bugbountyreports.com/reports/1108-distinguish-ep-private-vs-private-programs-in-hackerone2026-10-29 https://bugbountyreports.com/reports/1212-divide-and-conquer-session-key-recovery-in-sslv2-cve-20162026-10-29 https://bugbountyreports.com/reports/7891-django-debug-enabled-showing-information-about-system2026-10-29 https://bugbountyreports.com/reports/5940-django-debug-enabled-showing-information-about-system2026-10-29 https://bugbountyreports.com/reports/9843-django-debug-mode-enabled-information-disclosure-on-api-wwm2026-10-29 https://bugbountyreports.com/reports/5936-django-debug-mode-enabled-and-leaked-system-information2026-10-29 https://bugbountyreports.com/reports/5939-django-should-not-have-debug-mode-enabled2026-10-29 https://bugbountyreports.com/reports/740-dkim-records-not-present-email-hijacking-is-possible2026-10-29 https://bugbountyreports.com/reports/2846-dkim-records-not-present-email-hijacking-is-possible2026-10-29 https://bugbountyreports.com/reports/931-dll-hijacking-vulnerability-in-glasswiresetup-exe2026-10-29 https://bugbountyreports.com/reports/9564-dll-hijacking-when-creating-rescue-media-builder-leading-to2026-10-29 https://bugbountyreports.com/reports/9551-dll-hijacking-when-performing-operations-in-acronis-secure2026-10-29 https://bugbountyreports.com/reports/9563-dll-hijacking-when-sending-feedback-and-crash-report2026-10-29 https://bugbountyreports.com/reports/8160-dll-search-order-hijacking-vulnerability-in-work-64-exe-v72026-10-29 https://bugbountyreports.com/reports/10340-dll-side-loading-vulnerability-in-sony-music-center-for-pc2026-10-29 https://bugbountyreports.com/reports/6886-dmarc-and-dns-records-not-found-on-mcuboot-com2026-10-29 https://bugbountyreports.com/reports/6391-dmarc-and-spf-records2026-10-29 https://bugbountyreports.com/reports/1061-dmarc-is-misconfigured-for-grtp-co2026-10-29 https://bugbountyreports.com/reports/4049-dmarc-record-missing2026-10-29 https://bugbountyreports.com/reports/10118-dnn-unrestricted-arbitrary-file-upload2026-10-29 https://bugbountyreports.com/reports/9-dns-cache-poisoning2026-10-29 https://bugbountyreports.com/reports/7059-dns-leaks-when-using-any-vpn-browser-extension-with-brave2026-10-29 https://bugbountyreports.com/reports/6372-dns-max-responses-for-dos2026-10-29 https://bugbountyreports.com/reports/7265-dns-miconfiguration-leads-to-subdomain-takeover-max12026-10-29 https://bugbountyreports.com/reports/16-dns-misconfiguration2026-10-29 https://bugbountyreports.com/reports/60-dns-misconfiguration2026-10-29 https://bugbountyreports.com/reports/170-dns-misconfiguration2026-10-29 https://bugbountyreports.com/reports/7131-dns-misconfiguration-subdomain-takeover-8x8-com2026-10-29 https://bugbountyreports.com/reports/6673-dns-misconfiguration-subdomain-takeover-staging-8x8-com2026-10-29 https://bugbountyreports.com/reports/6615-dns-misconfiguration-subdomain-takeover-wavecell-com2026-10-29 https://bugbountyreports.com/reports/6605-dns-misconfiguration-subdomain-takeover-8x8-com2026-10-29 https://bugbountyreports.com/reports/9131-dns-pin-middleware-can-be-tricked-into-dns-rebinding2026-10-29 https://bugbountyreports.com/reports/8880-dns-rebinding-in-inspect-again-via-invalid-ip-addresses2026-10-29 https://bugbountyreports.com/reports/6646-dns-rebinding-in-inspect-insufficient-fix-of-cve-2018-71602026-10-29 https://bugbountyreports.com/reports/8188-dns-rebinding-in-inspect-insufficient-fix-of-cve-2022-322122026-10-29 https://bugbountyreports.com/reports/8440-dns-rebinding-in-inspect-insufficient-fix-of-cve-2022-322122026-10-29 https://bugbountyreports.com/reports/8353-dns-rebinding-in-inspect-via-invalid-octal-ip-address2026-10-29 https://bugbountyreports.com/reports/10042-dns-rebinding-ssrf-in-burp-suite-mcp-server-enables2026-10-29 https://bugbountyreports.com/reports/6640-dns-setup-allows-sending-mail-on-behalf-of-other-customers2026-10-29 https://bugbountyreports.com/reports/3950-dns-srv-lookup-of-file-sources-enables-local-hijacking-of2026-10-29 https://bugbountyreports.com/reports/10631-dns-resolve-truncates-names-containing-nul-char2026-10-29 https://bugbountyreports.com/reports/10490-dns-resolveany-aborts-the-node-js-process-when-a-dns2026-10-29 https://bugbountyreports.com/reports/2381-doc-owncloud-com-cve-2015-5477-bind9-tkey-vulnerability2026-10-29 https://bugbountyreports.com/reports/1198-doc-owncloud-com-php-info-page-disclosure2026-10-29 https://bugbountyreports.com/reports/1063-doc-owncloud-org-has-missing-php-handler2026-10-29 https://bugbountyreports.com/reports/1082-doc-owncloud-org-x-xss-protection-not-enabled2026-10-29 https://bugbountyreports.com/reports/5316-docker-image-with-fpm-is-vulnerable-to-cve-2019-110432026-10-29 https://bugbountyreports.com/reports/5593-docker-registry-http-api-v2-exposed-in-http-without2026-10-29 https://bugbountyreports.com/reports/8791-docker-registry-without-authentication-leads-to-docker2026-10-29 https://bugbountyreports.com/reports/9314-docker-secret-disclosure-via-github-actions-cache-poisoning2026-10-29 https://bugbountyreports.com/reports/8680-document-content-of-files-can-be-obtained-through-collabora2026-10-29 https://bugbountyreports.com/reports/7349-dod-internal-documents-are-leaked-to-the-public2026-10-29 https://bugbountyreports.com/reports/9532-dod-workstation-exposed-to-internet-via-tinypilot-kvm-with2026-10-29 https://bugbountyreports.com/reports/2135-dom-based-cookie-bomb2026-10-29 https://bugbountyreports.com/reports/4217-dom-based-css-injection-on-grammarly-com2026-10-29 https://bugbountyreports.com/reports/9741-dom-based-reflected-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/2051-dom-based-reflected-xss-in-rockstargames-com-newswire-tags2026-10-29 https://bugbountyreports.com/reports/1164-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/2725-dom-based-xss-affecting-all-pages-from-https-www-grab-com2026-10-29 https://bugbountyreports.com/reports/6046-dom-based-xss-at-docs-8x8-com2026-10-29 https://bugbountyreports.com/reports/3803-dom-based-xss-charting-library2026-10-29 https://bugbountyreports.com/reports/1846-dom-based-xss-div-innerhtml-parameters-store-starbucks2026-10-29 https://bugbountyreports.com/reports/54-dom-based-xss-https-www-khanacademy-org2026-10-29 https://bugbountyreports.com/reports/974-dom-based-xss-in-checkout2026-10-29 https://bugbountyreports.com/reports/1818-dom-based-xss-in-discourse-search2026-10-29 https://bugbountyreports.com/reports/2761-dom-based-xss-in-http-www-rockstargames-com-gtaonline-fix2026-10-29 https://bugbountyreports.com/reports/2740-dom-based-xss-in-https-www-rockstargames-com-gtaonline2026-10-29 https://bugbountyreports.com/reports/2447-dom-based-xss-in-mercantile-wordpress-org2026-10-29 https://bugbountyreports.com/reports/3292-dom-based-xss-in-mycrypto-com2026-10-29 https://bugbountyreports.com/reports/1674-dom-based-xss-in-search-functionality2026-10-29 https://bugbountyreports.com/reports/6132-dom-based-xss-in-store-acronis-com-purl-corporate-standard2026-10-29 https://bugbountyreports.com/reports/4216-dom-based-xss-in-the-woocommerce-plugin2026-10-29 https://bugbountyreports.com/reports/4059-dom-based-xss-in-www-hackerone-com-via-postmessage2026-10-29 https://bugbountyreports.com/reports/4214-dom-based-xss-in-www-hackerone-com-via-postmessage-bypass2026-10-29 https://bugbountyreports.com/reports/5716-dom-based-xss-on-gtaonline-de-news-article-via-returnurl2026-10-29 https://bugbountyreports.com/reports/5713-dom-based-xss-on-gtaonline-tw-starterpack2026-10-29 https://bugbountyreports.com/reports/5720-dom-based-xss-on-reddeadredemption2-br-videos2026-10-29 https://bugbountyreports.com/reports/2466-dom-based-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/1839-dom-based-xss-on-an-army-website2026-10-29 https://bugbountyreports.com/reports/6889-dom-based-xss-on-https-via-backurl-param2026-10-29 https://bugbountyreports.com/reports/5626-dom-based-xss-on-https-www-rockstargames-com-12026-10-29 https://bugbountyreports.com/reports/5631-dom-based-xss-on-https-www-rockstargames-com-via-returnurl2026-10-29 https://bugbountyreports.com/reports/5628-dom-based-xss-on-https-www-rockstargames-com-gtaonline2026-10-29 https://bugbountyreports.com/reports/5709-dom-based-xss-on-www-rockstargames-com-gtaonline-features2026-10-29 https://bugbountyreports.com/reports/8573-dom-based-xss-via-insecure-parameter-on-https-uberpay-mock2026-10-29 https://bugbountyreports.com/reports/4312-dom-based-xss-via-postmessage-at-https-inventory-upserve2026-10-29 https://bugbountyreports.com/reports/386-dom-cross-site-scripting-xss2026-10-29 https://bugbountyreports.com/reports/8865-dom-xss-and-open-redirect-in-tiktok-seller-endpoint2026-10-29 https://bugbountyreports.com/reports/5390-dom-xss-at-www-forescout-com-in-microsoft-edge-and-ie2026-10-29 https://bugbountyreports.com/reports/10274-dom-xss-in-fizzy-do-import-filename-preview-enables-one2026-10-29 https://bugbountyreports.com/reports/3375-dom-xss-in-edoverflow-com-tools-respond-due-to-unsafe-usage2026-10-29 https://bugbountyreports.com/reports/1998-dom-xss-in-https-www-slackatwork-com2026-10-29 https://bugbountyreports.com/reports/9608-dom-xss-in-tiktok-com-login-via-the-redirect-url-parameter2026-10-29 https://bugbountyreports.com/reports/3796-dom-xss-on-50x-html-page2026-10-29 https://bugbountyreports.com/reports/3869-dom-xss-on-50x-html-page-on-proxy-duckduckgo-com2026-10-29 https://bugbountyreports.com/reports/8013-dom-xss-on-ads-tiktok-com2026-10-29 https://bugbountyreports.com/reports/5321-dom-xss-on-app-starbucks-com-via-returnurl2026-10-29 https://bugbountyreports.com/reports/5645-dom-xss-on-duckduckgo-com-search2026-10-29 https://bugbountyreports.com/reports/5732-dom-xss-on-duckduckgo-com-search2026-10-29 https://bugbountyreports.com/reports/5932-dom-xss-on-duckduckgo-com-search2026-10-29 https://bugbountyreports.com/reports/6576-dom-xss-on-http-talks-lystit-com2026-10-29 https://bugbountyreports.com/reports/6078-dom-xss-on-https-www2026-10-29 https://bugbountyreports.com/reports/5617-dom-xss-on-https-www-rockstargames-com-gtaonline-feedback2026-10-29 https://bugbountyreports.com/reports/9241-dom-xss-on-multiple-automattic-domains-through-postmessages2026-10-29 https://bugbountyreports.com/reports/2218-dom-xss-on-teavana-com-via-pr-zip-location-parameter2026-10-29 https://bugbountyreports.com/reports/10025-dom-xss-on-www-omnipod-com-freedom-birthdate-confirmation2026-10-29 https://bugbountyreports.com/reports/7558-dom-xss-through-ads2026-10-29 https://bugbountyreports.com/reports/4298-dom-xss-via-shopify-api-modal-initialize2026-10-29 https://bugbountyreports.com/reports/4272-dom-xss-via-shopify-api-remoteredirect2026-10-29 https://bugbountyreports.com/reports/2420-dom-xss-vulnerability-in-search-dialogue-nc-sa-2017-0072026-10-29 https://bugbountyreports.com/reports/1564-dom-xss-activation-php-act-activate-mobile2026-10-29 https://bugbountyreports.com/reports/6945-dom-xss-learning-ozon-ru2026-10-29 https://bugbountyreports.com/reports/3201-dom-based-cross-site-scripting-in-redirect-url-checkout2026-10-29 https://bugbountyreports.com/reports/6674-dom-based-xss-in-d-miwifi-com-on-ie-112026-10-29 https://bugbountyreports.com/reports/3016-dom-based-xss-in-store-starbucks-co-uk-on-ie-112026-10-29 https://bugbountyreports.com/reports/5830-dom-based-xss-in-tumblr-com2026-10-29 https://bugbountyreports.com/reports/6565-dom-based-xss-in-tumblr-com2026-10-29 https://bugbountyreports.com/reports/5345-dom-based-xss-on-mobile-line-me2026-10-29 https://bugbountyreports.com/reports/8401-dom-based-xss-on-parameter-vsid2026-10-29 https://bugbountyreports.com/reports/8742-dom-xss2026-10-29 https://bugbountyreports.com/reports/7332-domain-does-not-match-ssl-certificate2026-10-29 https://bugbountyreports.com/reports/9838-domain-highlighting-on-external-link-warning-is-not-working2026-10-29 https://bugbountyreports.com/reports/3648-domain-pointing-to-vimeo-portfolio-are-prone-to-takeover2026-10-29 https://bugbountyreports.com/reports/3190-domain-spoofing-in-redirect-page-using-rtlo2026-10-29 https://bugbountyreports.com/reports/8732-domain-takeover-gl-canary-freetls-fastly-net2026-10-29 https://bugbountyreports.com/reports/2611-domain-takeover-legalrobot-co-za2026-10-29 https://bugbountyreports.com/reports/7174-domain-takeover-3737signals-com2026-10-29 https://bugbountyreports.com/reports/7368-domain-takeover-at-3hopify-media2026-10-29 https://bugbountyreports.com/reports/3777-domain-takeover-in-obviousengine-com-a-snapchat-acquisitions2026-10-29 https://bugbountyreports.com/reports/7376-domain-takeover-of-reddit-ru-via-dns-hijacking2026-10-29 https://bugbountyreports.com/reports/4503-domain-takeover-on-http-doesfranshaveashell-com-due-to2026-10-29 https://bugbountyreports.com/reports/799-domain-takoever-https-sellocdn-com2026-10-29 https://bugbountyreports.com/reports/5512-domian-takeover-in2026-10-29 https://bugbountyreports.com/reports/5282-dompurify-0-8-9-released2026-10-29 https://bugbountyreports.com/reports/6374-dompurify-bypass2026-10-29 https://bugbountyreports.com/reports/4101-domxss-in-redirect-param2026-10-29 https://bugbountyreports.com/reports/2109-domxss-in-tweetdeck2026-10-29 https://bugbountyreports.com/reports/1335-don-t-leak-server-version-of-grtp-co-in-error-pages2026-10-29 https://bugbountyreports.com/reports/1331-don-t-serve-hidden-files-from-nginx2026-10-29 https://bugbountyreports.com/reports/8583-dos-at-cve-2018-63892026-10-29 https://bugbountyreports.com/reports/8516-dos-at-cve-2018-63892026-10-29 https://bugbountyreports.com/reports/6612-dos-attack-against-the-client-when-entering-a-long-password2026-10-29 https://bugbountyreports.com/reports/1009-dos-attack-in-controller-lookup-code2026-10-29 https://bugbountyreports.com/reports/4961-dos-attack-via-comment-on-issue2026-10-29 https://bugbountyreports.com/reports/6953-dos-due-to-improper-input-validation-can-break-the-admin2026-10-29 https://bugbountyreports.com/reports/5814-dos-for-client-go-jsonpath-func2026-10-29 https://bugbountyreports.com/reports/6570-dos-for-gcsartifact-realall2026-10-29 https://bugbountyreports.com/reports/3839-dos-for-http-2-connections-by-crafted-requests-cve-2018-13332026-10-29 https://bugbountyreports.com/reports/4061-dos-for-remote-nodes-using-slow-loris-attack2026-10-29 https://bugbountyreports.com/reports/3727-dos-in-brave-browser-for-ios2026-10-29 https://bugbountyreports.com/reports/8979-dos-in-form-submission-at-https-nextcloud-com-instant-trial2026-10-29 https://bugbountyreports.com/reports/6106-dos-in-stream-filters2026-10-29 https://bugbountyreports.com/reports/7314-dos-of-line-client-for-android-via-message-containing2026-10-29 https://bugbountyreports.com/reports/9953-dos-of-rskj-server2026-10-29 https://bugbountyreports.com/reports/4736-dos-on-paypal-via-web-cache-poisoning2026-10-29 https://bugbountyreports.com/reports/6241-dos-on-the-direct-messages2026-10-29 https://bugbountyreports.com/reports/4235-dos-on-the-issue-page-by-exploiting-mermaid2026-10-29 https://bugbountyreports.com/reports/1187-dos-report-file-html-inside-in-markdown2026-10-29 https://bugbountyreports.com/reports/3414-dos-through-cache-poisoning-using-invalid-http-parameters2026-10-29 https://bugbountyreports.com/reports/4516-dos-through-peerexplorer2026-10-29 https://bugbountyreports.com/reports/8128-dos-validator-nodes-of-blockchain-to-block-external2026-10-29 https://bugbountyreports.com/reports/8312-dos-via-automatic-response-message2026-10-29 https://bugbountyreports.com/reports/8747-dos-via-cache-poisoning-on-developer-mozilla-org2026-10-29 https://bugbountyreports.com/reports/8279-dos-via-issue-preview2026-10-29 https://bugbountyreports.com/reports/7799-dos-via-large-console-messages2026-10-29 https://bugbountyreports.com/reports/7980-dos-via-lua-read-body-zhbug-httpd-942026-10-29 https://bugbountyreports.com/reports/8361-dos-via-markdown-api-from-unauthenticated-user2026-10-29 https://bugbountyreports.com/reports/8277-dos-via-move-issue2026-10-29 https://bugbountyreports.com/reports/10276-dos-via-mutation-aliasing-in-graphql-account-recovery-phone2026-10-29 https://bugbountyreports.com/reports/8313-dos-via-playbook2026-10-29 https://bugbountyreports.com/reports/10229-dos-via-unbounded-memory-allocation-in-sendwebstream-on2026-10-29 https://bugbountyreports.com/reports/2132-dos-vulnerability-in-mod-auth-digest-cve-2016-21612026-10-29 https://bugbountyreports.com/reports/9939-dos-vulnerability-via-cache-poisoning-on-cdn-shopify-com2026-10-29 https://bugbountyreports.com/reports/9406-dos-with-crafted-range-header2026-10-29 https://bugbountyreports.com/reports/8156-dos-out-of-memory-from-gif-through-upload-api2026-10-29 https://bugbountyreports.com/reports/9636-dos-taking-down-a-1k-users-gitlab-ee-instance-or-multiple2026-10-29 https://bugbountyreports.com/reports/1994-dos-type-confusion-in-mrb-no-method-error2026-10-29 https://bugbountyreports.com/reports/9995-double-clickjacking-attack-on-wakatime-oauth-authorization2026-10-29 https://bugbountyreports.com/reports/8332-double-evaluation-in-bash-prompt-of-dotfiles-allows-a2026-10-29 https://bugbountyreports.com/reports/10302-double-fdrop-on-a-socket-through-sys-netcontrol2026-10-29 https://bugbountyreports.com/reports/8483-double-forward-slash-breaks-server-side-restrictions-allows2026-10-29 https://bugbountyreports.com/reports/4879-double-free-corruption-in-wddx-c-extension2026-10-29 https://bugbountyreports.com/reports/1904-double-free-of-filename-after-codegen-error2026-10-29 https://bugbountyreports.com/reports/4726-double-free-vulnerability-in-flash-player-settings-manager2026-10-29 https://bugbountyreports.com/reports/3330-double-payout-via-paypal2026-10-29 https://bugbountyreports.com/reports/2806-double-stored-cross-site-scripting-in-the-admin-panel2026-10-29 https://bugbountyreports.com/reports/1802-double-free-in-x509-parsing2026-10-29 https://bugbountyreports.com/reports/6199-downgrade-encryption-scheme-and-break-integrity-through2026-10-29 https://bugbountyreports.com/reports/3301-download-attribute-allows-downloading-local-files2026-10-29 https://bugbountyreports.com/reports/8690-download-file-type-warning-on-windows-does-not-appear-if2026-10-29 https://bugbountyreports.com/reports/7846-download-full-backup-mtn-co-rw2026-10-29 https://bugbountyreports.com/reports/6348-download-full-backup-and-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/7164-download-of-file-with-arbitrary-extension-via-injection2026-10-29 https://bugbountyreports.com/reports/8508-download-permissions-can-be-changed-by-resharer2026-10-29 https://bugbountyreports.com/reports/1509-downloading-password-protected-restricted-videos2026-10-29 https://bugbountyreports.com/reports/8999-draft-report-exposure-via-slack-alerting-system-for-programs2026-10-29 https://bugbountyreports.com/reports/5451-dragonblood-design-and-implementation-flaws-in-wpa3-and-eap2026-10-29 https://bugbountyreports.com/reports/7427-drive-by-arbitrary-file-deletion-in-the-gdk-via-letter2026-10-29 https://bugbountyreports.com/reports/1170-drivers-can-change-profile-picture2026-10-29 https://bugbountyreports.com/reports/10575-drop-package-leaves-package-body-grant-in-mysql-procs-priv2026-10-29 https://bugbountyreports.com/reports/5933-dropcontact-s-disclosed-report-is-exposing-private2026-10-29 https://bugbountyreports.com/reports/983-drown-attack2026-10-29 https://bugbountyreports.com/reports/498-drupal-7-pre-auth-sql-injection-and-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/6721-duplicate-entry-of-email-leads-to-500-server-error-which2026-10-29 https://bugbountyreports.com/reports/5443-duplicate-hsts-headers-lead-to-firefox-ignoring-hsts-on2026-10-29 https://bugbountyreports.com/reports/182-duplicate-of-45502026-10-29 https://bugbountyreports.com/reports/3795-dvr-default-username-and-password2026-10-29 https://bugbountyreports.com/reports/9910-dynamic-fee-algorithm-doesn-t-check-for-zero-fee2026-10-29 https://bugbountyreports.com/reports/1193-e-mail-spoof-in-media-gm-com2026-10-29 https://bugbountyreports.com/reports/7252-e-mail-verification-bypass-through-interception2026-10-29 https://bugbountyreports.com/reports/4419-earn-free-dai-interest-inflation-through-instant-cdp-dsr-in2026-10-29 https://bugbountyreports.com/reports/1261-easy-spam-with-use-my-phone-feature2026-10-29 https://bugbountyreports.com/reports/10193-easy-way-to-create-a-new-deck-board-without-permission2026-10-29 https://bugbountyreports.com/reports/1919-eavesdropping-on-private-slack-calls2026-10-29 https://bugbountyreports.com/reports/1147-ebcdic-overread-cve-2016-21762026-10-29 https://bugbountyreports.com/reports/7628-ec2-subdomain-takeover-at-http2026-10-29 https://bugbountyreports.com/reports/7708-ec2-takeover-at-turn-shopify-com2026-10-29 https://bugbountyreports.com/reports/7268-economic-harm-through-twitter-s-cropping-algorithm2026-10-29 https://bugbountyreports.com/reports/4114-edgeswitch-command-injection2026-10-29 https://bugbountyreports.com/reports/1014-edit-auto-response-messages2026-10-29 https://bugbountyreports.com/reports/6871-editing-pentest-summary-report-answers-after-submitting-them2026-10-29 https://bugbountyreports.com/reports/6100-efree-on-uninitialized-heap-data-in-imagescale-leads-to-use2026-10-29 https://bugbountyreports.com/reports/4804-eip-control-using-type-confusion-in-json-encoding2026-10-29 https://bugbountyreports.com/reports/9112-elasticsearch-is-currently-open-without-authentication-on2026-10-29 https://bugbountyreports.com/reports/6087-elasticsearch-leaks-data-through-the-notes-scope2026-10-29 https://bugbountyreports.com/reports/10032-elections-k8s-io-uses-weak-session-secret-key-may-place2026-10-29 https://bugbountyreports.com/reports/8362-electron-cve-2022-35954-delimiter-injection-vulnerability2026-10-29 https://bugbountyreports.com/reports/5994-elmah-axd-is-publicly-accessible-and-leaking-error-log-for2026-10-29 https://bugbountyreports.com/reports/6986-elmah-axd-is-publicly-accessible-leaking-error-log2026-10-29 https://bugbountyreports.com/reports/7909-email-address-disclosure-via-invite-token-validatiion2026-10-29 https://bugbountyreports.com/reports/8208-email-address-exposure-via-gratipay-migration-tool2026-10-29 https://bugbountyreports.com/reports/5238-email-address-of-any-user-can-be-queried-on-report2026-10-29 https://bugbountyreports.com/reports/4108-email-addresses-exposed-in-getpersonbyslug-api2026-10-29 https://bugbountyreports.com/reports/7572-email-change-or-personal-data-change-on-the-account2026-10-29 https://bugbountyreports.com/reports/5373-email-confirmation-bypass-in-myshop-myshopify-com-that2026-10-29 https://bugbountyreports.com/reports/6034-email-confirmation-bypass-in-your-store-myshopify-com-which2026-10-29 https://bugbountyreports.com/reports/571-email-enumeration-poc2026-10-29 https://bugbountyreports.com/reports/4483-email-enumeration-at-signup-page2026-10-29 https://bugbountyreports.com/reports/4082-email-enumeration-of-users2026-10-29 https://bugbountyreports.com/reports/10518-email-enumeration-via-password-protected-share-identity2026-10-29 https://bugbountyreports.com/reports/8639-email-exploitation-with-web-hosting-services2026-10-29 https://bugbountyreports.com/reports/248-email-field-doesn-t-filtered-against-xss2026-10-29 https://bugbountyreports.com/reports/377-email-field-filtering-problem2026-10-29 https://bugbountyreports.com/reports/290-email-flooding-vuln2026-10-29 https://bugbountyreports.com/reports/1034-email-forgery-through-mandrillapp-spf2026-10-29 https://bugbountyreports.com/reports/3365-email-forwarding-invitations-for-drafts-are-not-marked-as2026-10-29 https://bugbountyreports.com/reports/7862-email-html-injection2026-10-29 https://bugbountyreports.com/reports/1645-email-information-leakage-for-certain-addresses2026-10-29 https://bugbountyreports.com/reports/1180-email-leak-in-transcations-in-android-app2026-10-29 https://bugbountyreports.com/reports/2422-email-leakage-in-staging-environment2026-10-29 https://bugbountyreports.com/reports/10036-email-not-verified-when-changing-afterwards-on-apps2026-10-29 https://bugbountyreports.com/reports/3188-email-notification-is-not-being-sent-while-changing2026-10-29 https://bugbountyreports.com/reports/615-email-notification-should-be-get-while-changing-paypal-email2026-10-29 https://bugbountyreports.com/reports/9383-email-otp-2fa-bypass2026-10-29 https://bugbountyreports.com/reports/5015-email-pii-disclosure-due-to-insecure-password-reset-field2026-10-29 https://bugbountyreports.com/reports/577-email-spoofing2026-10-29 https://bugbountyreports.com/reports/1873-email-spoofing2026-10-29 https://bugbountyreports.com/reports/7537-email-spoofing2026-10-29 https://bugbountyreports.com/reports/2461-email-spoofing-at-weblate-org2026-10-29 https://bugbountyreports.com/reports/1314-email-spoofing-in-support-veris-in2026-10-29 https://bugbountyreports.com/reports/2540-email-spoofing-via-api-v1-users-reset-password2026-10-29 https://bugbountyreports.com/reports/9473-email-takeover-leads-to-permanent-account-deletion2026-10-29 https://bugbountyreports.com/reports/7877-email-templates-xss-by-filterxss-bypass2026-10-29 https://bugbountyreports.com/reports/8610-email-user-account-in-indexacao-waybackurl2026-10-29 https://bugbountyreports.com/reports/5337-email-verification-bypasa2026-10-29 https://bugbountyreports.com/reports/6623-email-verification-bypass2026-10-29 https://bugbountyreports.com/reports/8372-email-verification-bypass-allows-users-to-add-verify-any2026-10-29 https://bugbountyreports.com/reports/7871-email-verification-bypass-by-bruteforcing-when-setting-up2026-10-29 https://bugbountyreports.com/reports/6335-email-verification-bypass-on-signup2026-10-29 https://bugbountyreports.com/reports/10006-email-verification-bypass-via-request-to-endpoint-accounts2026-10-29 https://bugbountyreports.com/reports/7194-email-verification-bypassed-during-sing-up2026-10-29 https://bugbountyreports.com/reports/852-email-verification-link-can-be-used-as-password-reset-link2026-10-29 https://bugbountyreports.com/reports/2266-email-verification-over-an-unencrypted-channel2026-10-29 https://bugbountyreports.com/reports/4156-emails-of-invited-collaborators-are-disclosed-in-full-in2026-10-29 https://bugbountyreports.com/reports/4007-embedded-submission-form-uuids-can-be-enumerated-through2026-10-29 https://bugbountyreports.com/reports/10386-embedded-nul-hostnames-can-lead-to-silent-authority2026-10-29 https://bugbountyreports.com/reports/9237-employee-only-area-bypass2026-10-29 https://bugbountyreports.com/reports/4249-employee-s-github-token-found-in-travis-ci-build-logs2026-10-29 https://bugbountyreports.com/reports/1252-employees-with-any-permissions-can-create-app-with-full2026-10-29 https://bugbountyreports.com/reports/8081-enable-2fa-verification-without-verifying-email2026-10-29 https://bugbountyreports.com/reports/4741-enable-2fa-without-verifying-the-email2026-10-29 https://bugbountyreports.com/reports/9072-enabling-birthday-contact-to-any-user2026-10-29 https://bugbountyreports.com/reports/6975-end-to-end-encryption-folder-locking-is-not-properly2026-10-29 https://bugbountyreports.com/reports/7313-end-to-end-encryption-public-key-is-not-properly-verified2026-10-29 https://bugbountyreports.com/reports/8778-end-to-end-encrypted-file-drops-can-be-made-inaccessible2026-10-29 https://bugbountyreports.com/reports/9476-endpoint-redirects-to-admin-page-and-provides-admin-role2026-10-29 https://bugbountyreports.com/reports/7495-endpoint-without-access-control-leads-to-order-informations2026-10-29 https://bugbountyreports.com/reports/2665-enhancement-email-confirmation-for-2fa-recovery2026-10-29 https://bugbountyreports.com/reports/8046-enrolling-to-a-ca-that-returns-an-empty-response-crashes2026-10-29 https://bugbountyreports.com/reports/8912-entering-passwords-on-the-share-login-page-can-lead-to-a2026-10-29 https://bugbountyreports.com/reports/8725-entire-database-of-emails-exposed-through-urn-injection2026-10-29 https://bugbountyreports.com/reports/492-enum-phone-numbers-thru-en-sims-topup-add2026-10-29 https://bugbountyreports.com/reports/7098-enumerate-all-the-class-codes-via-google-dorking2026-10-29 https://bugbountyreports.com/reports/7814-enumerate-class-codes-via-yahoo-dork-can-access-any-course2026-10-29 https://bugbountyreports.com/reports/1276-enumeration-of-subscribed-users-and-unauthenticated-email2026-10-29 https://bugbountyreports.com/reports/5760-enumeration-of-username-on-password-reset-page2026-10-29 https://bugbountyreports.com/reports/549-enumeration-guess-of-private-invited-programs2026-10-29 https://bugbountyreports.com/reports/4477-environment-variable-leakage-in-error-reporting2026-10-29 https://bugbountyreports.com/reports/3612-epee-will-accept-an-arbitrary-amount-of-leading-line-breaks2026-10-29 https://bugbountyreports.com/reports/4929-ericsson-erlang-otp-core-allocation-subsystem-integer2026-10-29 https://bugbountyreports.com/reports/3246-error2026-10-29 https://bugbountyreports.com/reports/8759-error-in-booking-an-appointment-reveals-the-full-path-of2026-10-29 https://bugbountyreports.com/reports/7867-error-in-deleting-deck-cards-attachment-reveals-the-full2026-10-29 https://bugbountyreports.com/reports/2722-error-message-when-changing-username2026-10-29 https://bugbountyreports.com/reports/3549-error-page-content-spoofing-or-text-injection2026-10-29 https://bugbountyreports.com/reports/3994-error-page-content-spoofing-or-text-injection2026-10-29 https://bugbountyreports.com/reports/5586-error-page-content-spoofing-or-text-injection2026-10-29 https://bugbountyreports.com/reports/7082-error-page-content-spoofing-or-text-injection2026-10-29 https://bugbountyreports.com/reports/8810-error-page-content-spoofing-or-text-injection2026-10-29 https://bugbountyreports.com/reports/4402-error-page-content-spoofing-or-text-injection-https-vpn2026-10-29 https://bugbountyreports.com/reports/1033-error-page-text-injection-1063502026-10-29 https://bugbountyreports.com/reports/491-error-stack-trace2026-10-29 https://bugbountyreports.com/reports/2088-error-stack-trace2026-10-29 https://bugbountyreports.com/reports/9154-error-when-editing-a-calendar-appointment-returns2026-10-29 https://bugbountyreports.com/reports/10052-error-based-time-based-sql-injection-in-keyword-parameter2026-10-29 https://bugbountyreports.com/reports/10146-error-based-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/10419-error-based-sql-injection-in-com-login-password-reset2026-10-29 https://bugbountyreports.com/reports/9721-es-posible-poder-navegar-a-cualquier-pagina-en-point-smart2026-10-29 https://bugbountyreports.com/reports/2777-escape-sequence-injection-in-summary-field2026-10-29 https://bugbountyreports.com/reports/8803-escape-sequence-injection-vulnerability-in-rack2026-10-29 https://bugbountyreports.com/reports/2837-escape-sequence-injection-vulnerability-in-webrick-basicauth2026-10-29 https://bugbountyreports.com/reports/882-escaping-the-iframe-via-exceptions2026-10-29 https://bugbountyreports.com/reports/1453-estimation-of-a-lower-bound-on-number-of-uber-drivers-via2026-10-29 https://bugbountyreports.com/reports/3329-eth-contract-handling-errors2026-10-29 https://bugbountyreports.com/reports/3293-ethereum-account-balance-manipulation2026-10-29 https://bugbountyreports.com/reports/3401-evaluating-ruby-code-by-injecting-rescue-job-on-the-system2026-10-29 https://bugbountyreports.com/reports/9452-event-create-can-create-attachments-that-link-to-other2026-10-29 https://bugbountyreports.com/reports/5276-event-privacy-level-does-not-work-in-thunderbird2026-10-29 https://bugbountyreports.com/reports/9382-events-information-leaked-with-shared-calendars-on2026-10-29 https://bugbountyreports.com/reports/1871-every-user-can-delete-public-deploy-keys2026-10-29 https://bugbountyreports.com/reports/1145-evp-encodeupdate-overflow-cve-2016-21052026-10-29 https://bugbountyreports.com/reports/1146-evp-encryptupdate-overflow-cve-2016-21062026-10-29 https://bugbountyreports.com/reports/2133-example-hackerone-security-forward-domain-is-not-registered2026-10-29 https://bugbountyreports.com/reports/4628-examples-directory-is-public-on-https-mil-leading-to2026-10-29 https://bugbountyreports.com/reports/9999-exceed-the-maximum-number-of-subscribers-using-race2026-10-29 https://bugbountyreports.com/reports/10040-exceeding-the-limit-of-workspaces-via-race-condition2026-10-29 https://bugbountyreports.com/reports/10412-exceeding-the-maximum-number-of-spaces-allowed-by2026-10-29 https://bugbountyreports.com/reports/1752-exception-cause-sigabrt2026-10-29 https://bugbountyreports.com/reports/8325-exception-logging-in-sharepoint-app-reveals-clear-text2026-10-29 https://bugbountyreports.com/reports/2349-excessive-allocation-of-memory-in-dtls1-preprocess-fragment2026-10-29 https://bugbountyreports.com/reports/2350-excessive-allocation-of-memory-in-tls-get-message-header2026-10-29 https://bugbountyreports.com/reports/4333-excessive-resource-usage2026-10-29 https://bugbountyreports.com/reports/962-executing-scripts-on-slack-files-com-using-svg2026-10-29 https://bugbountyreports.com/reports/4081-exfiltrate-and-mutate-repository-and-project-data-through2026-10-29 https://bugbountyreports.com/reports/7095-exfiltrating-a-victim-s-exact-location-to-within-5m2026-10-29 https://bugbountyreports.com/reports/4480-exif-geolocation-data-not-stripped-from-uploaded-images2026-10-29 https://bugbountyreports.com/reports/6008-exif-metadata-not-stripped-from-jpg-group-logos2026-10-29 https://bugbountyreports.com/reports/4928-exim-handles-bdat-data-incorrectly-and-leads-to-crash-hang2026-10-29 https://bugbountyreports.com/reports/4542-exim-off-by-one-rce-vulnerability2026-10-29 https://bugbountyreports.com/reports/4924-exim-use-after-free-vulnerability-while-reading-mail-header2026-10-29 https://bugbountyreports.com/reports/8982-existance-of-calendars-and-addressbooks-can-be-checked-by2026-10-29 https://bugbountyreports.com/reports/10078-existence-of-completed-pods-allows-for-bypass-of-kubernetes2026-10-29 https://bugbountyreports.com/reports/2215-existence-of-folder-path-by-guessing-the-path-through2026-10-29 https://bugbountyreports.com/reports/2463-existing-sessions-valid-after-removing-third-party-auth2026-10-29 https://bugbountyreports.com/reports/660-expire-user-sessions-in-admin-site-does-not-expire-user2026-10-29 https://bugbountyreports.com/reports/4318-expired-reshare-links-allow-access-to-all-files-in-share2026-10-29 https://bugbountyreports.com/reports/1454-expired-ssl-certificate2026-10-29 https://bugbountyreports.com/reports/2319-expired-ssl-certificate2026-10-29 https://bugbountyreports.com/reports/7463-expired-ssl-certificate-allows-credentials-steal2026-10-29 https://bugbountyreports.com/reports/943-explicit-dynamic-render-path-dir-trav-rce2026-10-29 https://bugbountyreports.com/reports/9482-exploitable-live-argument-in-onclick-function-leads-to-data2026-10-29 https://bugbountyreports.com/reports/3791-exploitable-vulnerability-in-sdex2026-10-29 https://bugbountyreports.com/reports/3508-exploiting-jsonp-callback-on-username-charts-json-endpoint2026-10-29 https://bugbountyreports.com/reports/3798-exploiting-misconfigured-cors-to-steal-user-information2026-10-29 https://bugbountyreports.com/reports/4949-exploiting-network-and-timing-side-channels-to-break-monero2026-10-29 https://bugbountyreports.com/reports/1062-exploiting-unauthenticated-encryption-mode2026-10-29 https://bugbountyreports.com/reports/7686-exposed-bash-history-at-http-21days2017-mtncameroon-net2026-10-29 https://bugbountyreports.com/reports/4992-exposed-administrative-interface-coldfusion-112026-10-29 https://bugbountyreports.com/reports/1952-exposed-access-control-data-backup-files-on-dod-website2026-10-29 https://bugbountyreports.com/reports/2913-exposed-api-key-allows-to-control-nightly-builds-of2026-10-29 https://bugbountyreports.com/reports/9179-exposed-cdn-access-token-allows-modification-of-all-newly2026-10-29 https://bugbountyreports.com/reports/8345-exposed-cortex-api-at-https-cortex-ingest-shopifycloud-com2026-10-29 https://bugbountyreports.com/reports/5846-exposed-docker-registry-at-https2026-10-29 https://bugbountyreports.com/reports/10122-exposed-extremely-sensitive-information-in-public-zip-file2026-10-29 https://bugbountyreports.com/reports/10160-exposed-fouo-documents-including-passport-information2026-10-29 https://bugbountyreports.com/reports/4996-exposed-ftp-credentials-on2026-10-29 https://bugbountyreports.com/reports/8100-exposed-gitlab-repo-at-https-adammanco-mtn-com-api-v42026-10-29 https://bugbountyreports.com/reports/7745-exposed-golang-pprof-debugger-at-https-cn-geo1-uber-com2026-10-29 https://bugbountyreports.com/reports/7129-exposed-kubernetes-api-rce-exposed-creds2026-10-29 https://bugbountyreports.com/reports/7493-exposed-kubernetes-dashboard2026-10-29 https://bugbountyreports.com/reports/8368-exposed-log-file-lead-to-full-internal-path-disclosure-at2026-10-29 https://bugbountyreports.com/reports/9722-exposed-logs-and-bearer-tokens-on-test-endpoint2026-10-29 https://bugbountyreports.com/reports/7386-exposed-php-dependencies-at-8x8-com2026-10-29 https://bugbountyreports.com/reports/7072-exposed-prometheus-instance-at-prometheus-qa-r3-com2026-10-29 https://bugbountyreports.com/reports/9817-exposed-proxy-allows-to-access-internal-reddit-domains2026-10-29 https://bugbountyreports.com/reports/10148-exposed-sensitive-pdf-misconfigured-access-controls-leading2026-10-29 https://bugbountyreports.com/reports/6519-exposed-slinky-instance-admin-panel2026-10-29 https://bugbountyreports.com/reports/9957-exposed-trip-no-in-websocket-responses-leading-to-excessive2026-10-29 https://bugbountyreports.com/reports/1917-exposed-unencrypted-telnet-endpoint2026-10-29 https://bugbountyreports.com/reports/7973-exposed-valid-aws-mysql-sendgrid-and-other-secrets2026-10-29 https://bugbountyreports.com/reports/10134-exposed-wp-config-php-file2026-10-29 https://bugbountyreports.com/reports/10138-exposed-wp-config-php-file-in-national-guard-website2026-10-29 https://bugbountyreports.com/reports/1617-exposed-outdated-nginx-server-v1-4-6-potentially-vulnerable2026-10-29 https://bugbountyreports.com/reports/6813-exposed-in-apk-file-devbuilds-uber-com2026-10-29 https://bugbountyreports.com/reports/4722-exposing-debug-log-file-leads-to-server-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/9830-exposing-debug-log-file-leads-to-server-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/10035-exposing-debug-log-file-leads-to-server-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/9019-exposing-django-debug-panel-and-sensitive-infrastructure2026-10-29 https://bugbountyreports.com/reports/3859-exposing-voting-results-on-the-slowvote-application-without2026-10-29 https://bugbountyreports.com/reports/7962-exposure-of-a-valid-gitlab-workhorse-jwt-leading-to-various2026-10-29 https://bugbountyreports.com/reports/9148-exposure-of-account-recovery-hint-by-querying-by-user-email2026-10-29 https://bugbountyreports.com/reports/8390-exposure-of-admin-username-password2026-10-29 https://bugbountyreports.com/reports/9981-exposure-of-personal-ip-address-via-email2026-10-29 https://bugbountyreports.com/reports/9770-exposure-of-private-personal-information-to-an-unauthorized2026-10-29 https://bugbountyreports.com/reports/10130-exposure-of-sensitive-debug-file-containing-database-dump2026-10-29 https://bugbountyreports.com/reports/9257-exposure-of-service-tokens-to-webpack-bundle2026-10-29 https://bugbountyreports.com/reports/3982-exposure-of-tinymce-js-source-code-with-plugin-version2026-10-29 https://bugbountyreports.com/reports/898-extended-policy-checks-are-buggy2026-10-29 https://bugbountyreports.com/reports/4704-external-entity-expansion-in-apache-poi2026-10-29 https://bugbountyreports.com/reports/1068-external-links-should-use-rel-noopener-or-use-the-redirect2026-10-29 https://bugbountyreports.com/reports/2857-external-links-to-be-in-http2026-10-29 https://bugbountyreports.com/reports/1053-external-programs-revealing-info2026-10-29 https://bugbountyreports.com/reports/8792-external-service-interaction-dns-and-http-in-www2026-10-29 https://bugbountyreports.com/reports/9626-external-service-interaction-http2026-10-29 https://bugbountyreports.com/reports/6787-external-service-interaction-http-dns-on-https-www-parameter2026-10-29 https://bugbountyreports.com/reports/6121-external-service-interaction-https-mil2026-10-29 https://bugbountyreports.com/reports/6617-external-ssrf-and-local-file-read-via-video-upload-due-to2026-10-29 https://bugbountyreports.com/reports/9699-external-storage-global-credentials-returned-to-the-client2026-10-29 https://bugbountyreports.com/reports/6613-external-storage-webdav-new-user-has-access-to-storage-from2026-10-29 https://bugbountyreports.com/reports/6676-external-storage-app-saves-password-for-all-users-in-the2026-10-29 https://bugbountyreports.com/reports/579-external-url-page-bypass2026-10-29 https://bugbountyreports.com/reports/3300-extra-program-metrics-disclosed-via-program-name-json2026-10-29 https://bugbountyreports.com/reports/8536-extraction-of-pages-build-scripts-config-values-tokens-etc2026-10-29 https://bugbountyreports.com/reports/743-extremely-high-course-rating-values-could-be-set-in-order2026-10-29 https://bugbountyreports.com/reports/1306-extremely-urgent-missing-control-of-bitcoin-amount-when2026-10-29 https://bugbountyreports.com/reports/4381-extremly-simple-way-to-bypass-nextcloud-client-pin2026-10-29 https://bugbountyreports.com/reports/7039-f5-big-ip-cookie-potentially-reveal-bigip-pool-name-backend2026-10-29 https://bugbountyreports.com/reports/7705-f5-big-ip-tmui-rce-cve-2020-5902-packet8-net2026-10-29 https://bugbountyreports.com/reports/447-fabric-io-an-app-admin-can-delete-team-members-from-other2026-10-29 https://bugbountyreports.com/reports/446-fabric-io-app-member-can-make-himself-an-admin2026-10-29 https://bugbountyreports.com/reports/797-fabric-io-ex-admin-of-an-organization-can-delete-team2026-10-29 https://bugbountyreports.com/reports/8700-facebook-app-api-credentials-leaked-in-the-apk2026-10-29 https://bugbountyreports.com/reports/2968-facebook-button-url-should-be-https2026-10-29 https://bugbountyreports.com/reports/4056-facebook-oauth-code-theft-through-referer-leakage-on2026-10-29 https://bugbountyreports.com/reports/2457-facebook-share-url-should-be-https2026-10-29 https://bugbountyreports.com/reports/400-facebook-takeover-using-slack-using-302-from-files-slack2026-10-29 https://bugbountyreports.com/reports/9932-facebook-username-takeover-via-broken-link-in-footer2026-10-29 https://bugbountyreports.com/reports/10248-fail-open-in-set-tlsext-servername-callback-on-pyopenssl2026-10-29 https://bugbountyreports.com/reports/307-failed-certificate-validation-on-custom-server-register2026-10-29 https://bugbountyreports.com/reports/2856-failed-outlink-on-terms-of-service2026-10-29 https://bugbountyreports.com/reports/7243-failed-to-validate-session-after-password-change2026-10-29 https://bugbountyreports.com/reports/5040-failure-to-invalid-session-after-password-change2026-10-29 https://bugbountyreports.com/reports/6716-failure-to-invalid-session-after-password-change2026-10-29 https://bugbountyreports.com/reports/2965-fake-mailing-reports-using-mail-service-on-url-mail-txn2026-10-29 https://bugbountyreports.com/reports/553-fake-url-additional-vectors-for-homograph-attack2026-10-29 https://bugbountyreports.com/reports/3183-fastify-denial-of-service-vulnerability-with-large-json2026-10-29 https://bugbountyreports.com/reports/5839-fastify-uses-allerrors-true-ajv-configuration-by-default2026-10-29 https://bugbountyreports.com/reports/7958-federated-editing-allows-iframing-possibly-malicious-remotes2026-10-29 https://bugbountyreports.com/reports/8092-federated-share-accepting-declining-is-not-logged-in-audit2026-10-29 https://bugbountyreports.com/reports/8794-federated-share-permissions-can-be-increased-by-recipient2026-10-29 https://bugbountyreports.com/reports/10667-federationcontroller-remotewopitoken-returns-full-wopi2026-10-29 https://bugbountyreports.com/reports/8524-fee-discounts-can-be-redeemed-many-times-resulting-in2026-10-29 https://bugbountyreports.com/reports/1530-fetch-private-list-metadata-and-any-user-s-personal-name2026-10-29 https://bugbountyreports.com/reports/9332-fetch-with-integrity-option-is-too-lax-when-algorithm-is2026-10-29 https://bugbountyreports.com/reports/1798-fetching-binaries-for-software-installation-over-http2026-10-29 https://bugbountyreports.com/reports/1288-fetching-external-resources-through-svg-images2026-10-29 https://bugbountyreports.com/reports/7308-fetching-the-update-json-scheme-from-concrete5-over-http2026-10-29 https://bugbountyreports.com/reports/3961-field-day-with-protocol-handlers2026-10-29 https://bugbountyreports.com/reports/3525-file-access-control-rules-not-enforced-on-image-files2026-10-29 https://bugbountyreports.com/reports/2161-file-access-controls-incorrectly-enforced-for-files-shared2026-10-29 https://bugbountyreports.com/reports/6979-file-drop-public-link-can-also-be-converted-to-federated2026-10-29 https://bugbountyreports.com/reports/9209-file-listing-through-scripts-folder2026-10-29 https://bugbountyreports.com/reports/977-file-name-and-folder-enumeration2026-10-29 https://bugbountyreports.com/reports/381-file-name-enumeration2026-10-29 https://bugbountyreports.com/reports/383-file-name-folder-enumeration2026-10-29 https://bugbountyreports.com/reports/8656-file-read-vulnerability-allows-attackers-to-compromise-s32026-10-29 https://bugbountyreports.com/reports/9437-file-sizes-may-be-manipulated-into-negative-numbers-when2026-10-29 https://bugbountyreports.com/reports/1333-file-upload-over-private-im-channel2026-10-29 https://bugbountyreports.com/reports/5490-file-upload-restriction-bypass2026-10-29 https://bugbountyreports.com/reports/2047-file-upload-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/818-file-upload-xss-java-applet-on-http-slackatwork-com2026-10-29 https://bugbountyreports.com/reports/1455-file-upload-xss-in-image-uploading-of-app-in-mopub2026-10-29 https://bugbountyreports.com/reports/5784-file-writing-by-directory-traversal-at-actionpack-page2026-10-29 https://bugbountyreports.com/reports/5163-file-drop-content-is-visible-through-the-gallery-app2026-10-29 https://bugbountyreports.com/reports/1411-filename-and-directory-enumeration2026-10-29 https://bugbountyreports.com/reports/1922-filename-enumeration-dos2026-10-29 https://bugbountyreports.com/reports/10661-files-confidential-tagging-can-be-bypassed-with-in-filename2026-10-29 https://bugbountyreports.com/reports/10309-files-drop-share-links-for-end-to-end-encrypted-folders2026-10-29 https://bugbountyreports.com/reports/1805-files-drop-webdav-endpoint-is-leaking-existence-of-resources2026-10-29 https://bugbountyreports.com/reports/678-files-extracted-from-archive-may-be-placed-outside-of2026-10-29 https://bugbountyreports.com/reports/422-files-likes-of-readme-md-is-public2026-10-29 https://bugbountyreports.com/reports/10552-files-lock-a-write-share-collaborator-can-place-a-type2026-10-29 https://bugbountyreports.com/reports/8833-filesystem-experimental-permissions-policy-does-not-handle2026-10-29 https://bugbountyreports.com/reports/5231-filesystem-writes-via-yarn-install-via-symlinks-and-tar2026-10-29 https://bugbountyreports.com/reports/6299-filezilla-3-46-3-scale-factor-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/126-find-private-notes-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/8367-firebase-credentials-leak2026-10-29 https://bugbountyreports.com/reports/8104-firebase-credentials-leaks2026-10-29 https://bugbountyreports.com/reports/8103-firebase-credentials-leaks-https-mpulse-mtnonline-com2026-10-29 https://bugbountyreports.com/reports/8335-firebase-database-takeover-in-https-pulseradio-mtn-co-ug2026-10-29 https://bugbountyreports.com/reports/7022-firebase-database-takeover-in-zego-sense-android-app2026-10-29 https://bugbountyreports.com/reports/5220-firebase-firestore-insecure-database2026-10-29 https://bugbountyreports.com/reports/10350-firecracker-out-of-bounds-read-write-local-privilege2026-10-29 https://bugbountyreports.com/reports/2592-firefly-s-verify-access-token-function-does-a-byte-by-byte2026-10-29 https://bugbountyreports.com/reports/5492-firewall-rules-for-can-be-bypassed-to-leak-site-authors2026-10-29 https://bugbountyreports.com/reports/5582-firmware-download-install-vulnerable-to-csrf2026-10-29 https://bugbountyreports.com/reports/808-first-last-name-disclosure-of-any-shopify-store-admin2026-10-29 https://bugbountyreports.com/reports/6474-first-ctf-ever2026-10-29 https://bugbountyreports.com/reports/2799-first-name-and-last-name-restrictions-bypass2026-10-29 https://bugbountyreports.com/reports/8042-fix-security-mitigate-path-traversal-bug2026-10-29 https://bugbountyreports.com/reports/1444-fix-bug-in-username-restriction2026-10-29 https://bugbountyreports.com/reports/5229-fix-for-cve-2018-12122-can-be-bypassed-via-keep-alive2026-10-29 https://bugbountyreports.com/reports/7438-fix-for-cve-2021-22151-kibana-path-traversal-issue-can-be2026-10-29 https://bugbountyreports.com/reports/3129-fix-for-self-dos-in-security-txt-chrome-extension2026-10-29 https://bugbountyreports.com/reports/3822-flag-writeup2026-10-29 https://bugbountyreports.com/reports/3819-flag-cha1n1ng-bugs-f0r-fun-4nd-pr0f1t-or-rep0rt-an-lf12026-10-29 https://bugbountyreports.com/reports/6487-flags-for-hackyholidays-ctf2026-10-29 https://bugbountyreports.com/reports/4725-flash-local-with-filesystem-bypass-in-navigatetourl2026-10-29 https://bugbountyreports.com/reports/6819-flash-based-reflected-xss-on-www-grouplogic-com-jwplayer2026-10-29 https://bugbountyreports.com/reports/49-flash-content-type-sniff-vulnerability-in-api-slack-com2026-10-29 https://bugbountyreports.com/reports/265-flash-content-type-sniffing-vulnerability2026-10-29 https://bugbountyreports.com/reports/546-flash-cross-domain-policy-bypass-by-using-file-upload-and2026-10-29 https://bugbountyreports.com/reports/22-flash-double-free-vulnerability-leads-to-code-execution2026-10-29 https://bugbountyreports.com/reports/2764-flash-injection-in-http-www-rockstargames-com-iv-imgplayer2026-10-29 https://bugbountyreports.com/reports/5725-flash-injection-vulnerability-on-iv-imgplayer-imageembed-swf2026-10-29 https://bugbountyreports.com/reports/347-flash-local-sandbox-bypass2026-10-29 https://bugbountyreports.com/reports/74-flash-local-with-fileaccess-sandbox-bypass2026-10-29 https://bugbountyreports.com/reports/4727-flash-player-information-disclosure-etc-cve-2015-3044-psirt2026-10-29 https://bugbountyreports.com/reports/209-flash-sandbox-bypass2026-10-29 https://bugbountyreports.com/reports/7-flash-type-confusion-vulnerability-leads-to-code-execution2026-10-29 https://bugbountyreports.com/reports/2412-flash-xss-on-buick-rotatingmasthead-jellybeanslider-swf2026-10-29 https://bugbountyreports.com/reports/2437-flash-xss-on-global-nav2026-10-29 https://bugbountyreports.com/reports/2413-flash-xss-on-homepage-fliptilescroller2026-10-29 https://bugbountyreports.com/reports/267-flash-xss-on-swfupload-swf-showing-at-app-mavenlink-com2026-10-29 https://bugbountyreports.com/reports/3911-flatmap-stream-malicious-package-distributed-via-the2026-10-29 https://bugbountyreports.com/reports/5335-flaw-in-change-email-https-youtu-be-mmvlchigs2a2026-10-29 https://bugbountyreports.com/reports/424-flaw-in-login-with-twitter-to-steal-oauth-tokens2026-10-29 https://bugbountyreports.com/reports/103-flawed-account-creation-process-allows-registration-of2026-10-29 https://bugbountyreports.com/reports/590-flawed-account-creation-process-allows-registration-of2026-10-29 https://bugbountyreports.com/reports/7509-flickr-account-takeover-using-aws-cognito-api2026-10-29 https://bugbountyreports.com/reports/9041-flickr-api-key-leaked-in-github-commit2026-10-29 https://bugbountyreports.com/reports/3752-flood-of-comment-no-rate-limit-on-commnets-by-using2026-10-29 https://bugbountyreports.com/reports/7080-fogbugz-import-attachment-full-ssrf-requiring-vulnerability2026-10-29 https://bugbountyreports.com/reports/7747-folder-architecture-and-filesizes-of-private-file-drop2026-10-29 https://bugbountyreports.com/reports/1637-follow-button-xss2026-10-29 https://bugbountyreports.com/reports/5125-follow-by-email-allows-for-following-by-unverified-emails2026-10-29 https://bugbountyreports.com/reports/850-following-a-user-actually-follows-another-user2026-10-29 https://bugbountyreports.com/reports/851-following-a-user-after-favoriting-actually-follows-another2026-10-29 https://bugbountyreports.com/reports/3160-following-links-are-vulnerable-to-clickjacking2026-10-29 https://bugbountyreports.com/reports/5496-followup-sql-injection-https-msi-portal2026-10-29 https://bugbountyreports.com/reports/6255-forbidden-access-to-https-apps-staging-pingone-com-but2026-10-29 https://bugbountyreports.com/reports/597-force-500-internal-server-error-on-any-shop-for-one-user2026-10-29 https://bugbountyreports.com/reports/7787-force-user-to-accept-attacker-s-invite-restrict-user-to2026-10-29 https://bugbountyreports.com/reports/9726-forced-oauth-authorization-using-button-id-in-hash-and2026-10-29 https://bugbountyreports.com/reports/324-forgot-password-issue2026-10-29 https://bugbountyreports.com/reports/2545-forgot-password-link-doesn-t-expire-after-used-only-after2026-10-29 https://bugbountyreports.com/reports/2094-forgot-to-add-the-patch2026-10-29 https://bugbountyreports.com/reports/2054-formassembly-com-is-vulnerable-to-padding-oracle-attacks2026-10-29 https://bugbountyreports.com/reports/4643-format-string-implementation-vulnerability-resulting-in2026-10-29 https://bugbountyreports.com/reports/3536-format-string-vulnerability-in-the-edgeswitch-restricted-cli2026-10-29 https://bugbountyreports.com/reports/897-format-string-vulnerability-in-zend-throw-or-error2026-10-29 https://bugbountyreports.com/reports/2958-formula-injection-via-csv-exports-in-wordcamp-talks-plugin2026-10-29 https://bugbountyreports.com/reports/6689-formula-injection-vulnerability-in-csv-export-feature2026-10-29 https://bugbountyreports.com/reports/3599-forum-getmonero-org-shell-upload2026-10-29 https://bugbountyreports.com/reports/2018-found-a-vulnerability-in-your-website2026-10-29 https://bugbountyreports.com/reports/1039-found-clickjacking-vulnerability2026-10-29 https://bugbountyreports.com/reports/3797-found-csrf-vulnerability-in-https-support-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/8226-found-origin-ip-s-lead-to-access2026-10-29 https://bugbountyreports.com/reports/4626-found-origin-ip-s-lead-to-access-to-grafana-instance-pghero2026-10-29 https://bugbountyreports.com/reports/7102-fragmentation-and-aggregation-flaws-in-wi-fi2026-10-29 https://bugbountyreports.com/reports/3218-frameset-frame-html-tag-is-allowed-in-html-editor-can-lead2026-10-29 https://bugbountyreports.com/reports/2628-frans-visits-vegas-announcement2026-10-29 https://bugbountyreports.com/reports/485-freak-factoring-rsa-export-keys-to-impersonate-tls-servers2026-10-29 https://bugbountyreports.com/reports/405-free-called-on-unitialized-pointer-in-exif-c2026-10-29 https://bugbountyreports.com/reports/475-frictionless-transferring-of-wallet-ownership2026-10-29 https://bugbountyreports.com/reports/7549-friend-request-flow-exposes-user-data2026-10-29 https://bugbountyreports.com/reports/3699-from-full-access-account-to-account-owner2026-10-29 https://bugbountyreports.com/reports/8831-fs-module-s-file-watching-is-not-restricted-by-allow-fs-read2026-10-29 https://bugbountyreports.com/reports/10208-fs-permissions-bypass2026-10-29 https://bugbountyreports.com/reports/9431-fs-fchown-fchmod-bypasses-permission-model2026-10-29 https://bugbountyreports.com/reports/9640-fs-fchown-fchmod-bypasses-permission-model2026-10-29 https://bugbountyreports.com/reports/10191-fs-futimes-bypasses-read-only-permission-model2026-10-29 https://bugbountyreports.com/reports/9433-fs-lstat-bypasses-permission-model2026-10-29 https://bugbountyreports.com/reports/8883-fs-mkdtemp-and-fs-mkdtempsync-are-missing-getvalidatedpath2026-10-29 https://bugbountyreports.com/reports/8832-fs-openasblob-bypasses-permission-system2026-10-29 https://bugbountyreports.com/reports/8945-fs-statfs-bypasses-permission-model2026-10-29 https://bugbountyreports.com/reports/412-ftp-upload-of-video-allows-naming-that-is-not-sanitized-as2026-10-29 https://bugbountyreports.com/reports/2078-full-access-at-an-internal-service-of-shopify2026-10-29 https://bugbountyreports.com/reports/927-full-access-to-amazon-s3-bucket-containing-aws-cloudtrail2026-10-29 https://bugbountyreports.com/reports/1683-full-access-to-any-list2026-10-29 https://bugbountyreports.com/reports/8805-full-access-to-indrive-jira-panel-via-exposed-api-token2026-10-29 https://bugbountyreports.com/reports/4183-full-access-to-internal-gitlab-instances-at-redash-gitlab2026-10-29 https://bugbountyreports.com/reports/9278-full-access-to-sonarqube-and-docker2026-10-29 https://bugbountyreports.com/reports/5516-full-account-take-over-of-members-via-idor2026-10-29 https://bugbountyreports.com/reports/5326-full-account-takeover2026-10-29 https://bugbountyreports.com/reports/9536-full-account-takeover2026-10-29 https://bugbountyreports.com/reports/7775-full-account-takeover-in-due-lack-of-rate-limiting-in2026-10-29 https://bugbountyreports.com/reports/6903-full-account-takeover-of-any-user-through-reset-password2026-10-29 https://bugbountyreports.com/reports/9071-full-account-takeover-of-any-user-through-reset-password2026-10-29 https://bugbountyreports.com/reports/6547-full-account-takeover-on-https-mil2026-10-29 https://bugbountyreports.com/reports/69-full-account-takeover-using-csrf-and-password-reset2026-10-29 https://bugbountyreports.com/reports/10579-full-admin-takeover-of-r3-limited-s-jfrog-artifactory-2922026-10-29 https://bugbountyreports.com/reports/2674-full-api-access-and-run-all-functions-via-starbucks-app2026-10-29 https://bugbountyreports.com/reports/2749-full-name-overwrite-on-third-party-login2026-10-29 https://bugbountyreports.com/reports/8619-full-passcode-bypass-on-nextcloud-app-ios2026-10-29 https://bugbountyreports.com/reports/1408-full-path-some-back-end-code-disclosure2026-10-29 https://bugbountyreports.com/reports/5424-full-path-and-internal-information-disclosure-sqlnet-log2026-10-29 https://bugbountyreports.com/reports/76-full-path-disclosur2026-10-29 https://bugbountyreports.com/reports/85-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/98-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/139-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/890-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/891-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/994-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/97-full-path-disclosure-22026-10-29 https://bugbountyreports.com/reports/140-full-path-disclosure-fpd-in-www-localize-im2026-10-29 https://bugbountyreports.com/reports/225-full-path-disclosure-fpd-in-www-localize-im2026-10-29 https://bugbountyreports.com/reports/95-full-path-disclosure-fpd-in-www-localize-io2026-10-29 https://bugbountyreports.com/reports/94-full-path-disclosure-info-disclosure-in-creating-new-group2026-10-29 https://bugbountyreports.com/reports/96-full-path-disclosure-info-disclosure-in-importing-xml2026-10-29 https://bugbountyreports.com/reports/1630-full-path-disclosure-at-27-prd-vine-co2026-10-29 https://bugbountyreports.com/reports/375-full-path-disclosure-at-ads-twitter-com2026-10-29 https://bugbountyreports.com/reports/2264-full-path-disclosure-at-hosted-weblate-org-admin-accounts2026-10-29 https://bugbountyreports.com/reports/284-full-path-disclosure-from-false-language2026-10-29 https://bugbountyreports.com/reports/2206-full-path-disclosure-in-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/7182-full-path-disclosure-of-server-through-500-server-error2026-10-29 https://bugbountyreports.com/reports/63-full-path-disclosure-on-smarthistory-khanacademy-org2026-10-29 https://bugbountyreports.com/reports/1195-full-path-disclosure-on-gmchat-gm-com2026-10-29 https://bugbountyreports.com/reports/3906-full-path-disclosure-on-track-uber-com2026-10-29 https://bugbountyreports.com/reports/4581-full-path-disclosure-on-www-rockstargames-com-via-apache2026-10-29 https://bugbountyreports.com/reports/8138-full-read-ssrf-at-htus2026-10-29 https://bugbountyreports.com/reports/7882-full-read-ssrf-in-flyte-poc-us-east4-uberinternal-com2026-10-29 https://bugbountyreports.com/reports/7487-full-read-ssrf-in-www-evernote-com-that-can-leak-aws2026-10-29 https://bugbountyreports.com/reports/5875-full-read-ssrf-on-gitlab-s-internal-grafana2026-10-29 https://bugbountyreports.com/reports/7582-full-read-ssrf-via-lark-docs-import-as-docs-feature2026-10-29 https://bugbountyreports.com/reports/7643-full-ssrf2026-10-29 https://bugbountyreports.com/reports/1885-full-sub-domain-takeover-at-s3-websummit-net2026-10-29 https://bugbountyreports.com/reports/935-full-takeover-of-some-binary-com-sub-domains2026-10-29 https://bugbountyreports.com/reports/8240-fully-taxjar-account-control-and-ability-to-disclose-and2026-10-29 https://bugbountyreports.com/reports/2835-futureoflife-organization-url-should-be-https2026-10-29 https://bugbountyreports.com/reports/840-ga-code-not-verified-on-the-server-side-allows-sending2026-10-29 https://bugbountyreports.com/reports/464-gain-access-to-any-user-s-email-address2026-10-29 https://bugbountyreports.com/reports/689-gain-reputation-by-creating-a-duplicate-of-an-existing2026-10-29 https://bugbountyreports.com/reports/3290-gaining-access-to-private-topics-using-quoting-feature2026-10-29 https://bugbountyreports.com/reports/4344-gaining-unlimited-bonus-points-on-websites-with-woocommerce2026-10-29 https://bugbountyreports.com/reports/722-gallery-plus-content-spoofing2026-10-29 https://bugbountyreports.com/reports/4391-gallery-no-feedback-for-invalid-password2026-10-29 https://bugbountyreports.com/reports/2154-garbage-collector-crash2026-10-29 https://bugbountyreports.com/reports/4927-garlicrust-heartbleed-style-vulnerability-in-major-i2p-c2026-10-29 https://bugbountyreports.com/reports/4400-gateway-information-leakage2026-10-29 https://bugbountyreports.com/reports/4754-gdimagetruecolortopalettebody-allows-arbitrary-write-read2026-10-29 https://bugbountyreports.com/reports/3617-gem-signature-forgery2026-10-29 https://bugbountyreports.com/reports/1545-generate-new-test-token2026-10-29 https://bugbountyreports.com/reports/8198-generated-passwords-are-not-fully-validated-by-hibpvalidator2026-10-29 https://bugbountyreports.com/reports/227-genericons-com-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/3096-get-all-instacart-emails-missing-rate-limit-on-accounts2026-10-29 https://bugbountyreports.com/reports/5913-get-analytics-token-using-only-apps-permission2026-10-29 https://bugbountyreports.com/reports/6090-get-based-open-redirect-on-streamlabs-com-content-hub2026-10-29 https://bugbountyreports.com/reports/1503-get-organization-info-base-on-uuid2026-10-29 https://bugbountyreports.com/reports/802-get-users-information-without-full-access2026-10-29 https://bugbountyreports.com/reports/4679-get-icu-value-internal-out-of-bounds-read2026-10-29 https://bugbountyreports.com/reports/5855-get-based-ssrf-limited-to-http-protocol-on-https-resizer2026-10-29 https://bugbountyreports.com/reports/5237-getglobalachievementpercentagesforapp-is-missing-the-same2026-10-29 https://bugbountyreports.com/reports/3497-getreports-works-for-hubs-you-don-t-have-access-to2026-10-29 https://bugbountyreports.com/reports/8171-getroomroles-method-leaks-channel-owner2026-10-29 https://bugbountyreports.com/reports/7982-getting-a-free-delivery-by-singing-up-from-admin-glovoapp2026-10-29 https://bugbountyreports.com/reports/8041-getting-access-of-mod-logs-from-any-public-or-restricted2026-10-29 https://bugbountyreports.com/reports/3845-getting-all-the-cd-keys-of-any-game2026-10-29 https://bugbountyreports.com/reports/462-getting-emails-of-users-removing-them-from-victims-account2026-10-29 https://bugbountyreports.com/reports/6118-getting-new-invitations-without-leaving-programs2026-10-29 https://bugbountyreports.com/reports/8165-getusermentionsbychannel-leaks-messages-with-mention-from2026-10-29 https://bugbountyreports.com/reports/8176-getusersofroom-discloses-users-in-private-channels2026-10-29 https://bugbountyreports.com/reports/2428-gfm-renderer-leaks-external-issue-tracker-url-of-private2026-10-29 https://bugbountyreports.com/reports/9140-ghes-management-console-eop-editor-to-site-admin2026-10-29 https://bugbountyreports.com/reports/5-gif-flooding2026-10-29 https://bugbountyreports.com/reports/8728-git-arg-injection-in-kubernetes-sigs-release-sdk2026-10-29 https://bugbountyreports.com/reports/6937-git-config2026-10-29 https://bugbountyreports.com/reports/2172-git-detected2026-10-29 https://bugbountyreports.com/reports/5084-git-flag-injection-local-file-overwrite-to-remote-code2026-10-29 https://bugbountyreports.com/reports/5076-git-flag-injection-search-api-with-scope-blobs2026-10-29 https://bugbountyreports.com/reports/5083-git-flag-injection-leading-to-file-overwrite-and-potential2026-10-29 https://bugbountyreports.com/reports/7106-git-flag-injection-leads-to-arbitrary-file-write2026-10-29 https://bugbountyreports.com/reports/9085-git-reference-ambiguity-in-github-commit-smuggling-account2026-10-29 https://bugbountyreports.com/reports/6748-git-repo-on-https-mil-discloses-api-password2026-10-29 https://bugbountyreports.com/reports/2690-git-repository-found2026-10-29 https://bugbountyreports.com/reports/917-git-fastclone-allows-arbitrary-command-execution-through2026-10-29 https://bugbountyreports.com/reports/7107-github-access-token-exposure2026-10-29 https://bugbountyreports.com/reports/6569-github-account-hijack-through-broken-link-in-developer2026-10-29 https://bugbountyreports.com/reports/7894-github-account-takeover-from-docs-page-of-kubernetes-csi2026-10-29 https://bugbountyreports.com/reports/7821-github-account-takeover-which-is-used-as-gradle-vcs-in2026-10-29 https://bugbountyreports.com/reports/3627-github-api-key-for-brewtestbot-is-publicly-exposed2026-10-29 https://bugbountyreports.com/reports/8442-github-app-privilege-escalation-to-administrator-owner-of2026-10-29 https://bugbountyreports.com/reports/9265-github-app-link-takeover-listed-on-https-docs-doppler-com2026-10-29 https://bugbountyreports.com/reports/9505-github-apps-can-access-suspended-installations-via-scoped2026-10-29 https://bugbountyreports.com/reports/8452-github-apps-can-use-scoped-user-to-server-tokens-to-obtain2026-10-29 https://bugbountyreports.com/reports/7991-github-base-action-takeover-which-is-used-in-github-com2026-10-29 https://bugbountyreports.com/reports/3481-github-import-allows-user-to-create-child-group-under2026-10-29 https://bugbountyreports.com/reports/4536-github-information-leaked2026-10-29 https://bugbountyreports.com/reports/5165-github-repo-s-wiki-publicly-editable2026-10-29 https://bugbountyreports.com/reports/10455-github-retired-usernametakeover-from-aws2026-10-29 https://bugbountyreports.com/reports/10447-github-scoped-user-to-server-tokens-can-escape-their2026-10-29 https://bugbountyreports.com/reports/8446-github-security-lab-ghsl-vulnerability-report-insufficient2026-10-29 https://bugbountyreports.com/reports/8629-github-security-lab-ghsl-vulnerability-report-sqlinjection2026-10-29 https://bugbountyreports.com/reports/4427-github-token-leaked-publicly-for-https-github-com-mopub2026-10-29 https://bugbountyreports.com/reports/3782-github-token-leaked-publicly-for-https-github-sc-corp-net2026-10-29 https://bugbountyreports.com/reports/10436-github-user-to-server-tokens-can-create-issues-in-any2026-10-29 https://bugbountyreports.com/reports/3955-github-users-outside-of-hackerone-organization-can-create2026-10-29 https://bugbountyreports.com/reports/3947-github-wiki-is-editable-by-anyone2026-10-29 https://bugbountyreports.com/reports/3944-github-wikis-are-editable-by-anyone2026-10-29 https://bugbountyreports.com/reports/6516-github-wikis-are-editable-by-anyone-https-github-com2026-10-29 https://bugbountyreports.com/reports/3402-gitlab-ci-runner-can-read-and-poison-cache-of-all-other2026-10-29 https://bugbountyreports.com/reports/2813-gitlab-is-vulnerable-to-impersonation-attacks-due-to-broken2026-10-29 https://bugbountyreports.com/reports/7904-gitlab-pages-token-theft-using-service-workers2026-10-29 https://bugbountyreports.com/reports/6191-gitlab-runner-on-windows-docker-auth-config-container-host2026-10-29 https://bugbountyreports.com/reports/5595-gitlab-workhorse-bypass-in-gitlab-middleware-multipart2026-10-29 https://bugbountyreports.com/reports/5053-gitlab-urlblocker-validation-bypass-leading-to-full-server2026-10-29 https://bugbountyreports.com/reports/2235-gitlab-com-is-vulnerable-to-reverse-tabnabbing-via-asciidoc2026-10-29 https://bugbountyreports.com/reports/2066-gitlab-com-is-vulnerable-to-reverse-tabnabbing2026-10-29 https://bugbountyreports.com/reports/2236-gitlab-com-is-vulnerable-to-reverse-tabnabbing-22026-10-29 https://bugbountyreports.com/reports/4469-gitlab-s-github-integration-is-vulnerable-to-ssrf2026-10-29 https://bugbountyreports.com/reports/4508-gitlabhook-os-command-injection2026-10-29 https://bugbountyreports.com/reports/7428-glasswire-2-1-167-vulnerability-msvr-566392026-10-29 https://bugbountyreports.com/reports/932-glasswiresetup-exe-subject-to-exe-planting-attack2026-10-29 https://bugbountyreports.com/reports/7827-global-default-settings-page-is-accessible-to-non2026-10-29 https://bugbountyreports.com/reports/10117-globalprotect-os-command-injection2026-10-29 https://bugbountyreports.com/reports/1476-gmmovinparts-com-sqli-via-forgot-password-jsp2026-10-29 https://bugbountyreports.com/reports/4667-gmp-deserialization-type-confusion-vulnerability-mybb-1-8-32026-10-29 https://bugbountyreports.com/reports/1893-gnip-subdomain-take-over2026-10-29 https://bugbountyreports.com/reports/340-gnu-bourne-again-shell-bash-shellshock-vulnerability2026-10-29 https://bugbountyreports.com/reports/3722-go-imgur-com-can-be-used-to-phish-for-account-information2026-10-29 https://bugbountyreports.com/reports/9785-goaway-http-2-frames-cause-memory-leak-outside-heap2026-10-29 https://bugbountyreports.com/reports/8071-golang-expvar-information-disclosure2026-10-29 https://bugbountyreports.com/reports/6867-goldsrc-buffer-overflow-in-delta-parsedelta-function-leads2026-10-29 https://bugbountyreports.com/reports/2075-google-analytics-could-be-used-as-csp-bypass-for-data2026-10-29 https://bugbountyreports.com/reports/6782-google-api-key-leaks-and-security-misconfiguration-leads2026-10-29 https://bugbountyreports.com/reports/9054-google-docs-link-in-js-files-allows-editing-reading-survey2026-10-29 https://bugbountyreports.com/reports/8920-google-dork-lead-to-unsubscribe-anyone-from-all-banfield2026-10-29 https://bugbountyreports.com/reports/5435-google-maps-api-key-leaked-during-device-pairing2026-10-29 https://bugbountyreports.com/reports/7040-google-maps-api-key-stored-as-plain-text-leading-to-dos-and2026-10-29 https://bugbountyreports.com/reports/7507-google-storage-bucket-takeover-which-is-used-to-load-js2026-10-29 https://bugbountyreports.com/reports/7377-gps-metadata-preserved-when-converting-heif-to-png2026-10-29 https://bugbountyreports.com/reports/6176-grafana-improper-authorization2026-10-29 https://bugbountyreports.com/reports/7545-grafana-lfi-on-https-grafana-mariadb-org2026-10-29 https://bugbountyreports.com/reports/8287-grafana-rce-via-smtp-server-parameter-injection2026-10-29 https://bugbountyreports.com/reports/5817-grammarly-keyboard-for-android-authorization-code-with-pkce2026-10-29 https://bugbountyreports.com/reports/4270-grammarly-keyboard-for-android-4-1-leaks-user-input-through2026-10-29 https://bugbountyreports.com/reports/5797-graphql-admingeneratesessionpayload-is-leaked-to-staff-with2026-10-29 https://bugbountyreports.com/reports/7659-graphql-cross-tenant-idor-giving-write-access-thought-the2026-10-29 https://bugbountyreports.com/reports/5823-graphql-field-on-team-node-can-be-used-to-determine-if2026-10-29 https://bugbountyreports.com/reports/6881-graphql-introspection-is-enabled-and-leaks-details-about2026-10-29 https://bugbountyreports.com/reports/6447-graphql-introspection-query-works-through-unauthenticated2026-10-29 https://bugbountyreports.com/reports/5471-graphql-node-interface-for-activeresource-models-lacks2026-10-29 https://bugbountyreports.com/reports/5028-graphql-query-namespace-leaks-data2026-10-29 https://bugbountyreports.com/reports/6694-graphql-query-leads-to-sensitive-information-disclosure2026-10-29 https://bugbountyreports.com/reports/3090-graphql-sessions-aren-t-immediately-invalidated-when-user2026-10-29 https://bugbountyreports.com/reports/5972-graphql-sorting-the-reports-by-jira-status-field-resulted2026-10-29 https://bugbountyreports.com/reports/2757-gratipay-rails-secret-token-secret-key-base-publicly2026-10-29 https://bugbountyreports.com/reports/6461-grinch-networks-compromised2026-10-29 https://bugbountyreports.com/reports/6460-grinch-networks-taken-down-hacky-holidays-ctf2026-10-29 https://bugbountyreports.com/reports/6684-grinchs-website-takendown-with-various-other-exploits2026-10-29 https://bugbountyreports.com/reports/1964-group-admin-can-remove-user-from-all-his-groups-via-api2026-10-29 https://bugbountyreports.com/reports/4417-group-admins-can-remove-arbitrary-data-from-data-directory2026-10-29 https://bugbountyreports.com/reports/116-group-creation-via-csrf2026-10-29 https://bugbountyreports.com/reports/115-group-deletion-via-csrf2026-10-29 https://bugbountyreports.com/reports/418-group-invite-not-properly-authenticated2026-10-29 https://bugbountyreports.com/reports/10321-group-restriction-bypass-via-bearer-token-in-user-oidc2026-10-29 https://bugbountyreports.com/reports/5074-group-search-leaks-private-mrs-code-commits2026-10-29 https://bugbountyreports.com/reports/5073-group-search-with-elastic-search-enable-leaks-unrelated-data2026-10-29 https://bugbountyreports.com/reports/9866-groups-module-can-halt-chain-when-handling-a-proposal-with2026-10-29 https://bugbountyreports.com/reports/9526-guest-privilege-escalation-to-admin-group2026-10-29 https://bugbountyreports.com/reports/6227-guest-users-can-change-the-confidentiality-attribute-on2026-10-29 https://bugbountyreports.com/reports/7315-guest-users-can-create-issues-for-sentry-errors-and-track2026-10-29 https://bugbountyreports.com/reports/7237-guest-users-can-create-new-test-cases2026-10-29 https://bugbountyreports.com/reports/8404-guests-can-continue-to-receive-video-streams-from-call2026-10-29 https://bugbountyreports.com/reports/4844-gzdecode-does-not-check-output-string-size-which-leads-to2026-10-29 https://bugbountyreports.com/reports/4843-gzuncompress-does-not-check-output-string-size-which-leads2026-10-29 https://bugbountyreports.com/reports/6465-h1-hacky-holidays-ctf-solution2026-10-29 https://bugbountyreports.com/reports/6464-h1-hackyholidays-ctf-the-grinch-was-defeated2026-10-29 https://bugbountyreports.com/reports/3297-h1-202-leaderboard-photo-discloses-local-wifi-password2026-10-29 https://bugbountyreports.com/reports/3817-h1-5411-ctf-write-up-by-erbbysam-and-ziot2026-10-29 https://bugbountyreports.com/reports/3818-h1-5411-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/3820-h1-5411-ctf-report-lfi-deserialization-xxe-vulnerability2026-10-29 https://bugbountyreports.com/reports/6511-h1-ctf-12-days-of-hack-holiday-writeup2026-10-29 https://bugbountyreports.com/reports/7006-h1-ctf-100k-solution-congratz-on-the-100k-rep-todayisnew2026-10-29 https://bugbountyreports.com/reports/5673-h1-ctf-writeup-finally-paid-the-payments-by-chaining2026-10-29 https://bugbountyreports.com/reports/4252-h1514-my-shopify-com-viewing-password-protected-content2026-10-29 https://bugbountyreports.com/reports/4222-h1514-beerify-shopifycloud-com-graphql-discloses-internal2026-10-29 https://bugbountyreports.com/reports/4195-h1514-ability-to-edit-packaging-slip-templates-and-view2026-10-29 https://bugbountyreports.com/reports/4771-h1514-ability-to-mitm-shopify-pos-session-to-takeover2026-10-29 https://bugbountyreports.com/reports/4277-h1514-bypass-wholesale-account-signup-restrictions2026-10-29 https://bugbountyreports.com/reports/5358-h1514-csrf-in-domain-transfer-allows-adding-your-domain-to2026-10-29 https://bugbountyreports.com/reports/5300-h1514-deanonymizing-exchange-marketplace-private-listings2026-10-29 https://bugbountyreports.com/reports/4772-h1514-dom-xss-on-checkout-shopify-com-via-postmessage2026-10-29 https://bugbountyreports.com/reports/4182-h1514-domxss-on-embedded-sdk-via-shopify-api2026-10-29 https://bugbountyreports.com/reports/4773-h1514-extract-information-about-other-sites-new-sites2026-10-29 https://bugbountyreports.com/reports/4770-h1514-get-access-to-non-public-information-by-pivoting-with2026-10-29 https://bugbountyreports.com/reports/4196-h1514-lack-of-access-control-on-edit-packing-slip-template2026-10-29 https://bugbountyreports.com/reports/5200-h1514-remote-code-execution-on-kitcrm-using-bulk-customer2026-10-29 https://bugbountyreports.com/reports/4290-h1514-removed-staff-members-who-had-apps-permission-can2026-10-29 https://bugbountyreports.com/reports/4137-h1514-server-side-template-injection-in-return-magic-email2026-10-29 https://bugbountyreports.com/reports/4197-h1514-session-fixation-on-multiple-shopify-built-apps-on2026-10-29 https://bugbountyreports.com/reports/4142-h1514-shopify-api-ruby-sdk-session-setup-lacks-input2026-10-29 https://bugbountyreports.com/reports/4164-h1514-simple-phishing-using-auto-created-modal-with-weak2026-10-29 https://bugbountyreports.com/reports/4781-h1514-stored-xss-in-return-magic-app-portal-content2026-10-29 https://bugbountyreports.com/reports/4762-h1514-stored-xss-on-wholesale-sales-channel-allows-cross2026-10-29 https://bugbountyreports.com/reports/4161-h1514-wholesale-customer-without-checkout-permission-can2026-10-29 https://bugbountyreports.com/reports/37-hack-administrator-password-even-if-you-are-a-guest2026-10-29 https://bugbountyreports.com/reports/3887-hack-the-world-2017-top-2-bonus2026-10-29 https://bugbountyreports.com/reports/3843-hacker-can-bypass-2fa-requirement-and-reporter-blacklist2026-10-29 https://bugbountyreports.com/reports/3916-hacker-can-request-mediation-for-published-reports2026-10-29 https://bugbountyreports.com/reports/9034-hacker-email-disclosed-on-submission-at-hackerone-hactivity2026-10-29 https://bugbountyreports.com/reports/1560-hacker-one-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/8876-hackerone-all-private-program-name-leaked-to-public-via2026-10-29 https://bugbountyreports.com/reports/10554-hackerone-code-sends-live-password-reset-tokens-to-segment2026-10-29 https://bugbountyreports.com/reports/10578-hackerone-code-a-live-password-reset-token-reaches-datadog2026-10-29 https://bugbountyreports.com/reports/3598-hackerone-customer-submitted-sensitive-link-to-virustotal2026-10-29 https://bugbountyreports.com/reports/845-hackerone-impersonation2026-10-29 https://bugbountyreports.com/reports/1185-hackerone-important-emails-notification-are-sent-in-clear2026-10-29 https://bugbountyreports.com/reports/4170-hackerone-integrations-design-issue2026-10-29 https://bugbountyreports.com/reports/6981-hackerone-is-not-properly-deleting-user-id2026-10-29 https://bugbountyreports.com/reports/6781-hackerone-jira-integration-plugin-leaked-jwt-to2026-10-29 https://bugbountyreports.com/reports/7003-hackerone-making-payments-in-usdc-coinbase-stable-coin2026-10-29 https://bugbountyreports.com/reports/5302-hackerone-pentesters-can-access-any-structured-scope-object2026-10-29 https://bugbountyreports.com/reports/2773-hackerone-reports-escalation-to-jira-is-csrf-vulnerable2026-10-29 https://bugbountyreports.com/reports/9201-hackerone-saml-signup-domain-enforcement-bypass-results-in2026-10-29 https://bugbountyreports.com/reports/7415-hackerone-staging-uses-production-data-for-testing2026-10-29 https://bugbountyreports.com/reports/3502-hackerone-support-disclosing-report-state-without-checking2026-10-29 https://bugbountyreports.com/reports/8873-hackerone-support-system-doesn-t-require-any-authentication2026-10-29 https://bugbountyreports.com/reports/9690-hackerone-supports-accounts-organitation-takeover2026-10-29 https://bugbountyreports.com/reports/8484-hackerone-undisclosed-report-leak-via-poc-of-full2026-10-29 https://bugbountyreports.com/reports/7017-hackerone-s-100k-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/7210-hackers-can-find-out-the-id-of-private-programs2026-10-29 https://bugbountyreports.com/reports/7212-hackers-can-reveal-the-names-of-private-programs-that-have2026-10-29 https://bugbountyreports.com/reports/9028-hackers-two-email-disclosed-on-submission-at-hackerone2026-10-29 https://bugbountyreports.com/reports/3547-hacktivity-of-a-private-program-visible-to-banned-user-if2026-10-29 https://bugbountyreports.com/reports/6468-hacky-holidays-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/6482-hacky-holidays-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/6478-hacky-holidays-writeup2026-10-29 https://bugbountyreports.com/reports/6513-hackyholidays-h1-ctf-writeup-mission-stop-the-grinch2026-10-29 https://bugbountyreports.com/reports/6467-hackyholidays-2020-full-write-up-information-disclosure-of2026-10-29 https://bugbountyreports.com/reports/6683-hackyholidays-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/6473-hackyholidays-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/6456-hackyholidays-h1-ctf-writeup2026-10-29 https://bugbountyreports.com/reports/6173-half-blind-ssrf-found-in-kube-cloud-controller-manager-can2026-10-29 https://bugbountyreports.com/reports/4403-handling-of-tracking-command-allows-making-arbitrary-blind2026-10-29 https://bugbountyreports.com/reports/13-handling-of-jar-uris-bypasses-allowscriptaccess-never2026-10-29 https://bugbountyreports.com/reports/8576-haproxy-stats-panel-exposed-externally2026-10-29 https://bugbountyreports.com/reports/3425-hard-coded-username-and-password-in-registry2026-10-29 https://bugbountyreports.com/reports/7811-hardcoded-aws-credentials-in-msi2026-10-29 https://bugbountyreports.com/reports/5702-hardcoded-credentials-in-android-app2026-10-29 https://bugbountyreports.com/reports/6187-hardcoded-password-stored-in-javascript-of-https-mil2026-10-29 https://bugbountyreports.com/reports/2160-harden-resend-throttling2026-10-29 https://bugbountyreports.com/reports/7283-hardware-wallets-do-not-check-unlock-time2026-10-29 https://bugbountyreports.com/reports/3362-harvesting-all-private-invites-using-leave-program-fast2026-10-29 https://bugbountyreports.com/reports/7367-hash-collision-denial-of-service-vulnerability-in-markdown2026-10-29 https://bugbountyreports.com/reports/9980-hashdos-in-v82026-10-29 https://bugbountyreports.com/reports/10260-hashdos-in-v82026-10-29 https://bugbountyreports.com/reports/8974-hashed-data-exposure-via-websockets-to-workspace-members2026-10-29 https://bugbountyreports.com/reports/5061-head-pipeline-leaked-to-unauthorized-users-via-blocking2026-10-29 https://bugbountyreports.com/reports/606-header-misconfiguration-php-api2026-10-29 https://bugbountyreports.com/reports/6972-header-modification-results-in-disclosure-of-slack-infra2026-10-29 https://bugbountyreports.com/reports/1976-heap-buffer-oveflow-with-many-arguments2026-10-29 https://bugbountyreports.com/reports/4793-heap-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/3499-heap-buffer-overflow-read-1786-in-exif-iif-add-value2026-10-29 https://bugbountyreports.com/reports/6091-heap-buffer-overflow-read-4-in-phar-parse-pharfile2026-10-29 https://bugbountyreports.com/reports/410-heap-buffer-overflow-in-enchant-broker-request-dict2026-10-29 https://bugbountyreports.com/reports/1984-heap-buffer-overflow-in-mrb-ary-unshift2026-10-29 https://bugbountyreports.com/reports/1973-heap-buffer-overflow-in-mrb-funcall-with-block2026-10-29 https://bugbountyreports.com/reports/2217-heap-buffer-overflow-in-mrb-hash-keys2026-10-29 https://bugbountyreports.com/reports/2148-heap-buffer-overflow-in-mruby-value-move2026-10-29 https://bugbountyreports.com/reports/6099-heap-buffer-overflow-in-phar-detect-phar-fname-ext2026-10-29 https://bugbountyreports.com/reports/7070-heap-buffer-overflow-vulnerability-while-processing-a2026-10-29 https://bugbountyreports.com/reports/2112-heap-buffer-overflow-while-processing-op-send2026-10-29 https://bugbountyreports.com/reports/2022-heap-buffer-overflow-with-long-array-assignment2026-10-29 https://bugbountyreports.com/reports/4891-heap-bufferover-flow-in-escapeshellargs-and-escapeshellcmd2026-10-29 https://bugbountyreports.com/reports/4709-heap-corruption-in-tar-zip-phar-parser2026-10-29 https://bugbountyreports.com/reports/2937-heap-corruption-via-memarea-c2026-10-29 https://bugbountyreports.com/reports/1303-heap-corruption-via-python-2-7-11-iobase-readline2026-10-29 https://bugbountyreports.com/reports/10534-heap-memory-disclosure-via-integer-underflow-in-item-func2026-10-29 https://bugbountyreports.com/reports/2369-heap-overflow-caused-by-type-confusion-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/4880-heap-overflow-due-to-integer-overflow2026-10-29 https://bugbountyreports.com/reports/4826-heap-overflow-due-to-integer-overflow-in-bzdecompress2026-10-29 https://bugbountyreports.com/reports/4828-heap-overflow-due-to-integer-overflow-in-pg-escape-string2026-10-29 https://bugbountyreports.com/reports/4829-heap-overflow-due-to-integer-overflow-in-php-escape-html2026-10-29 https://bugbountyreports.com/reports/4863-heap-overflow-due-to-integer-overflows2026-10-29 https://bugbountyreports.com/reports/1900-heap-overflow-due-to-off-by-one-when-expanding-stack2026-10-29 https://bugbountyreports.com/reports/4526-heap-overflow-happen-when-receiving-short-length-key-from2026-10-29 https://bugbountyreports.com/reports/4859-heap-overflow-in-curl-escape2026-10-29 https://bugbountyreports.com/reports/2367-heap-overflow-in-fiber-switch-triggered-from-fiber-transfer2026-10-29 https://bugbountyreports.com/reports/497-heap-overflow-in-h-spencer-s-regex-library-on-32-bit-systems2026-10-29 https://bugbountyreports.com/reports/1834-heap-overflow-in-mrb-arb-splice2026-10-29 https://bugbountyreports.com/reports/4837-heap-overflow-in-mysqlnd-related-to-bit-fields-cve-2016-74122026-10-29 https://bugbountyreports.com/reports/4817-heap-overflow-in-php-ereg-replace-function2026-10-29 https://bugbountyreports.com/reports/4855-heap-overflow-in-substr-replace2026-10-29 https://bugbountyreports.com/reports/6219-heap-overflow-in-utf32be-mbc-to-code2026-10-29 https://bugbountyreports.com/reports/2224-heap-use-after-free-in-fiber-switch2026-10-29 https://bugbountyreports.com/reports/3914-heap-use-after-free-in-unserialize2026-10-29 https://bugbountyreports.com/reports/3915-heap-use-after-free-read-in-unserialize2026-10-29 https://bugbountyreports.com/reports/1901-heap-use-after-free-during-range-creation2026-10-29 https://bugbountyreports.com/reports/10566-heap-use-after-free-in-materialized-cursor-open-via-sys2026-10-29 https://bugbountyreports.com/reports/2145-heap-use-after-free-in-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/2250-heap-use-after-free-in-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/3461-heap-buffer-overflow-buffer-read-overrun-in-curl2026-10-29 https://bugbountyreports.com/reports/2535-heap-buffer-overflow-read-of-size-1-in-cpptoml-parser2026-10-29 https://bugbountyreports.com/reports/2361-heap-buffer-overflow-read-of-size-11-in-perl-5-25-x2026-10-29 https://bugbountyreports.com/reports/3665-heap-buffer-overflow-read-of-size-48-in-exif-read-data2026-10-29 https://bugbountyreports.com/reports/2411-heap-buffer-overflow-read-of-size-61-in-perl-re-intuit-start2026-10-29 https://bugbountyreports.com/reports/2232-heap-buffer-overflow-read-outside-of-buffer-in-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/3428-heap-buffer-overflow-write-of-size-8-in-perl-pp-reverse2026-10-29 https://bugbountyreports.com/reports/4872-heap-buffer-overflow-write-simplestring-addn-simplestring-c2026-10-29 https://bugbountyreports.com/reports/3169-heap-buffer-overflow-in-op-r-break2026-10-29 https://bugbountyreports.com/reports/4739-heap-buffer-overflow-in-perl-byte-dump-string-utf8-c-could2026-10-29 https://bugbountyreports.com/reports/1931-heap-buffer-overflow-on-mruby2026-10-29 https://bugbountyreports.com/reports/9689-heap-buffer-overread-in-contains-whitespace-when-calling2026-10-29 https://bugbountyreports.com/reports/4767-heap-use-after-free-read-of-size-8-in-main2026-10-29 https://bugbountyreports.com/reports/1910-heap-use-after-free-home-operac-testafl-mruby-mrubylast2026-10-29 https://bugbountyreports.com/reports/2328-heap-use-after-free-in-mrb-vm-exec-vm-c-12472026-10-29 https://bugbountyreports.com/reports/3168-heap-use-after-free-in-op-rescue2026-10-29 https://bugbountyreports.com/reports/2685-heap-use-after-free-in-sass-sharedptr-increfcount2026-10-29 https://bugbountyreports.com/reports/4705-heapoverflow-in-zipimporter-module2026-10-29 https://bugbountyreports.com/reports/8429-heic-image-preview-can-be-used-to-invoke-imagick2026-10-29 https://bugbountyreports.com/reports/1380-help-nextcloud-com-known-dos-condition-null-pointer-deref2026-10-29 https://bugbountyreports.com/reports/4233-help-shopify-com-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/5129-helpdesk-takeover-at-dmc-datastax-com2026-10-29 https://bugbountyreports.com/reports/285-here-is-another-xss-i-got-for-you2026-10-29 https://bugbountyreports.com/reports/6156-hey-com-email-stored-xss2026-10-29 https://bugbountyreports.com/reports/6853-hi-security-team-rocket-chat-it-s-possible-to-get2026-10-29 https://bugbountyreports.com/reports/5332-hidden-scheduled-partner-events-are-propagated-to-steam2026-10-29 https://bugbountyreports.com/reports/10484-hidden-restricted-tags-can-be-mutated-through-synonym-id2026-10-29 https://bugbountyreports.com/reports/8679-hide-download-previews-are-accessible-without-a-watermark2026-10-29 https://bugbountyreports.com/reports/7660-high-memory-usage-for-generating-preview-of-broken-image2026-10-29 https://bugbountyreports.com/reports/10083-high-resource-consumption-by-insufficient-sanitization-of2026-10-29 https://bugbountyreports.com/reports/3467-highly-wormable-clickjacking-in-player-card2026-10-29 https://bugbountyreports.com/reports/8028-hijack-all-emails-sent-to-any-domain-that-uses-cloudflare2026-10-29 https://bugbountyreports.com/reports/1058-hijacking-user-session-by-forcing-the-use-of-invalid-https2026-10-29 https://bugbountyreports.com/reports/261-history-disclosure-of-ms-dos2026-10-29 https://bugbountyreports.com/reports/10319-hmac-signature-verification-omits-endpoint-and-payload2026-10-29 https://bugbountyreports.com/reports/4158-hogging-up-all-the-resources-on-hackerone-com2026-10-29 https://bugbountyreports.com/reports/7260-holes-in-endpointslice-validation-enable-host-network-hijack2026-10-29 https://bugbountyreports.com/reports/4254-homebrew-installed-launchdaemons-create-simple-root2026-10-29 https://bugbountyreports.com/reports/4314-homebrew-privilege-escalation-vulnerability2026-10-29 https://bugbountyreports.com/reports/533-homograph-attack2026-10-29 https://bugbountyreports.com/reports/548-homograph-attack2026-10-29 https://bugbountyreports.com/reports/1614-homograph-attack2026-10-29 https://bugbountyreports.com/reports/550-homograph-attack2026-10-29 https://bugbountyreports.com/reports/2862-homograph-attack-bypass-tested-on-linux-windows2026-10-29 https://bugbountyreports.com/reports/4185-homograph-attack-in-escalate-report2026-10-29 https://bugbountyreports.com/reports/349-homograph-attack-idns-displayed-in-unicode-in-bug-reports2026-10-29 https://bugbountyreports.com/reports/2926-homograph-fix-bypass2026-10-29 https://bugbountyreports.com/reports/2848-homograph-idns-displayed-in-description2026-10-29 https://bugbountyreports.com/reports/5299-hong-kong-open-redirect-on-card-starbucks-com-hk2026-10-29 https://bugbountyreports.com/reports/9798-host-header-attac2026-10-29 https://bugbountyreports.com/reports/6884-host-header-injection2026-10-29 https://bugbountyreports.com/reports/9216-host-header-injection-internal-qa-delivery-indrive-com2026-10-29 https://bugbountyreports.com/reports/245-host-header-injection-irccloud-com2026-10-29 https://bugbountyreports.com/reports/3164-host-header-injection-allow-hijack-password-reset-link2026-10-29 https://bugbountyreports.com/reports/6432-host-header-injection-in-oslo-io-using-x-forwarded-for2026-10-29 https://bugbountyreports.com/reports/7746-host-header-injection-leads-to-open-redirect-and-content2026-10-29 https://bugbountyreports.com/reports/8232-host-header-injection-on-https-account-forgotpassword2026-10-29 https://bugbountyreports.com/reports/8379-host-header-injection-that-bypassed-protection-and-allowed2026-10-29 https://bugbountyreports.com/reports/5887-host-header-injection2026-10-29 https://bugbountyreports.com/reports/893-host-header-injection-redirection2026-10-29 https://bugbountyreports.com/reports/1523-host-header-injection-redirection-in-https-www-instacart-com2026-10-29 https://bugbountyreports.com/reports/3510-host-header-injection-redirection-via-newsletter-signup2026-10-29 https://bugbountyreports.com/reports/145-host-header-is-not-validated-resulting-in-open-redirect2026-10-29 https://bugbountyreports.com/reports/1293-host-header-poisoning-in-thisdata-com2026-10-29 https://bugbountyreports.com/reports/6591-hostauthorization-middleware-does-not-suitably-sanitize-the2026-10-29 https://bugbountyreports.com/reports/2282-hosted-weblate-org-x-xss-protection-not-enabled2026-10-29 https://bugbountyreports.com/reports/625-hotshot-pack-string-heap-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/9106-how-the-arch-angel-stole-live-events2026-10-29 https://bugbountyreports.com/reports/5093-how-the-bug-stole-hacking2026-10-29 https://bugbountyreports.com/reports/6457-how-the-hackers-saved-christmas2026-10-29 https://bugbountyreports.com/reports/1666-htaccess-file-is-accesible2026-10-29 https://bugbountyreports.com/reports/1074-html-escaping-error-in-the-404-page-on-developer-uber-com2026-10-29 https://bugbountyreports.com/reports/155-html-form-without-csrf-protection2026-10-29 https://bugbountyreports.com/reports/83-html-form-without-csrf-protection2026-10-29 https://bugbountyreports.com/reports/343-html-form-without-csrf-protection-at-http-try-crashlytics2026-10-29 https://bugbountyreports.com/reports/1394-html-in-diffusion-not-escaped-in-certain-circumstances2026-10-29 https://bugbountyreports.com/reports/8921-html-injection2026-10-29 https://bugbountyreports.com/reports/2989-html-injection2026-10-29 https://bugbountyreports.com/reports/2839-html-injection-with-xss-possible-on-the-https-www-data-gov2026-10-29 https://bugbountyreports.com/reports/7261-html-injection-restaurant-order-endpoint2026-10-29 https://bugbountyreports.com/reports/8609-html-injection-reflected-cross-site-scripting-with-csp-on2026-10-29 https://bugbountyreports.com/reports/6702-html-injection-xss-vulnerability-https-proof-of-concept-poc2026-10-29 https://bugbountyreports.com/reports/4347-html-injection-and-information-disclosure-in-support-panel2026-10-29 https://bugbountyreports.com/reports/5171-html-injection-and-limited-xss-via-logo-image-upload2026-10-29 https://bugbountyreports.com/reports/1467-html-injection-and-possible-xss-in-sms-be-vip-twitter-com2026-10-29 https://bugbountyreports.com/reports/4482-html-injection-and-possible-xss-via-mathml2026-10-29 https://bugbountyreports.com/reports/9027-html-injection-at-company-name-or-product-name-and-can-be2026-10-29 https://bugbountyreports.com/reports/9031-html-injection-at-https-stage-firefoxmonitor-nonprod2026-10-29 https://bugbountyreports.com/reports/919-html-injection-can-lead-to-data-theft2026-10-29 https://bugbountyreports.com/reports/41-html-injection-in-invite-collaborators2026-10-29 https://bugbountyreports.com/reports/874-html-injection-in-apps-user-review2026-10-29 https://bugbountyreports.com/reports/9852-html-injection-in-business-name-parameter-in-payapps2026-10-29 https://bugbountyreports.com/reports/10564-html-injection-in-contact-form-email-enables-phishing-via2026-10-29 https://bugbountyreports.com/reports/10225-html-injection-in-dast-trial-request-form-confirmation2026-10-29 https://bugbountyreports.com/reports/2341-html-injection-in-desktop-client2026-10-29 https://bugbountyreports.com/reports/7918-html-injection-in-e-mail2026-10-29 https://bugbountyreports.com/reports/8009-html-injection-in-e-mail-not-resolved2026-10-29 https://bugbountyreports.com/reports/8698-html-injection-in-email-at-https-www-hackerone-com2026-10-29 https://bugbountyreports.com/reports/5899-html-injection-in-email-content2026-10-29 https://bugbountyreports.com/reports/7510-html-injection-in-email-content-during-registration-via2026-10-29 https://bugbountyreports.com/reports/835-html-injection-in-email-sent-by-romit-io2026-10-29 https://bugbountyreports.com/reports/8152-html-injection-in-email-via-name-field2026-10-29 https://bugbountyreports.com/reports/9182-html-injection-in-event-description2026-10-29 https://bugbountyreports.com/reports/4340-html-injection-in-https-interviewing-shopify-com-index-php2026-10-29 https://bugbountyreports.com/reports/9890-html-injection-in-linkedin-premium-support-chat2026-10-29 https://bugbountyreports.com/reports/2582-html-injection-in-owncloud2026-10-29 https://bugbountyreports.com/reports/9073-html-injection-in-search-ui-when-selecting-a-circle-with2026-10-29 https://bugbountyreports.com/reports/9560-html-injection-in-swagger-ui2026-10-29 https://bugbountyreports.com/reports/6762-html-injection-in-swing-can-disclose-netntlm-hash-or-cause2026-10-29 https://bugbountyreports.com/reports/8527-html-injection-in-the-invoice-memos-field2026-10-29 https://bugbountyreports.com/reports/8777-html-injection-in-title-of-reader-view2026-10-29 https://bugbountyreports.com/reports/10476-html-injection-in-transaction-confirmation-dialog-via2026-10-29 https://bugbountyreports.com/reports/3607-html-injection-inside-slack-promotional-emails2026-10-29 https://bugbountyreports.com/reports/9460-html-injection-into-https-www-mil2026-10-29 https://bugbountyreports.com/reports/7262-html-injection-leads-to-reflected-xss2026-10-29 https://bugbountyreports.com/reports/5843-html-injection-leads-to-xss-on2026-10-29 https://bugbountyreports.com/reports/3288-html-injection-mycrypto-com2026-10-29 https://bugbountyreports.com/reports/6775-html-injection-on-polls-app-comments-section-possibly-xss2026-10-29 https://bugbountyreports.com/reports/4983-html-injection-on2026-10-29 https://bugbountyreports.com/reports/6603-html-injection-on-informatica-com-via-search-html-q-12026-10-29 https://bugbountyreports.com/reports/2496-html-injection-on-airlink-ubnt-com2026-10-29 https://bugbountyreports.com/reports/8667-html-injection-on-coins-state-gov2026-10-29 https://bugbountyreports.com/reports/6415-html-injection-on-company-name-on-email2026-10-29 https://bugbountyreports.com/reports/3339-html-injection-on-https-www-mycrypto-com2026-10-29 https://bugbountyreports.com/reports/865-html-injection-on-khanacademy2026-10-29 https://bugbountyreports.com/reports/8886-html-injection-on-newsroom-snap-com-via-search-q-12026-10-29 https://bugbountyreports.com/reports/9174-html-injection-on-subscription-email2026-10-29 https://bugbountyreports.com/reports/9239-html-injection-on-tiktok-ads2026-10-29 https://bugbountyreports.com/reports/7389-html-injection-on-tiktoktutorials-via-firstname-parameter2026-10-29 https://bugbountyreports.com/reports/1929-html-injection-possible-due-to-bad-filter2026-10-29 https://bugbountyreports.com/reports/9632-html-injection-possible-with-soft-email-confirmations-when2026-10-29 https://bugbountyreports.com/reports/8488-html-injection-that-may-lead-to-xss-on-hackerone-com2026-10-29 https://bugbountyreports.com/reports/6743-html-injection-through-account-name-field-on-tiktok-ads2026-10-29 https://bugbountyreports.com/reports/8025-html-injection-via-email-share2026-10-29 https://bugbountyreports.com/reports/8574-html-injection-via-insecure-parameter-https-www2026-10-29 https://bugbountyreports.com/reports/7689-html-injection-via-invite-members-can-be-leads-account2026-10-29 https://bugbountyreports.com/reports/8030-html-injection-via-tiktok-ads-email-share2026-10-29 https://bugbountyreports.com/reports/2195-html-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/3626-html-injection-with-autocomplete-suggestions2026-10-29 https://bugbountyreports.com/reports/2046-html-injection-load-images-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/3600-html-tag-injection-on-profile-name2026-10-29 https://bugbountyreports.com/reports/100-html-javascript-possible-in-discussion-section-of-reviews2026-10-29 https://bugbountyreports.com/reports/423-html-xss-rendered-in-android-app-of-crashlytics-through2026-10-29 https://bugbountyreports.com/reports/241-html5-cross-origin-resource-sharing2026-10-29 https://bugbountyreports.com/reports/2228-http-401-response-injection-on-amp-twimg-com-amplify-web2026-10-29 https://bugbountyreports.com/reports/4740-http-header-can-split-r-n-instead-of-r-n2026-10-29 https://bugbountyreports.com/reports/848-http-header-injection-in-info-hackerone-com-allows-setting2026-10-29 https://bugbountyreports.com/reports/5249-http-header-values-do-not-have-trailing-ows-trimmed2026-10-29 https://bugbountyreports.com/reports/3973-http-mitm-on-flash-player-settings-manager-allows-attacker2026-10-29 https://bugbountyreports.com/reports/8523-http-multi-header-compression-denial-of-service2026-10-29 https://bugbountyreports.com/reports/3582-http-parameter-pollution-from-outdated-greenhouse-io-js2026-10-29 https://bugbountyreports.com/reports/3287-http-parameter-pollution-using-semicolons-in-iframe-element2026-10-29 https://bugbountyreports.com/reports/3949-http-put-method-enabled2026-10-29 https://bugbountyreports.com/reports/8049-http-put-method-is-enabled-downloader-ratelimited-me2026-10-29 https://bugbountyreports.com/reports/4030-http-put-method-is-enabled-ratelimited-me2026-10-29 https://bugbountyreports.com/reports/5749-http-request-smuggling2026-10-29 https://bugbountyreports.com/reports/6831-http-request-smuggling2026-10-29 https://bugbountyreports.com/reports/10317-http-request-smuggling2026-10-29 https://bugbountyreports.com/reports/8976-http-request-smuggling-cl-0-leads-to-mass-redirect-users-to2026-10-29 https://bugbountyreports.com/reports/7363-http-request-smuggling-due-to-accepting-space-before-colon2026-10-29 https://bugbountyreports.com/reports/6127-http-request-smuggling-due-to-cr-to-hyphen-conversion2026-10-29 https://bugbountyreports.com/reports/7971-http-request-smuggling-due-to-flawed-parsing-of-transfer2026-10-29 https://bugbountyreports.com/reports/7391-http-request-smuggling-due-to-ignoring-chunk-extensions2026-10-29 https://bugbountyreports.com/reports/7970-http-request-smuggling-due-to-improper-delimiting-of-header2026-10-29 https://bugbountyreports.com/reports/8259-http-request-smuggling-due-to-incorrect-parsing-of-header2026-10-29 https://bugbountyreports.com/reports/8612-http-request-smuggling-due-to-incorrect-parsing-of-header2026-10-29 https://bugbountyreports.com/reports/7969-http-request-smuggling-due-to-incorrect-parsing-of-multi2026-10-29 https://bugbountyreports.com/reports/8256-http-request-smuggling-due-to-incorrect-parsing-of-multi2026-10-29 https://bugbountyreports.com/reports/6018-http-request-smuggling-in-pscp-tv-and-periscope-tv2026-10-29 https://bugbountyreports.com/reports/7852-http-request-smuggling-in-transform-rules-using-hexadecimal2026-10-29 https://bugbountyreports.com/reports/6263-http-request-smuggling-in-twitter-com2026-10-29 https://bugbountyreports.com/reports/6165-http-request-smuggling-on-basecamp-2-allows-web-cache2026-10-29 https://bugbountyreports.com/reports/7442-http-request-smuggling-on-https-consumer-acronis-com2026-10-29 https://bugbountyreports.com/reports/5485-http-request-smuggling-on-https-labs-data-gov2026-10-29 https://bugbountyreports.com/reports/7441-http-request-smuggling-on-https-promosandbox-acronis-com2026-10-29 https://bugbountyreports.com/reports/5393-http-request-smuggling-on-my-stripo-email2026-10-29 https://bugbountyreports.com/reports/5294-http-request-smuggling-using-malformed-transfer-encoding2026-10-29 https://bugbountyreports.com/reports/10452-http-request-smuggling-via-connection-close-in-node-js2026-10-29 https://bugbountyreports.com/reports/9330-http-request-smuggling-via-content-length-obfuscation2026-10-29 https://bugbountyreports.com/reports/8762-http-request-smuggling-via-empty-headers-separated-by-cr2026-10-29 https://bugbountyreports.com/reports/8915-http-request-smuggling-via-empty-headers-separated-by-cr2026-10-29 https://bugbountyreports.com/reports/7234-http-request-smuggling-via-http-22026-10-29 https://bugbountyreports.com/reports/10491-http-request-smuggling-via-silent-header-truncation-in-node2026-10-29 https://bugbountyreports.com/reports/10530-http-request-smuggling-via-unsanitized-hop-by-hop-headers2026-10-29 https://bugbountyreports.com/reports/7944-http-request-smuggling-with-origin-rules-using-newlines-in2026-10-29 https://bugbountyreports.com/reports/5127-http-request-splitting2026-10-29 https://bugbountyreports.com/reports/9849-http-response-header-injection-in-shopify-pitchfork-rack-32026-10-29 https://bugbountyreports.com/reports/10394-http-response-queue-poisoning-via-toctou-race-condition-in2026-10-29 https://bugbountyreports.com/reports/828-http-response-splitting-validate-link2026-10-29 https://bugbountyreports.com/reports/542-http-response-splitting-crlf-injection-due-to-headers2026-10-29 https://bugbountyreports.com/reports/520-http-response-splitting-crlf-injection-in-report-story2026-10-29 https://bugbountyreports.com/reports/1791-http-response-splitting-crlf-injection-in-bi-owox-com2026-10-29 https://bugbountyreports.com/reports/5336-http-smuggling-exposed-hmac-dos2026-10-29 https://bugbountyreports.com/reports/7230-http-smuggling-multiple-issues-in-squid-3-x-squid-4-x2026-10-29 https://bugbountyreports.com/reports/344-http-strict-transport-policy-not-enabled-on-newly-made2026-10-29 https://bugbountyreports.com/reports/130-http-strict-transport-security-policy-not-enabled2026-10-29 https://bugbountyreports.com/reports/957-http-trace-method-is-enabled2026-10-29 https://bugbountyreports.com/reports/2102-http-trace-method-is-enabled-on-aspen-io2026-10-29 https://bugbountyreports.com/reports/2127-http-trace-method-is-enabled-on-gip-rocks2026-10-29 https://bugbountyreports.com/reports/1008-http-basic-authenticate-with-is-suseptible-to-timing-attacks2026-10-29 https://bugbountyreports.com/reports/3698-http-live-simulator-npm-module-is-prone-to-path-traversal2026-10-29 https://bugbountyreports.com/reports/905-http-response-splitting-on-v-shopify-com2026-10-29 https://bugbountyreports.com/reports/9226-http-reading-unprocessed-http-request-with-unbounded-chunk2026-10-29 https://bugbountyreports.com/reports/9251-http-reading-unprocessed-http-request-with-unbounded-chunk2026-10-29 https://bugbountyreports.com/reports/1470-http-217-20-144-201-privilege-escalation-in-apache-tomcat2026-10-29 https://bugbountyreports.com/reports/5861-http-cpanel-hostinger-com-demo-exposes-notifications-and2026-10-29 https://bugbountyreports.com/reports/1857-http-digital-starbucks-com-creation-of-google-g-suite2026-10-29 https://bugbountyreports.com/reports/228-http-jetpack-me-self-xss2026-10-29 https://bugbountyreports.com/reports/2530-http-lists-parrotsec-org-vulnerable-to-mitm2026-10-29 https://bugbountyreports.com/reports/55-http-smarthistory-khanacademy-org-search-results-html-xss2026-10-29 https://bugbountyreports.com/reports/5296-http-www-nextcloud-com-wp-includes-js-swfupload-swfupload2026-10-29 https://bugbountyreports.com/reports/5225-http-2-denial-of-service-vulnerability2026-10-29 https://bugbountyreports.com/reports/10487-http-2-retained-header-blocks-evade-maxsessionmemory-and2026-10-29 https://bugbountyreports.com/reports/10361-http-2-sessions-never-clean-up-after-goaway-on-invalid2026-10-29 https://bugbountyreports.com/reports/6722-http2-unknownprotocol-cause-denial-of-service-by-resource2026-10-29 https://bugbountyreports.com/reports/2311-httponly-flag-not-set2026-10-29 https://bugbountyreports.com/reports/72-httponly-flag-not-set-for-cookie-on-concrete5-org2026-10-29 https://bugbountyreports.com/reports/10444-https-agent-pfx-object-array-key-collision-allows-mtls2026-10-29 https://bugbountyreports.com/reports/10448-https-agent-tls-session-reuse-skips-hostname-verification2026-10-29 https://bugbountyreports.com/reports/445-https-is-not-enforced-for-objects-stored-by-hackerone-on2026-10-29 https://bugbountyreports.com/reports/4257-https-is-not-validating-tls-mac-codes2026-10-29 https://bugbountyreports.com/reports/10384-https-proxy-connection-reuse-lets-one-easy-handle-inherit2026-10-29 https://bugbountyreports.com/reports/6891-https-is-vulnerable-to-cve-2020-34522026-10-29 https://bugbountyreports.com/reports/5891-https-is-vulnerable-to-cve-2020-3452-read-only-path2026-10-29 https://bugbountyreports.com/reports/6126-https-vulnerable-to-cve-2020-3187-unauthenticated-arbitrary2026-10-29 https://bugbountyreports.com/reports/6303-https-vulnerable-to-cve-2020-3187-unauthenticated-arbitrary2026-10-29 https://bugbountyreports.com/reports/7220-https-vulnerable-to-cve-2013-3827-directory-traversal2026-10-29 https://bugbountyreports.com/reports/4596-https-impacted-by-dnn-imagehandler-ssrf2026-10-29 https://bugbountyreports.com/reports/4565-https-vulnerable-to-cve-2018-0296-cisco-asa-path-traversal2026-10-29 https://bugbountyreports.com/reports/50-https-concrete5-org-heartbleed-attack-cve-2014-01602026-10-29 https://bugbountyreports.com/reports/5173-https-help-nextcloud-com-web-cache-poisoning-attack2026-10-29 https://bugbountyreports.com/reports/4256-https-mathfacts-khanacademy-org-includes-code-from2026-10-29 https://bugbountyreports.com/reports/1273-https-newsletter-nextcloud-com-directory-listening-and2026-10-29 https://bugbountyreports.com/reports/231-https-polldaddy-com-storage-swf-xss2026-10-29 https://bugbountyreports.com/reports/2151-https-portal-nextcloud-com-htaccess-file-is-readable2026-10-29 https://bugbountyreports.com/reports/6370-https-publishers-basicattentiontoken-org-favicon-ico-is2026-10-29 https://bugbountyreports.com/reports/2849-https-secure-gravatar-com2026-10-29 https://bugbountyreports.com/reports/9509-https-srcds-valve-net-find-is-leaking-server-config-api-keys2026-10-29 https://bugbountyreports.com/reports/6809-https-themes-shopify-com-host-header-web-cache-poisoning2026-10-29 https://bugbountyreports.com/reports/2643-https-wakatime-com-website-csp-script-src-includes-unsafe2026-10-29 https://bugbountyreports.com/reports/1348-https-windsor-shopify-com-takeover2026-10-29 https://bugbountyreports.com/reports/58-https-www-khanacademy-org-coach-reports-activity-xss2026-10-29 https://bugbountyreports.com/reports/59-https-www-khanacademy-org-login-open-redirect2026-10-29 https://bugbountyreports.com/reports/8724-https-www-wotif-com-vc-blog-info-php-script-is-prone-to2026-10-29 https://bugbountyreports.com/reports/2689-https-xmpp-nextcloud-com-www-google-com-allows-open-redirect2026-10-29 https://bugbountyreports.com/reports/6421-hyper-link-injection-while-signup2026-10-29 https://bugbountyreports.com/reports/7919-hyper-link-injection-while-signup2026-10-29 https://bugbountyreports.com/reports/1529-hyperlink-injection-in-friend-invitation-emails2026-10-29 https://bugbountyreports.com/reports/1603-hyperlink-injection-in-friend-invitation-emails2026-10-29 https://bugbountyreports.com/reports/6314-hyperlink-injection-on-email-invitation2026-10-29 https://bugbountyreports.com/reports/634-i-can-delete-any-airbnb-users-symbol2026-10-29 https://bugbountyreports.com/reports/8284-i-found-another-way-to-bypass-cloudflare-warp-lock2026-10-29 https://bugbountyreports.com/reports/5917-i-d-o-r-to-edit-all-user-s-credit-card-information-partial2026-10-29 https://bugbountyreports.com/reports/5918-i-d-o-r-to-order-book-buy-reserve-on-yelp-for-free2026-10-29 https://bugbountyreports.com/reports/10291-ibm-aspera-http-gateway-stores-sensitive-information-in2026-10-29 https://bugbountyreports.com/reports/9204-ibm-maximo-asset-management-could-allow-a-remote-attacker2026-10-29 https://bugbountyreports.com/reports/9622-ibm-openpages-vulnerable-to-exposure-of-sensitive2026-10-29 https://bugbountyreports.com/reports/4819-iconv-function-missing-string-length-check2026-10-29 https://bugbountyreports.com/reports/9455-id4me-does-not-validate-signature-or-expiration2026-10-29 https://bugbountyreports.com/reports/9376-id4me-feature-of-openid-connect-app-available-even-when2026-10-29 https://bugbountyreports.com/reports/7710-identify-the-mobile-number-of-a-twitter-user2026-10-29 https://bugbountyreports.com/reports/6398-identify-unique-user-id-of-all-the-profiles2026-10-29 https://bugbountyreports.com/reports/2920-identity-login-page-redirect-can-be-manipulated2026-10-29 https://bugbountyreports.com/reports/3033-idns-displayed-in-unicode-in-messages-about-talk-sections2026-10-29 https://bugbountyreports.com/reports/7630-idor2026-10-29 https://bugbountyreports.com/reports/3398-idor-ability-to-view-unlisted-products2026-10-29 https://bugbountyreports.com/reports/8918-idor-delete-all-licenses-and-certifications-from-users2026-10-29 https://bugbountyreports.com/reports/8202-idor-delete-technical-skill-assessment-result-gained-badges2026-10-29 https://bugbountyreports.com/reports/7679-idor-delete-users-saved-projects2026-10-29 https://bugbountyreports.com/reports/1723-idor-disable-sharing2026-10-29 https://bugbountyreports.com/reports/9342-idor-leaking-of-team-data-name-email-id-member-id-via-post2026-10-29 https://bugbountyreports.com/reports/7435-idor-other-user-s-delivery-address-disclosed2026-10-29 https://bugbountyreports.com/reports/9998-idor-scheduled-data-leak-to-other-accounts-by-projectid2026-10-29 https://bugbountyreports.com/reports/8970-idor-send-a-message-on-behalf-of-other-user2026-10-29 https://bugbountyreports.com/reports/9478-idor-modify-other-users-demographic-details2026-10-29 https://bugbountyreports.com/reports/8211-idor-mtnmobad-mtnbusiness-com-ng2026-10-29 https://bugbountyreports.com/reports/2625-idor-partners-shopify-com-user-with-only-manage-apps2026-10-29 https://bugbountyreports.com/reports/6231-idor-account-takeover-unauthenticated2026-10-29 https://bugbountyreports.com/reports/8061-idor-allowing-to-read-another-user-s-token-on-the-social2026-10-29 https://bugbountyreports.com/reports/8906-idor-allows-an-attacker-to-delete-anyone-s-featured-photo2026-10-29 https://bugbountyreports.com/reports/8195-idor-allows-an-attacker-to-modify-the-links-of-any-user2026-10-29 https://bugbountyreports.com/reports/9252-idor-allows-information-disclosure2026-10-29 https://bugbountyreports.com/reports/10559-idor-allows-user-to-access-report-details-via-reference2026-10-29 https://bugbountyreports.com/reports/8253-idor-allows-viewer-to-delete-bin-s-files2026-10-29 https://bugbountyreports.com/reports/4289-idor-and-statistics-leakage-in-orders2026-10-29 https://bugbountyreports.com/reports/6275-idor-at-media-code-when-addings-media-to-questions2026-10-29 https://bugbountyreports.com/reports/5525-idor-at-https-account-mackeeper-com-at-load-reports-profile2026-10-29 https://bugbountyreports.com/reports/5859-idor-at-https-cpanel-hostinger-com-billing-change-order2026-10-29 https://bugbountyreports.com/reports/7675-idor-at-https-demo-sftool-gov-twshome-scorecardmanage-via2026-10-29 https://bugbountyreports.com/reports/6568-idor-at-https-fast-trychameleon-com-observe-v2-profiles-via2026-10-29 https://bugbountyreports.com/reports/9628-idor-at-mtnmobad-mtnbusiness-com-ng-leads-to-pii-leakage2026-10-29 https://bugbountyreports.com/reports/6840-idor-at-training-smartpay-gsa-gov-reports-quizzes-taken-by2026-10-29 https://bugbountyreports.com/reports/4465-idor-bug-to-see-hidden-slowvote-of-any-user-even-when-you2026-10-29 https://bugbountyreports.com/reports/1714-idor-causing-deletion-of-any-account2026-10-29 https://bugbountyreports.com/reports/2550-idor-create-accounts-and-verify-them-with-original-account2026-10-29 https://bugbountyreports.com/reports/7652-idor-delete-any-tickets-on-ads-tiktok-com2026-10-29 https://bugbountyreports.com/reports/514-idor-expire-other-user-sessions2026-10-29 https://bugbountyreports.com/reports/9619-idor-exposes-all-machine-learning-models2026-10-29 https://bugbountyreports.com/reports/10135-idor-exposes-pii-of-tens-of-thousands-of-users-and2026-10-29 https://bugbountyreports.com/reports/8457-idor-for-changing-privacy-settings-on-any-memories2026-10-29 https://bugbountyreports.com/reports/5906-idor-for-firstpromoter-service2026-10-29 https://bugbountyreports.com/reports/7644-idor-in-external-status-check-api-leaks-data-about-any2026-10-29 https://bugbountyreports.com/reports/4022-idor-in-activatefuelcard-id-allows-bulk-lookup-of-driver2026-10-29 https://bugbountyreports.com/reports/8271-idor-in-api-applications-able-to-see-any-api-token-leads-to2026-10-29 https://bugbountyreports.com/reports/9676-idor-in-backup-recovery-functionality2026-10-29 https://bugbountyreports.com/reports/5066-idor-in-bugs-overview-enables-attacker-to-determine-the2026-10-29 https://bugbountyreports.com/reports/4303-idor-in-changing-shared-file-name2026-10-29 https://bugbountyreports.com/reports/8877-idor-in-channel-id-leads-to-customer-email-disclosure-on2026-10-29 https://bugbountyreports.com/reports/8745-idor-in-family-pairing-api2026-10-29 https://bugbountyreports.com/reports/6068-idor-in-https-3d-cs-money2026-10-29 https://bugbountyreports.com/reports/7299-idor-in-https-moneybird-com-user-accountant-company-edit2026-10-29 https://bugbountyreports.com/reports/5379-idor-in-marketing-calendar-tool2026-10-29 https://bugbountyreports.com/reports/3187-idor-in-merchant-rbmonkey-com-allows-deleting-eshops-of2026-10-29 https://bugbountyreports.com/reports/9220-idor-in-one-subdomain-of-change-information-of-pets-without2026-10-29 https://bugbountyreports.com/reports/4491-idor-in-report-csv-export-discloses-the-ids-of-custom-field2026-10-29 https://bugbountyreports.com/reports/8017-idor-in-report-download-functionality-on-ads-tiktok-com2026-10-29 https://bugbountyreports.com/reports/5259-idor-in-semrush-academy2026-10-29 https://bugbountyreports.com/reports/8348-idor-in-stats-api-endpoint-allows-viewing-equity-or-net2026-10-29 https://bugbountyreports.com/reports/8622-idor-in-talentmap-api-can-be-abused-to-enumerate-personal2026-10-29 https://bugbountyreports.com/reports/5441-idor-in-the-https-market-semrush-com2026-10-29 https://bugbountyreports.com/reports/3384-idor-in-treat-subscriptions2026-10-29 https://bugbountyreports.com/reports/8926-idor-in-upload-videos-of-a-channel-on-https-video-ibm-com2026-10-29 https://bugbountyreports.com/reports/8135-idor-lead-to-view-delete-create-api-key-htus2026-10-29 https://bugbountyreports.com/reports/5400-idor-leading-to-downloading-of-any-attachment2026-10-29 https://bugbountyreports.com/reports/9414-idor-leading-unauthenticated-attacker-to-download-documents2026-10-29 https://bugbountyreports.com/reports/8097-idor-leads-to-account-takeover-without-user-interaction2026-10-29 https://bugbountyreports.com/reports/6267-idor-leads-to-edit-anyone-s-blogs-websites2026-10-29 https://bugbountyreports.com/reports/6854-idor-leads-to-leak-analytics-of-any-restaurant2026-10-29 https://bugbountyreports.com/reports/6705-idor-leads-to-leakage-an-login-information2026-10-29 https://bugbountyreports.com/reports/9480-idor-leads-to-pii-leak2026-10-29 https://bugbountyreports.com/reports/6943-idor-leads-to-see-analytics-of-loyalty-program-in-any2026-10-29 https://bugbountyreports.com/reports/9603-idor-leads-to-user-profile-modification-https-mtnmobad2026-10-29 https://bugbountyreports.com/reports/9479-idor-leads-to-view-other-user-biographical-details-possible2026-10-29 https://bugbountyreports.com/reports/8219-idor-leaking-pii-data-via-vendorid-parameter2026-10-29 https://bugbountyreports.com/reports/9428-idor-may-allow-access-to-non-public-photos2026-10-29 https://bugbountyreports.com/reports/8308-idor-on-htus2026-10-29 https://bugbountyreports.com/reports/9809-idor-on-ads-tiktok-com-allows-unauthorized-product-addition2026-10-29 https://bugbountyreports.com/reports/9254-idor-on-delete-email-address-features2026-10-29 https://bugbountyreports.com/reports/5483-idor-on-deleting-drafts-on-https-apps-topcoder-com-wiki2026-10-29 https://bugbountyreports.com/reports/4574-idor-on-dod-website-exposes-ftp-users-and-passes-linked-to2026-10-29 https://bugbountyreports.com/reports/9207-idor-on-graphql-queries-billingdocumentdownload-and2026-10-29 https://bugbountyreports.com/reports/2797-idor-on-hackerone-feedback-review2026-10-29 https://bugbountyreports.com/reports/6803-idor-on-https-via-post-uid-enables-database-scraping2026-10-29 https://bugbountyreports.com/reports/9952-idor-on-in-app-hardcoded-zombie-endpoint2026-10-29 https://bugbountyreports.com/reports/6316-idor-on-notes-to-html-injection2026-10-29 https://bugbountyreports.com/reports/3969-idor-on-partners-uber-com-allows-for-a-driver-to-override2026-10-29 https://bugbountyreports.com/reports/839-idor-on-remoing-share2026-10-29 https://bugbountyreports.com/reports/5790-idor-on-stocky-application-low-stock-varient-settings2026-10-29 https://bugbountyreports.com/reports/8155-idor-on-tagged-people2026-10-29 https://bugbountyreports.com/reports/5486-idor-on-the-delete-comments2026-10-29 https://bugbountyreports.com/reports/8089-idor-on-tiktok-ads-endpoint2026-10-29 https://bugbountyreports.com/reports/8063-idor-on-tiktok-seller2026-10-29 https://bugbountyreports.com/reports/5488-idor-on-update-user-preferences2026-10-29 https://bugbountyreports.com/reports/5499-idor-on-upload-profile-functionality2026-10-29 https://bugbountyreports.com/reports/7245-idor-on-www-acronis-com-api-lead-to-steal-private-business2026-10-29 https://bugbountyreports.com/reports/8106-idor-payments-status2026-10-29 https://bugbountyreports.com/reports/7480-idor-the-ability-to-view-support-tickets-of-any-user-on2026-10-29 https://bugbountyreports.com/reports/6074-idor-to-account-takeover-on-https-index-html2026-10-29 https://bugbountyreports.com/reports/9190-idor-to-account-takeover-on-post-to-by-changing-member-id2026-10-29 https://bugbountyreports.com/reports/4399-idor-to-add-secondary-users-in-www-paypal-com2026-10-29 https://bugbountyreports.com/reports/2955-idor-to-cancel-any-table-booking-and-leak-sensitive2026-10-29 https://bugbountyreports.com/reports/3676-idor-to-delete-images-from-other-stores2026-10-29 https://bugbountyreports.com/reports/9119-idor-to-delete-profile-images-in-https2026-10-29 https://bugbountyreports.com/reports/10232-idor-to-make-someone-attend-or-leave-an-event2026-10-29 https://bugbountyreports.com/reports/7373-idor-to-pay-less-for-coin-purchases-on-oauth-reddit-com-via2026-10-29 https://bugbountyreports.com/reports/4336-idor-to-update-folder-name-of-other-user2026-10-29 https://bugbountyreports.com/reports/7486-idor-to-view-order-information-of-users-and-personal2026-10-29 https://bugbountyreports.com/reports/3697-idor-to-view-user-order-information2026-10-29 https://bugbountyreports.com/reports/2843-idor-unsubscribe-anyone-from-nextclouds-newsletters-by2026-10-29 https://bugbountyreports.com/reports/7466-idor-vulnerability-price-manipulation2026-10-29 https://bugbountyreports.com/reports/9806-idor-vulnerability-allowing-unauthorized-profile-picture2026-10-29 https://bugbountyreports.com/reports/9942-idor-vulnerability-at-addtagtoassets-operation-name2026-10-29 https://bugbountyreports.com/reports/10071-idor-vulnerability-in-banner-deletion2026-10-29 https://bugbountyreports.com/reports/9040-idor-vulnerability-in-unreleased-hackerone-copilot-feature2026-10-29 https://bugbountyreports.com/reports/9638-idor-vulnerability-leads-to-deleting-message-after-leaving2026-10-29 https://bugbountyreports.com/reports/9255-idor-vulnerability-reveals-additional-information2026-10-29 https://bugbountyreports.com/reports/6317-idor-when-creating-app-on-platform-streamlabs-com-api-v12026-10-29 https://bugbountyreports.com/reports/6269-idor-when-editing-email-leads-to-account-takeover-on-atavist2026-10-29 https://bugbountyreports.com/reports/8428-idor-when-editing-email-leads-to-mass-full-atos-account2026-10-29 https://bugbountyreports.com/reports/6279-idor-when-editing-users-leads-to-account-takeover-without2026-10-29 https://bugbountyreports.com/reports/6277-idor-when-moving-contents-at-crowdsignal2026-10-29 https://bugbountyreports.com/reports/7050-idor-while-uploading-attachments-at2026-10-29 https://bugbountyreports.com/reports/5826-idor-with-geolocation-data-not-stripped-from-images2026-10-29 https://bugbountyreports.com/reports/918-idor-activate-mopub-on-different-organizations-steal-api2026-10-29 https://bugbountyreports.com/reports/9935-idor-account-deletion-via-session-misbinding-attacker-can2026-10-29 https://bugbountyreports.com/reports/5831-idor-adding-contacts-to-other-user-groups2026-10-29 https://bugbountyreports.com/reports/8953-idor-authorization-bypass-in-lockreport-mutation-for-public2026-10-29 https://bugbountyreports.com/reports/10314-idor-autotranslate-translatemessage-full-message-content2026-10-29 https://bugbountyreports.com/reports/7717-idor-leak-buyer-info-publish-hide-foreign-comments2026-10-29 https://bugbountyreports.com/reports/2083-ie-11-self-xss-on-jira-integration-preview-base-link2026-10-29 https://bugbountyreports.com/reports/3912-ie-only-stored-cross-site-scripting-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/2431-ie-search-xss2026-10-29 https://bugbountyreports.com/reports/8972-if-rate-limit-is-hit-ip-address-is-leaked-to-anyone-who2026-10-29 https://bugbountyreports.com/reports/264-ifxss-image-filename-xss-by-creating-a-new-photo-gallery2026-10-29 https://bugbountyreports.com/reports/4985-illegal-account-registration-in2026-10-29 https://bugbountyreports.com/reports/4681-illegal-write-access-through-locale-methods2026-10-29 https://bugbountyreports.com/reports/4751-illegal-write-read-access-caused-by-gdimageaaline-overflow2026-10-29 https://bugbountyreports.com/reports/5714-image-injection-br-games-info-may-lead-to-phishing-attacks2026-10-29 https://bugbountyreports.com/reports/5724-image-injection-screenshot-viewer-responsive-image-another2026-10-29 https://bugbountyreports.com/reports/5722-image-injection-on-bully-anniversaryedition-may-lead-to2026-10-29 https://bugbountyreports.com/reports/5723-image-injection-on-screenshot-viewer-responsive-image-fix2026-10-29 https://bugbountyreports.com/reports/5715-image-injection-on-bully-anniversaryedition-may-lead-to-fb2026-10-29 https://bugbountyreports.com/reports/5622-image-injection-on-www-rockstargames-com-screenshot-viewer2026-10-29 https://bugbountyreports.com/reports/5708-image-injection-vulnerability-affecting-www-rockstargames2026-10-29 https://bugbountyreports.com/reports/5707-image-injection-vulnerability-in-www-rockstargames-com-iv2026-10-29 https://bugbountyreports.com/reports/5719-image-injection-vulnerability-on-bully-screens2026-10-29 https://bugbountyreports.com/reports/5718-image-injection-vulnerability-on-screenshot-viewer2026-10-29 https://bugbountyreports.com/reports/5706-image-injection-xss-vulnerability-affecting-https-www2026-10-29 https://bugbountyreports.com/reports/2814-image-lib-unescaped-file-path2026-10-29 https://bugbountyreports.com/reports/7382-image-queue-default-key-of-none-and-graphql-unhandled-type2026-10-29 https://bugbountyreports.com/reports/1527-image-upload-path-disclosure2026-10-29 https://bugbountyreports.com/reports/6101-imagecolormatch-out-of-bounds-write-on-heap2026-10-29 https://bugbountyreports.com/reports/4686-imagecropauto-out-of-bounds-access2026-10-29 https://bugbountyreports.com/reports/1911-imagefilltoborder-stackoverflow-on-truecolor-images2026-10-29 https://bugbountyreports.com/reports/4682-imagegammacorrect-allows-arbitrary-write-access2026-10-29 https://bugbountyreports.com/reports/4684-imagegif-output-out-of-bounds-access2026-10-29 https://bugbountyreports.com/reports/9941-imageid-format-injection-in-image-upload-endpoint2026-10-29 https://bugbountyreports.com/reports/3203-imagemagick-gif-coder-vulnerability-leading-to-memory2026-10-29 https://bugbountyreports.com/reports/3557-imagemagick-gif-coder-vulnerability-leading-to-memory2026-10-29 https://bugbountyreports.com/reports/2928-images-and-subtitles-leakage-from-private-videos2026-10-29 https://bugbountyreports.com/reports/4750-imagescale-out-of-bounds-read2026-10-29 https://bugbountyreports.com/reports/4752-imap-rfc822-parse-headers-gs-violation2026-10-29 https://bugbountyreports.com/reports/7060-imap-starttls-stripping-attack-cve-2016-07722026-10-29 https://bugbountyreports.com/reports/896-imgur-dev-environments-facing-the-internet2026-10-29 https://bugbountyreports.com/reports/8721-impact-of-using-the-php-function-phpinfo-on-system-security2026-10-29 https://bugbountyreports.com/reports/3935-imperfect-csrf-to-overwrite-server-config-at-go-admin2026-10-29 https://bugbountyreports.com/reports/2818-impersonation-attack-via-broken-link-in-resellers-page2026-10-29 https://bugbountyreports.com/reports/9516-impersonation-in-sequential-messages2026-10-29 https://bugbountyreports.com/reports/7703-impersonation-of-tiktok-account-via-broken-link-in-tiktok2026-10-29 https://bugbountyreports.com/reports/2675-impersonation-of-wakatime-user-using-invitation2026-10-29 https://bugbountyreports.com/reports/5857-implement-rate-limit-on-internal-password-checks2026-10-29 https://bugbountyreports.com/reports/125-import-emails-from-gmail-are-activate-xss2026-10-29 https://bugbountyreports.com/reports/3466-import-file-converter-local-file-inclusion2026-10-29 https://bugbountyreports.com/reports/3930-import-of-repositories-from-github-is-tied-to-username2026-10-29 https://bugbountyreports.com/reports/9371-import-convert-user-file-exposure-leading-to-logins2026-10-29 https://bugbountyreports.com/reports/4439-important-information-leaked-on-github2026-10-29 https://bugbountyreports.com/reports/9446-important-apache-http-server-may-use-exploitable-malicious2026-10-29 https://bugbountyreports.com/reports/9448-important-apache-http-server-on-windows-unc-ssrf-cve-20242026-10-29 https://bugbountyreports.com/reports/9447-important-apache-http-server-weakness-in-mod-rewrite-when2026-10-29 https://bugbountyreports.com/reports/9449-important-apache-http-server-weakness-with-encoded-question2026-10-29 https://bugbountyreports.com/reports/9445-important-apache-http-server-crash-resulting-in-denial-of2026-10-29 https://bugbountyreports.com/reports/9559-important-apache-http-server-ssrf-with-mod-rewrite-in2026-10-29 https://bugbountyreports.com/reports/5048-importing-gitlab-project-archives-can-replace-uploads-of2026-10-29 https://bugbountyreports.com/reports/3524-improper-access-check-by-kit-leads-to-controlling2026-10-29 https://bugbountyreports.com/reports/10200-improper-access-control-access-to-active-hiring-premium2026-10-29 https://bugbountyreports.com/reports/8658-improper-access-control-generic2026-10-29 https://bugbountyreports.com/reports/6788-improper-access-control-generic-on-https2026-10-29 https://bugbountyreports.com/reports/9038-improper-access-control-allows-otp-bypass2026-10-29 https://bugbountyreports.com/reports/9958-improper-access-control-allows-trip-hijacking-and-passenger2026-10-29 https://bugbountyreports.com/reports/7581-improper-access-control-for-users-with-expired-password2026-10-29 https://bugbountyreports.com/reports/10273-improper-access-control-in-fizzy-do-import-flow-allows2026-10-29 https://bugbountyreports.com/reports/8466-improper-access-control-in-ali-express-importer2026-10-29 https://bugbountyreports.com/reports/5554-improper-access-control-in-buddypress-core-allows-reply2026-10-29 https://bugbountyreports.com/reports/6257-improper-access-control-in-line-timeline-api-that-returns-a2026-10-29 https://bugbountyreports.com/reports/6864-improper-access-control-in-place-for-member-only-groups-via2026-10-29 https://bugbountyreports.com/reports/2924-improper-access-control-lead-to-delete-anyone-comment2026-10-29 https://bugbountyreports.com/reports/3412-improper-access-control-on-adding-a-register-to-an-outlet2026-10-29 https://bugbountyreports.com/reports/6915-improper-access-control-on-lark-footer-feature2026-10-29 https://bugbountyreports.com/reports/8905-improper-access-control-on-linkedin-page2026-10-29 https://bugbountyreports.com/reports/8582-improper-access-control-on-media-wiki-allows-an-attackers2026-10-29 https://bugbountyreports.com/reports/3621-improper-access-control-on-onelogin-in-multi-layered2026-10-29 https://bugbountyreports.com/reports/6259-improper-access-control-to-messages-of-social-app2026-10-29 https://bugbountyreports.com/reports/2263-improper-access-control-when-an-added-email-address-is2026-10-29 https://bugbountyreports.com/reports/6626-improper-access-controls-allow-pii-leak-via2026-10-29 https://bugbountyreports.com/reports/9778-improper-access-controls-admin-path2026-10-29 https://bugbountyreports.com/reports/9519-improper-acl-in-message-starring2026-10-29 https://bugbountyreports.com/reports/7253-improper-authentication-any-user-can-login-as-other-user2026-10-29 https://bugbountyreports.com/reports/9284-improper-authentication-login-without-registration-with-any2026-10-29 https://bugbountyreports.com/reports/9801-improper-authentication-allows-making-appeals-as-other-users2026-10-29 https://bugbountyreports.com/reports/10143-improper-authentication-allows-making-requests-as-other2026-10-29 https://bugbountyreports.com/reports/3458-improper-authentication-in-vimeo-s-api-versions-endpoint2026-10-29 https://bugbountyreports.com/reports/8815-improper-authentication-inside-the-rockstar-games-launcher2026-10-29 https://bugbountyreports.com/reports/9246-improper-authentication-on-alertmanager-instance2026-10-29 https://bugbountyreports.com/reports/7701-improper-authentication-via-previous-backup-code-login2026-10-29 https://bugbountyreports.com/reports/5180-improper-authorization2026-10-29 https://bugbountyreports.com/reports/7535-improper-authorization-allows-disclosing-users-notification2026-10-29 https://bugbountyreports.com/reports/10055-improper-authorization-leads-to-editor-can-toggle-admin2026-10-29 https://bugbountyreports.com/reports/10054-improper-authorization-leads-to-editor-can-toggle-admin2026-10-29 https://bugbountyreports.com/reports/6955-improper-authorization-on-api-as-v1-credentials-allows-any2026-10-29 https://bugbountyreports.com/reports/7138-improper-authorization-on-api-as-v1-credentials-for-dev2026-10-29 https://bugbountyreports.com/reports/10082-improper-bot-authentication-allows-to-impersonate-any-user2026-10-29 https://bugbountyreports.com/reports/10635-improper-certificate-validation-for-non-canonical-ipv42026-10-29 https://bugbountyreports.com/reports/6245-improper-confidentiality-protection-of-server-side2026-10-29 https://bugbountyreports.com/reports/2780-improper-cookie-expiration-cookies-expiration-set-to-future2026-10-29 https://bugbountyreports.com/reports/8760-improper-csrf-token-validation-allows-attackers-to-access2026-10-29 https://bugbountyreports.com/reports/7987-improper-deep-link-validation2026-10-29 https://bugbountyreports.com/reports/5333-improper-email-address-verifiation-while-saving-account2026-10-29 https://bugbountyreports.com/reports/9902-improper-error-handling-in-async-cryptographic-operations2026-10-29 https://bugbountyreports.com/reports/229-improper-filtering-of-classes-used-in-codeblocks-in-markdown2026-10-29 https://bugbountyreports.com/reports/6672-improper-generating-of-access-link-at-go-larksuite-com2026-10-29 https://bugbountyreports.com/reports/3767-improper-handling-of-chunked-data-request-in-sapi-apache2-c2026-10-29 https://bugbountyreports.com/reports/8541-improper-handling-of-null-bytes-in-github-actions-runner2026-10-29 https://bugbountyreports.com/reports/4955-improper-handling-of-payment-callback-allows-topping-up-a2026-10-29 https://bugbountyreports.com/reports/9163-improper-handling-of-request-urls-in-nextcloud-guests2026-10-29 https://bugbountyreports.com/reports/7280-improper-handling-of-untypical-characters-in-domain-names2026-10-29 https://bugbountyreports.com/reports/9229-improper-handling-of-wildcards-in-allow-fs-read-and-allow2026-10-29 https://bugbountyreports.com/reports/9373-improper-handling-of-wildcards-in-allow-fs-read-and-allow2026-10-29 https://bugbountyreports.com/reports/3150-improper-host-detection-during-team-up-on-tweetdeck-twitter2026-10-29 https://bugbountyreports.com/reports/9955-improper-http-header-block-termination-in-llhttp2026-10-29 https://bugbountyreports.com/reports/3035-improper-implementation-of-password-strength-checker2026-10-29 https://bugbountyreports.com/reports/7757-improper-implementation-of-sdk-allows-universal-xss-in2026-10-29 https://bugbountyreports.com/reports/10408-improper-input-validation-http-response-parser2026-10-29 https://bugbountyreports.com/reports/10517-improper-input-validation-and-integer-overflow-in2026-10-29 https://bugbountyreports.com/reports/10553-improper-input-validation-in-emoji-field-leads-to-sidebar2026-10-29 https://bugbountyreports.com/reports/7251-improper-input-validation-in-projects-leads-to-fully-deny2026-10-29 https://bugbountyreports.com/reports/10303-improper-input-validation-on-exported-deep-link-handler2026-10-29 https://bugbountyreports.com/reports/7181-improper-input-validation-on-https-oberlo-image-proxy2026-10-29 https://bugbountyreports.com/reports/6390-improper-input-validation-on-user-s-location-on-put2026-10-29 https://bugbountyreports.com/reports/6471-improper-input-validation-on-user-s-location-on-put2026-10-29 https://bugbountyreports.com/reports/7888-improper-input-size-validation-on-the-user-new-session-name2026-10-29 https://bugbountyreports.com/reports/6244-improper-integrity-protection-of-server-side-encryption-keys2026-10-29 https://bugbountyreports.com/reports/3216-improper-markup-sanitisation-in-simplenote-android2026-10-29 https://bugbountyreports.com/reports/3092-improper-markup-sanitization2026-10-29 https://bugbountyreports.com/reports/5503-improper-neutralization-of-input-during-web-page-generation2026-10-29 https://bugbountyreports.com/reports/7542-improper-neutralization-of-script-related-html-tags-in-a2026-10-29 https://bugbountyreports.com/reports/2268-improper-password-reset-policy-on-https-hosted-weblate-org2026-10-29 https://bugbountyreports.com/reports/5281-improper-protection-of-filecontentprovider2026-10-29 https://bugbountyreports.com/reports/8870-improper-restriction-of-excessive-authentication-attempts2026-10-29 https://bugbountyreports.com/reports/10067-improper-sanitisation-of-input-in-the-settings-could-cause2026-10-29 https://bugbountyreports.com/reports/7137-improper-sanitization-leads-to-xss-fire-on-admin-panel2026-10-29 https://bugbountyreports.com/reports/8969-improper-santization-of-edit-in-list-feature-at-twitter2026-10-29 https://bugbountyreports.com/reports/3542-improper-session-handling-on-web-browsers2026-10-29 https://bugbountyreports.com/reports/9882-improper-session-invalidation-auto-sign-in-without2026-10-29 https://bugbountyreports.com/reports/18-improper-session-management2026-10-29 https://bugbountyreports.com/reports/4401-improper-session-management-can-cause-account-takeover2026-10-29 https://bugbountyreports.com/reports/8783-improper-user-validation-on-mentions-and-hashtags2026-10-29 https://bugbountyreports.com/reports/3836-improper-uuid-validation-results-in-bypass-of-4198962026-10-29 https://bugbountyreports.com/reports/4027-improper-validation-allows-user-to-unlock-zomato-gold2026-10-29 https://bugbountyreports.com/reports/7334-improper-validation-at-partners-login2026-10-29 https://bugbountyreports.com/reports/2715-improper-validation-of-parameters-while-creating-issues2026-10-29 https://bugbountyreports.com/reports/2489-improper-validation-of-unicode-characters2026-10-29 https://bugbountyreports.com/reports/2735-improper-validation-of-unicode-characters2026-10-29 https://bugbountyreports.com/reports/3058-improper-validation-of-unicode-characters2026-10-29 https://bugbountyreports.com/reports/2743-improper-validation-of-unicode-characters-32026-10-29 https://bugbountyreports.com/reports/2741-improper-validation-of-unicode-characters-still-not-fixed2026-10-29 https://bugbountyreports.com/reports/2742-improper-validation-of-unicode-characters-still-not-fixed-22026-10-29 https://bugbountyreports.com/reports/686-improper-verification-of-email-address-while-saving-account2026-10-29 https://bugbountyreports.com/reports/416-improper-way-of-validating-a-program2026-10-29 https://bugbountyreports.com/reports/21-improperly-implemented-password-recovery-link-functionality2026-10-29 https://bugbountyreports.com/reports/470-improperly-validated-fields-allows-injection-of-arbitrary2026-10-29 https://bugbountyreports.com/reports/894-improve-signals-in-reputation2026-10-29 https://bugbountyreports.com/reports/613-improved-fix-for-bug-69545-integer-overflow-in-ftp-genlist2026-10-29 https://bugbountyreports.com/reports/2672-in-app-purchase-hack2026-10-29 https://bugbountyreports.com/reports/4870-in-correct-casting-from-size-t-to-int-lead-to-heap-overflow2026-10-29 https://bugbountyreports.com/reports/4393-in-dockerized-environments-failing-to-read-config-php2026-10-29 https://bugbountyreports.com/reports/636-in-markdown-parsing-things-like-danlec-and-46072-after2026-10-29 https://bugbountyreports.com/reports/7554-in-orginization-stored-xss-using-location-larksuite-survey2026-10-29 https://bugbountyreports.com/reports/1169-inadequate-access-controls-in-vote-functionality2026-10-29 https://bugbountyreports.com/reports/8613-inadequate-encryption-strength-in-nodejs-current-reads2026-10-29 https://bugbountyreports.com/reports/4873-inadequate-error-handling-in-bzread2026-10-29 https://bugbountyreports.com/reports/770-inadequate-input-validation-on-api-endpoint-leading-to-self2026-10-29 https://bugbountyreports.com/reports/9359-inadequate-redaction-exposes-sensitive-information-via-the2026-10-29 https://bugbountyreports.com/reports/2116-inadequate-dangerous-jquery-behavior2026-10-29 https://bugbountyreports.com/reports/4807-inappropriate-url-parsing-may-cause-security-risk2026-10-29 https://bugbountyreports.com/reports/4809-inappropriately-parsing-http-response-leads-to-php-segment2026-10-29 https://bugbountyreports.com/reports/1566-incoming-email-hijacking-on-sc-cdn-net2026-10-29 https://bugbountyreports.com/reports/10532-incomplete-fix-for-cve-2022-23915-mercurial-argument2026-10-29 https://bugbountyreports.com/reports/8363-incomplete-fix-for-cve-2022-32209-xss-in-rails-html2026-10-29 https://bugbountyreports.com/reports/10286-incomplete-fix-for-cve-2026-21637-loadsni-in-tls-wrap-js2026-10-29 https://bugbountyreports.com/reports/10537-incomplete-input-sanitization-in-codeinterpreter-install2026-10-29 https://bugbountyreports.com/reports/2057-incomplete-or-no-cache-control-and-pragma-http-header-set2026-10-29 https://bugbountyreports.com/reports/9724-incomplete-sanitization-in-svg-preview-provider2026-10-29 https://bugbountyreports.com/reports/7698-incorrect-authorization-checks-in-include-findusers-php2026-10-29 https://bugbountyreports.com/reports/7645-incorrect-authorization-to-the-intelbot-service-leading-to2026-10-29 https://bugbountyreports.com/reports/1832-incorrect-code-generation-when-result-of-node-negate-is-not2026-10-29 https://bugbountyreports.com/reports/1982-incorrect-code-generation-with-redo-inside-node-rescue2026-10-29 https://bugbountyreports.com/reports/9429-incorrect-deep-link-validation-leading-to-unresponsive2026-10-29 https://bugbountyreports.com/reports/3958-incorrect-details-on-oauth-permissions-screen-allows-dms-to2026-10-29 https://bugbountyreports.com/reports/1662-incorrect-detection-of-onion-urls2026-10-29 https://bugbountyreports.com/reports/2695-incorrect-email-content-when-disabling-2fa2026-10-29 https://bugbountyreports.com/reports/2698-incorrect-error-message2026-10-29 https://bugbountyreports.com/reports/2987-incorrect-functionality-of-password-reset-links2026-10-29 https://bugbountyreports.com/reports/4794-incorrect-gc-behavior-in-xxlimited-could-lead-to-use-after2026-10-29 https://bugbountyreports.com/reports/8850-incorrect-handling-of-certain-characters-passed-to-the2026-10-29 https://bugbountyreports.com/reports/2460-incorrect-https-certificate2026-10-29 https://bugbountyreports.com/reports/4935-incorrect-logic-in-mysql-mariadb-protocol-leads-to-remote2026-10-29 https://bugbountyreports.com/reports/3641-incorrect-param-parsing-in-digits-web-authentication2026-10-29 https://bugbountyreports.com/reports/3896-incorrect-permission-assignment-for-critical-resource2026-10-29 https://bugbountyreports.com/reports/9757-incorrect-security-ui-of-files-download-source-on-brave2026-10-29 https://bugbountyreports.com/reports/1107-increase-number-of-bugs-by-sending-duplicate-of-your-own2026-10-29 https://bugbountyreports.com/reports/5950-increased-privileges-on-staff-account2026-10-29 https://bugbountyreports.com/reports/7240-index-out-of-bounds-in-protobuf-unmarshalling2026-10-29 https://bugbountyreports.com/reports/7165-index-php-apps-files-sharing-shareinfo-endpoint-is-not2026-10-29 https://bugbountyreports.com/reports/6757-indexing-of-urls-on-the-external-link-warning-pages2026-10-29 https://bugbountyreports.com/reports/5054-india-an-insecure-direct-object-reference-idor-allowed2026-10-29 https://bugbountyreports.com/reports/5419-india-otp-bypass-on-phone-number-verification-for-account2026-10-29 https://bugbountyreports.com/reports/8813-indriver-job-admin-approval-bypass2026-10-29 https://bugbountyreports.com/reports/4500-industry-wide-mitm-vulnerability-impacting-the-jvm-ecosystem2026-10-29 https://bugbountyreports.com/reports/6463-infiltrating-into-grinch-networks-and-saving-christmas2026-10-29 https://bugbountyreports.com/reports/133-infinite-number-of-new-project-creation2026-10-29 https://bugbountyreports.com/reports/1366-infinite-upvoting-downvoting-lockout-bypass-plus-exposed2026-10-29 https://bugbountyreports.com/reports/3646-information-sensitive-data-disclosure-on-some-endpoints2026-10-29 https://bugbountyreports.com/reports/5315-information-can-be-changed-without-a-password2026-10-29 https://bugbountyreports.com/reports/1318-information-disclose2026-10-29 https://bugbountyreports.com/reports/254-information-disclosure2026-10-29 https://bugbountyreports.com/reports/939-information-disclosure2026-10-29 https://bugbountyreports.com/reports/1392-information-disclosure2026-10-29 https://bugbountyreports.com/reports/3357-information-disclosure2026-10-29 https://bugbountyreports.com/reports/9217-information-disclosure2026-10-29 https://bugbountyreports.com/reports/2240-information-disclosure-emails-disclosed-in-response-staging2026-10-29 https://bugbountyreports.com/reports/7140-information-disclosure-feedback-is-accessible-on-public2026-10-29 https://bugbountyreports.com/reports/8957-information-disclosure-pvt-gitlab-issue-disclosing-through2026-10-29 https://bugbountyreports.com/reports/10580-information-disclosure-unauthen-leak-private-content2026-10-29 https://bugbountyreports.com/reports/7264-information-disclosure-2fa-bypass-post-exploitation2026-10-29 https://bugbountyreports.com/reports/7088-information-disclosure-htaccess-accesible-for-public2026-10-29 https://bugbountyreports.com/reports/8002-information-disclosure-google-sales-channel2026-10-29 https://bugbountyreports.com/reports/4611-information-disclosure-can-access-all-s-within-view-portal2026-10-29 https://bugbountyreports.com/reports/89-information-disclosure-directory-structure2026-10-29 https://bugbountyreports.com/reports/238-information-disclosure-fpd-stopthehacker-com2026-10-29 https://bugbountyreports.com/reports/3346-information-disclosure-no-rate-limting-in-forgot-password2026-10-29 https://bugbountyreports.com/reports/215-information-disclosure-phpinfo2026-10-29 https://bugbountyreports.com/reports/4519-information-disclosure-phpinfo2026-10-29 https://bugbountyreports.com/reports/17-information-disclosure-reset-password-token-and-changing2026-10-29 https://bugbountyreports.com/reports/2844-information-disclosure-system-username-in-the-x-amz-meta2026-10-29 https://bugbountyreports.com/reports/3173-information-disclosure-and-privilege-escalation-in-app2026-10-29 https://bugbountyreports.com/reports/7324-information-disclosure-at-cve-2020-141792026-10-29 https://bugbountyreports.com/reports/1653-information-disclosure-at-https-blockchain-atlassian-net2026-10-29 https://bugbountyreports.com/reports/8672-information-disclosure-by-sending-a-gif2026-10-29 https://bugbountyreports.com/reports/9816-information-disclosure-due-to-debug-mode-enabled-at-laravel2026-10-29 https://bugbountyreports.com/reports/9033-information-disclosure-frontpage-configuration-information2026-10-29 https://bugbountyreports.com/reports/5382-information-disclosure-frontpage-configuration-information2026-10-29 https://bugbountyreports.com/reports/9971-information-disclosure-identified-on-ibm-endpoint2026-10-29 https://bugbountyreports.com/reports/1811-information-disclosure-in-skills-call2026-10-29 https://bugbountyreports.com/reports/10184-information-disclosure-in-api-endpoint-users2026-10-29 https://bugbountyreports.com/reports/1463-information-disclosure-in-aws-s3-bucket2026-10-29 https://bugbountyreports.com/reports/5621-information-disclosure-in-https-www-rockstargames-com-search2026-10-29 https://bugbountyreports.com/reports/4639-information-disclosure-in-mmap-module-python-2-7-122026-10-29 https://bugbountyreports.com/reports/6658-information-disclosure-lead-to-disclose-users-private-notes2026-10-29 https://bugbountyreports.com/reports/8389-information-disclosure-leads-to-user-data-leak2026-10-29 https://bugbountyreports.com/reports/5383-information-disclosure-microsoft-iis-server-service-cnf-in2026-10-29 https://bugbountyreports.com/reports/1459-information-disclosure-of-htaccess-file-in-private-server2026-10-29 https://bugbountyreports.com/reports/6533-information-disclosure-of-advertiser-account-on-tiktok-ads2026-10-29 https://bugbountyreports.com/reports/8545-information-disclosure-of-another-company-bug-on-video2026-10-29 https://bugbountyreports.com/reports/6197-information-disclosure-of-garbage-collection-cycle2026-10-29 https://bugbountyreports.com/reports/6369-information-disclosure-of-garbage-collection-cycle-again2026-10-29 https://bugbountyreports.com/reports/5522-information-disclosure-of-internal-php-files-on-mackeeper2026-10-29 https://bugbountyreports.com/reports/9933-information-disclosure-of-metrics-fax-wavecell-com-metrics2026-10-29 https://bugbountyreports.com/reports/4288-information-disclosure-of-secret-key-base-via-encoding2026-10-29 https://bugbountyreports.com/reports/1673-information-disclosure-of-user-by-email-using-buy-widget2026-10-29 https://bugbountyreports.com/reports/2037-information-disclosure-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2041-information-disclosure-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2557-information-disclosure-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2401-information-disclosure-on-demo-weblate-org2026-10-29 https://bugbountyreports.com/reports/3959-information-disclosure-on-https-theendlessweb-com2026-10-29 https://bugbountyreports.com/reports/9883-information-disclosure-on-ibm-training-service-endpoint2026-10-29 https://bugbountyreports.com/reports/9658-information-disclosure-on-password-cancel-endpoint2026-10-29 https://bugbountyreports.com/reports/1619-information-disclosure-on-rate-limit-defense-mechanism2026-10-29 https://bugbountyreports.com/reports/4946-information-disclosure-on-sim-starbucks-com2026-10-29 https://bugbountyreports.com/reports/1719-information-disclosure-on-stun-screenhero-com2026-10-29 https://bugbountyreports.com/reports/7175-information-disclosure-on-tiktok-unplugged-site2026-10-29 https://bugbountyreports.com/reports/5263-information-disclosure-phppgadmin2026-10-29 https://bugbountyreports.com/reports/2633-information-disclosure-same-issue-1760022026-10-29 https://bugbountyreports.com/reports/1743-information-disclosure-through-ds-store-in2026-10-29 https://bugbountyreports.com/reports/5935-information-disclosure-through-debug-at-subscription-https2026-10-29 https://bugbountyreports.com/reports/8099-information-disclosure-through-django-debug-mode2026-10-29 https://bugbountyreports.com/reports/4522-information-disclosure-through-sentry-instance2026-10-29 https://bugbountyreports.com/reports/10070-information-disclosure-via-add-user-lookup-in-account2026-10-29 https://bugbountyreports.com/reports/6685-information-disclosure-via-a-misconfigured-third-party2026-10-29 https://bugbountyreports.com/reports/10106-information-disclosure-via-desktop-client-when-attempting2026-10-29 https://bugbountyreports.com/reports/9740-information-disclosure-via-enabled-django-debug-mode2026-10-29 https://bugbountyreports.com/reports/1639-information-disclosure-via-policy-update-notifications2026-10-29 https://bugbountyreports.com/reports/10181-information-disclosure-via-publicly-accessible-debug-log2026-10-29 https://bugbountyreports.com/reports/10072-information-disclosure-via-verbose-error-messages2026-10-29 https://bugbountyreports.com/reports/2501-information-disclosure-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2194-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2200-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2384-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2472-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2475-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2476-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2477-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2478-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2507-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2575-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2577-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2579-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2708-information-disclosure-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/5037-information-disclosure-when-invitations-json-is-not-yet2026-10-29 https://bugbountyreports.com/reports/3175-information-disclosure-when-trying-to-delete-an-expense-s2026-10-29 https://bugbountyreports.com/reports/3952-information-disclosure-which-leak-the-apache-version2026-10-29 https://bugbountyreports.com/reports/7589-information-disclosure-referer-leak2026-10-29 https://bugbountyreports.com/reports/6703-information-disclosure-phpinfo-credentials-on-dod-asset2026-10-29 https://bugbountyreports.com/reports/7202-information-discloure-via-logs-files-at-https-ihelp2026-10-29 https://bugbountyreports.com/reports/5025-information-disclousure-by-clicking-on-the-link-shown-in2026-10-29 https://bugbountyreports.com/reports/9705-information-exposure-due-to-enabled-debug-mode2026-10-29 https://bugbountyreports.com/reports/8148-information-exposure-in-in-guzzlehttp-guzzle-https-github2026-10-29 https://bugbountyreports.com/reports/901-information-exposure-through-directory-listing2026-10-29 https://bugbountyreports.com/reports/8787-information-exposure-through-directory-listing2026-10-29 https://bugbountyreports.com/reports/4048-information-exposure-through-directory-listing2026-10-29 https://bugbountyreports.com/reports/3651-information-leak-github-endpoint-configuration-details2026-10-29 https://bugbountyreports.com/reports/3638-information-leak-github-jms-information2026-10-29 https://bugbountyreports.com/reports/5391-information-leak-github2026-10-29 https://bugbountyreports.com/reports/3652-information-leakage-github-vcenter-configuration-scripts2026-10-29 https://bugbountyreports.com/reports/4302-information-leakage-and-default-open-port2026-10-29 https://bugbountyreports.com/reports/1439-information-leakage-of-private-program2026-10-29 https://bugbountyreports.com/reports/1837-information-leakage-on-a-department-of-defense-website2026-10-29 https://bugbountyreports.com/reports/1709-information-leakage-on-https-docs-gdax-com2026-10-29 https://bugbountyreports.com/reports/730-information-leakage-through-graphviz-blocks2026-10-29 https://bugbountyreports.com/reports/9642-information-leakage-via-clicked-link-in-github-repository2026-10-29 https://bugbountyreports.com/reports/2343-information-leakage-via-csv-when-content-is-valid-javascript2026-10-29 https://bugbountyreports.com/reports/7719-information-leakage-via-tiktok-ads-web-cache-deception2026-10-29 https://bugbountyreports.com/reports/1330-information-regarding-trips-from-other-users2026-10-29 https://bugbountyreports.com/reports/6718-informations-disclosure-access-to-some-checkout-informations2026-10-29 https://bugbountyreports.com/reports/2613-infrastructure-photon-ssrf2026-10-29 https://bugbountyreports.com/reports/9079-ingress-nginx-annotation-injection-causes-arbitrary-command2026-10-29 https://bugbountyreports.com/reports/8060-ingress-nginx-annotation-injection-allows-retrieval-of2026-10-29 https://bugbountyreports.com/reports/8043-ingress-nginx-path-allows-retrieval-of-ingress-nginx2026-10-29 https://bugbountyreports.com/reports/10185-ini-format-string-injection-in-revive-adserver-6-0-42026-10-29 https://bugbountyreports.com/reports/5967-initial-mirror-user-can-be-assigned-by-other-user-even-if2026-10-29 https://bugbountyreports.com/reports/4495-inject-page-in-admin-panel-via-shopify-api-pushstate2026-10-29 https://bugbountyreports.com/reports/6407-inject-page-in-admin-panel-via-shopify-api-pushstate-new2026-10-29 https://bugbountyreports.com/reports/6406-inject-page-in-admin-panel-via-shopify-api-pushstate-with2026-10-29 https://bugbountyreports.com/reports/193-injecting-distrust-and-disbelief-in-addicted-gamers2026-10-29 https://bugbountyreports.com/reports/10233-injection-in-path-parameter-of-ingress-nginx2026-10-29 https://bugbountyreports.com/reports/6007-injection-of-http-git-config-settings-leading-to-ssrf2026-10-29 https://bugbountyreports.com/reports/1003-injection-via-csv-export-feature-in-admin-orders2026-10-29 https://bugbountyreports.com/reports/3951-inline-banner-on-report-page-discloses-whether-organization2026-10-29 https://bugbountyreports.com/reports/6584-insecure-credentials-on-staging-app-at-leads-to-application2026-10-29 https://bugbountyreports.com/reports/1638-insecure-2fa-authentication-implementation-creates-a-brute2026-10-29 https://bugbountyreports.com/reports/2275-insecure-account-removal2026-10-29 https://bugbountyreports.com/reports/3653-insecure-account-removal-22026-10-29 https://bugbountyreports.com/reports/9709-insecure-api-response-leads-to-disclosure-of-hashed2026-10-29 https://bugbountyreports.com/reports/7158-insecure-bundler-configuration-fetching-internal-gems-okra2026-10-29 https://bugbountyreports.com/reports/2619-insecure-cache-control-leading-to-api-key-retrieval2026-10-29 https://bugbountyreports.com/reports/495-insecure-crossdomain-xml2026-10-29 https://bugbountyreports.com/reports/7687-insecure-crossdomain-xml-on-https-vdc-mtnonline-com2026-10-29 https://bugbountyreports.com/reports/617-insecure-data-storage-in-vine-android-app2026-10-29 https://bugbountyreports.com/reports/9899-insecure-deserilize-object-leads-to-rce-on-sitecore-cve2026-10-29 https://bugbountyreports.com/reports/1026-insecure-direct-org-invite-log-references2026-10-29 https://bugbountyreports.com/reports/1025-insecure-direct-org-visitor-log-references2026-10-29 https://bugbountyreports.com/reports/1024-insecure-direct-member-disclosure2026-10-29 https://bugbountyreports.com/reports/754-insecure-direct-object-reference-access-to-other-user-group2026-10-29 https://bugbountyreports.com/reports/769-insecure-direct-object-reference-have-access-to-deleted-dm-s2026-10-29 https://bugbountyreports.com/reports/8678-insecure-direct-object-reference-idor-delete-campaigns2026-10-29 https://bugbountyreports.com/reports/10411-insecure-direct-object-reference-idor-allows-creating2026-10-29 https://bugbountyreports.com/reports/9358-insecure-direct-object-reference-idor-allows-viewing2026-10-29 https://bugbountyreports.com/reports/9812-insecure-direct-object-reference-idor-in-graphql2026-10-29 https://bugbountyreports.com/reports/2711-insecure-direct-object-reference-idor-vulnerability-in-a2026-10-29 https://bugbountyreports.com/reports/9805-insecure-direct-object-reference-idor-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/8897-insecure-direct-object-reference-allows-crew-invite-deletion2026-10-29 https://bugbountyreports.com/reports/4994-insecure-direct-object-reference-on-in-scope-mil-website2026-10-29 https://bugbountyreports.com/reports/9327-insecure-direct-object-reference-protection-bypass-by2026-10-29 https://bugbountyreports.com/reports/425-insecure-direct-object-reference-vulnerability2026-10-29 https://bugbountyreports.com/reports/2382-insecure-direct-object-reference-vulnerability-on-a-dod2026-10-29 https://bugbountyreports.com/reports/9776-insecure-direct-object-reference-horizontal-escalation2026-10-29 https://bugbountyreports.com/reports/540-insecure-direct-object-references-in-https-vimeo-com-forums2026-10-29 https://bugbountyreports.com/reports/541-insecure-direct-object-references-that-allows-to-read-any2026-10-29 https://bugbountyreports.com/reports/6696-insecure-file-upload-in-xiaoai-mi-com-lead-to-stored-xss2026-10-29 https://bugbountyreports.com/reports/8186-insecure-gitlab-repositories-at-htus2026-10-29 https://bugbountyreports.com/reports/3537-insecure-implementation-of-deserialization-in-cryo2026-10-29 https://bugbountyreports.com/reports/3526-insecure-implementation-of-deserialization-in-funcster2026-10-29 https://bugbountyreports.com/reports/9664-insecure-invitation-link-handling2026-10-29 https://bugbountyreports.com/reports/8553-insecure-loading-of-icu-data-through-icu-data-environment2026-10-29 https://bugbountyreports.com/reports/1999-insecure-local-data-storage-application-stores-data-using-a2026-10-29 https://bugbountyreports.com/reports/5399-insecure-oauth-redirection-at-admin-8x8-vc2026-10-29 https://bugbountyreports.com/reports/8001-insecure-object-permissions-for-guest-user-leads-to-access2026-10-29 https://bugbountyreports.com/reports/8602-insecure-randomness-for-default-password-in-file-sharing2026-10-29 https://bugbountyreports.com/reports/5627-insecure-redirect-in-https-www-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/5430-insecure-redirect-rule-results-in-bypassing-ban-redirect-on2026-10-29 https://bugbountyreports.com/reports/9264-insecure-s3-bucket-exposing-git-directory-in-mozilla2026-10-29 https://bugbountyreports.com/reports/2494-insecure-sha1withrsa-in-b5s-hackerone-ext-content-com-and2026-10-29 https://bugbountyreports.com/reports/7712-insecure-storage-and-overly-permissive-api-keys2026-10-29 https://bugbountyreports.com/reports/5402-insecure-storage-and-overly-permissive-api-keys-in-android2026-10-29 https://bugbountyreports.com/reports/7748-insecure-storage-of-sensitive-information-on-lonestarcell2026-10-29 https://bugbountyreports.com/reports/3442-insecure-transportation-security-protocol-supported-tls-1-02026-10-29 https://bugbountyreports.com/reports/8036-insecure-use-of-shell-openexternal-in-rocket-chat-desktop2026-10-29 https://bugbountyreports.com/reports/8355-insecure-use-of-shell-openexternal-leads-to-rce-in-rocket2026-10-29 https://bugbountyreports.com/reports/4492-insecure-zendesk-sso-implementation-by-generating-jwt2026-10-29 https://bugbountyreports.com/reports/1290-instagram-oauth2-implementation-leaks-access-token-allows2026-10-29 https://bugbountyreports.com/reports/8519-install-php-file-exposure-on-drupal2026-10-29 https://bugbountyreports.com/reports/3295-installer-can-modify-other-gems-if-gem-name-is-specially2026-10-29 https://bugbountyreports.com/reports/2792-installing-a-crafted-gem-package-may-create-or-overwrite2026-10-29 https://bugbountyreports.com/reports/7605-installing-gitlab-runner-with-docker-in-docker-allows-root2026-10-29 https://bugbountyreports.com/reports/7672-instance-page-dos-within-organization-on-tiktok-ads2026-10-29 https://bugbountyreports.com/reports/6193-instant-open-redirect-on-live-preview-web-ide-opening2026-10-29 https://bugbountyreports.com/reports/5858-insufficient-access-control-on-all-bcrm-instances-leading2026-10-29 https://bugbountyreports.com/reports/10367-insufficient-checks-in-the-file-path-parameter-allow2026-10-29 https://bugbountyreports.com/reports/4267-insufficient-dkim-record-with-rsa-512-bit-key-used-on2026-10-29 https://bugbountyreports.com/reports/4160-insufficient-oauth-callback-validation-which-leads-to2026-10-29 https://bugbountyreports.com/reports/4273-insufficient-sanitizing-can-lead-to-arbitrary-commands2026-10-29 https://bugbountyreports.com/reports/7462-insufficient-session-expiration-in-the-com-shopify-ping2026-10-29 https://bugbountyreports.com/reports/6967-insufficient-session-expiration-on-adobe-connect-https2026-10-29 https://bugbountyreports.com/reports/1136-insufficient-shell-characters-filtering-leads-to2026-10-29 https://bugbountyreports.com/reports/6182-insufficient-type-check-leading-to-developer-ability-to2026-10-29 https://bugbountyreports.com/reports/6181-insufficient-type-check-on-graphql-leading-to-maintainer2026-10-29 https://bugbountyreports.com/reports/4276-insufficient-validation-of-sides-modifiers-quantity2026-10-29 https://bugbountyreports.com/reports/5930-insufficient-validation-on-digits-bridge2026-10-29 https://bugbountyreports.com/reports/4731-int-overflow-lead-to-heap-overflow-in-exif-thumbnail2026-10-29 https://bugbountyreports.com/reports/5786-integer-overflow-cve-2017-75292026-10-29 https://bugbountyreports.com/reports/4878-integer-overflow-in-gd2getheader-resulting-in-heap-overflow2026-10-29 https://bugbountyreports.com/reports/624-integer-overflow-in-json-encode-unicode-leads-to-crash2026-10-29 https://bugbountyreports.com/reports/623-integer-overflow-in-pickle-c2026-10-29 https://bugbountyreports.com/reports/744-integer-overflow-in-unpickler-read2026-10-29 https://bugbountyreports.com/reports/212-integer-overflow-in-buffer-type-allows-reading-memory2026-10-29 https://bugbountyreports.com/reports/4653-integer-overflow-in-addcslashes-addslashes2026-10-29 https://bugbountyreports.com/reports/4868-integer-overflow-in-base64-decode-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4802-integer-overflow-in-binascii-b2a-qp2026-10-29 https://bugbountyreports.com/reports/4867-integer-overflow-in-bzdecompress-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/6800-integer-overflow-in-cipherupdate2026-10-29 https://bugbountyreports.com/reports/4841-integer-overflow-in-curl-escape-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4847-integer-overflow-in-fgetcsv-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4850-integer-overflow-in-fgets-cause-heap-corruption2026-10-29 https://bugbountyreports.com/reports/556-integer-overflow-in-ftp-genlist-resulting-in-heap-overflow2026-10-29 https://bugbountyreports.com/reports/4876-integer-overflow-in-gdimagepalettetotruecolor-resulting-in2026-10-29 https://bugbountyreports.com/reports/4852-integer-overflow-in-imap-binary-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4654-integer-overflow-in-length-of-string-typed-zval2026-10-29 https://bugbountyreports.com/reports/1835-integer-overflow-in-mrb-ary-set2026-10-29 https://bugbountyreports.com/reports/4652-integer-overflow-in-nl2br2026-10-29 https://bugbountyreports.com/reports/4853-integer-overflow-in-pg-escape-bytea-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4857-integer-overflow-in-pg-escape-string-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4648-integer-overflow-in-php-html-entities2026-10-29 https://bugbountyreports.com/reports/4856-integer-overflow-in-php-ldap-do-escape-caused-heap2026-10-29 https://bugbountyreports.com/reports/4649-integer-overflow-in-php-raw-url-encode2026-10-29 https://bugbountyreports.com/reports/4862-integer-overflow-in-php-uuencode-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4851-integer-overflow-in-preg-quote-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4865-integer-overflow-in-quoted-printable-encode-caused-heap2026-10-29 https://bugbountyreports.com/reports/4849-integer-overflow-in-recode-string-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4651-integer-overflow-in-splfileobject-fread2026-10-29 https://bugbountyreports.com/reports/4854-integer-overflow-in-str-pad-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/33-integer-overflow-in-strop-expandtabs2026-10-29 https://bugbountyreports.com/reports/4803-integer-overflow-in-the-csv-module-s-join-append-data2026-10-29 https://bugbountyreports.com/reports/777-integer-overflow-in-unserialize-32-bits-only2026-10-29 https://bugbountyreports.com/reports/4864-integer-overflow-in-urlencode-caused-heap-corruption2026-10-29 https://bugbountyreports.com/reports/4706-integer-overflow-in-wordwrap2026-10-29 https://bugbountyreports.com/reports/4846-integer-overflow-in-xml-utf8-encode2026-10-29 https://bugbountyreports.com/reports/1158-integer-overflow-in-ziparchive-getfrom2026-10-29 https://bugbountyreports.com/reports/4866-integer-overflow-lead-to-heap-corruption-in-sql-regcase2026-10-29 https://bugbountyreports.com/reports/4537-integer-overflow-leading-to-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/7858-integer-overflow-vulnerability2026-10-29 https://bugbountyreports.com/reports/4655-integer-overflow-heap-overflow-in-json-encode-json-decode2026-10-29 https://bugbountyreports.com/reports/4688-integer-underflow-arbitrary-null-write-in-fread-gzread2026-10-29 https://bugbountyreports.com/reports/9020-integrity-checks-according-to-policies-can-be-circumvented2026-10-29 https://bugbountyreports.com/reports/9090-integrity-checks-according-to-policies-can-be-circumvented2026-10-29 https://bugbountyreports.com/reports/9305-intent-leads-to-unauthorised-video-call-initiation-leaking2026-10-29 https://bugbountyreports.com/reports/2617-intercom-chat-session-information-persists-after-logout2026-10-29 https://bugbountyreports.com/reports/2029-interger-overflow-in-str-substr-leading-to-read-write-out2026-10-29 https://bugbountyreports.com/reports/10004-internal-access-to-hackerone-confluence-docs2026-10-29 https://bugbountyreports.com/reports/6408-internal-api-endpoint-is-accesible-for-everyone2026-10-29 https://bugbountyreports.com/reports/1717-internal-attachments-can-be-exported-via-export-as-zip2026-10-29 https://bugbountyreports.com/reports/1105-internal-bounty-and-swag-details-disclosed-as-part-of-json2026-10-29 https://bugbountyreports.com/reports/8755-internal-dev-tokens-disclosure2026-10-29 https://bugbountyreports.com/reports/8012-internal-employee-informations-disclosure-via-tiktok-athena2026-10-29 https://bugbountyreports.com/reports/986-internal-get-ssrf-via-csrf-with-press-this-scan-feature2026-10-29 https://bugbountyreports.com/reports/7144-internal-gitlab-ticket-disclosure-via-external-slack2026-10-29 https://bugbountyreports.com/reports/5313-internal-hostname-disclosure-from-multiple-apache-servers2026-10-29 https://bugbountyreports.com/reports/5494-internal-ip-address-disclosed2026-10-29 https://bugbountyreports.com/reports/10196-internal-logs-info-leaked-via-endpoint-https-203-137-1282026-10-29 https://bugbountyreports.com/reports/8814-internal-machine-learning-api-endpoint-for-cwe2026-10-29 https://bugbountyreports.com/reports/6020-internal-path-disclosure2026-10-29 https://bugbountyreports.com/reports/3014-internal-ports-scanning-via-blind-ssrf2026-10-29 https://bugbountyreports.com/reports/3027-internal-ports-scanning-via-blind-ssrf-url-redirection-to2026-10-29 https://bugbountyreports.com/reports/3575-internal-ssrf-bypass-using-slash-commands-at-api-slack-com2026-10-29 https://bugbountyreports.com/reports/3640-internal-usage-of-adblockplus-may-expose-poc-urls-to2026-10-29 https://bugbountyreports.com/reports/4728-internet-based-attacker-can-run-flash-apps-in-local2026-10-29 https://bugbountyreports.com/reports/971-interstitial-redirect-bypass-open-redirect-in-https2026-10-29 https://bugbountyreports.com/reports/6476-invading-grinch-network-and-saving-christmas2026-10-29 https://bugbountyreports.com/reports/4882-invalid-free-in-phar-extract-file2026-10-29 https://bugbountyreports.com/reports/7570-invalid-handling-of-x509-verify-cert-internal-errors-in2026-10-29 https://bugbountyreports.com/reports/1833-invalid-handling-of-zero-length-heredoc-identifiers-leads2026-10-29 https://bugbountyreports.com/reports/2440-invalid-homepage-url-causes-uncaught-typeerror-or-blank2026-10-29 https://bugbountyreports.com/reports/3097-invalid-host-detection-at-https-hackerone-com-redirect2026-10-29 https://bugbountyreports.com/reports/1826-invalid-memory-access-in-mrb-str-format2026-10-29 https://bugbountyreports.com/reports/4833-invalid-memory-access-in-php-basename-function2026-10-29 https://bugbountyreports.com/reports/4832-invalid-memory-access-in-spl-filesystem-dir-open-function2026-10-29 https://bugbountyreports.com/reports/4834-invalid-memory-access-in-spl-filesystem-info-set-filename2026-10-29 https://bugbountyreports.com/reports/4830-invalid-memory-access-in-zend-strtod-function2026-10-29 https://bugbountyreports.com/reports/1783-invalid-memory-access-while-freeing-memory-caused-by2026-10-29 https://bugbountyreports.com/reports/1788-invalid-memory-write-caused-by-incorrect-upper-bound-in2026-10-29 https://bugbountyreports.com/reports/1918-invalid-parameter-in-memcpy-function-trough-openssl-pbkdf22026-10-29 https://bugbountyreports.com/reports/3544-invalid-phabricator-api-token-revealed-through-error2026-10-29 https://bugbountyreports.com/reports/2157-invalid-pointer-dereference-in-op-enter2026-10-29 https://bugbountyreports.com/reports/568-invalid-pointer-free-in-phar-tar-process-metadata2026-10-29 https://bugbountyreports.com/reports/2110-invalid-pointer-reference-from-op-rescue2026-10-29 https://bugbountyreports.com/reports/2392-invalid-pointer-reference-in-l-rescue2026-10-29 https://bugbountyreports.com/reports/4485-invalid-read-in-str-replace-partial2026-10-29 https://bugbountyreports.com/reports/3135-invalid-read-leading-to-a-segfault2026-10-29 https://bugbountyreports.com/reports/6095-invalid-read-on-exif-process-sofn2026-10-29 https://bugbountyreports.com/reports/4812-invalid-read-when-wddx-decodes-empty-boolean-element2026-10-29 https://bugbountyreports.com/reports/2141-invalid-request-may-lead-content-spoofing-for-phishing2026-10-29 https://bugbountyreports.com/reports/1621-invalid-username-updating2026-10-29 https://bugbountyreports.com/reports/4774-invalidate-session-after-password-reset2026-10-29 https://bugbountyreports.com/reports/2559-invalidate-session-after-password-reset-hosted-website2026-10-29 https://bugbountyreports.com/reports/10405-inverted-ternary-in-peerlist-manager-filter-allows2026-10-29 https://bugbountyreports.com/reports/7771-invitation-email-is-resent-as-a-reminder-after-invalidating2026-10-29 https://bugbountyreports.com/reports/655-invitation-is-not-properly-cancelled-while-inviting-to-bug2026-10-29 https://bugbountyreports.com/reports/734-invitation-issue2026-10-29 https://bugbountyreports.com/reports/4322-invitation-reminder-emails-contain-insecure-links2026-10-29 https://bugbountyreports.com/reports/3161-invitation-token-leaks-to-https-bat-bing-com2026-10-29 https://bugbountyreports.com/reports/2608-invitation-tokens-leak-to-google-analytics2026-10-29 https://bugbountyreports.com/reports/1457-invite-any-user-to-your-group-without-even-following-him2026-10-29 https://bugbountyreports.com/reports/9151-invite-tokens-have-insufficient-entropy-in-ghes-management2026-10-29 https://bugbountyreports.com/reports/4147-invited-team-member-can-disclosure-slack-channels2026-10-29 https://bugbountyreports.com/reports/2923-invited-user-to-a-author-profile-can-remove-the-owner-of2026-10-29 https://bugbountyreports.com/reports/9604-inviting-collaborator-using-email-disclose-the-hackerone2026-10-29 https://bugbountyreports.com/reports/9025-inviting-excessive-long-email-addresses-to-a-calendar-event2026-10-29 https://bugbountyreports.com/reports/484-invoice-details-activate-js-that-filled-in2026-10-29 https://bugbountyreports.com/reports/525-ios-app-can-establish-facetime-calls-without-user-s2026-10-29 https://bugbountyreports.com/reports/5243-ios-app-crashed-by-specially-crafted-direct-message2026-10-29 https://bugbountyreports.com/reports/184-ios-application-does-not-destroy-session-upon-logout2026-10-29 https://bugbountyreports.com/reports/10324-ios-brave-playlist-open-in-private-tab-bypasses-faceid2026-10-29 https://bugbountyreports.com/reports/8597-ios-group-chat-denial-of-service2026-10-29 https://bugbountyreports.com/reports/9716-ip-restriction-bypass-via-x-forwarded-for-header2026-10-29 https://bugbountyreports.com/reports/7178-ip-in-ip-protocol-routes-arbitrary-traffic-by-default-cve2026-10-29 https://bugbountyreports.com/reports/7418-ipv4-only-clusters-susceptible-to-mitm-attacks-via-ipv62026-10-29 https://bugbountyreports.com/reports/2178-irc-bot-exposes-information2026-10-29 https://bugbountyreports.com/reports/3918-is-the-504-gateway-time-out-error-ok2026-10-29 https://bugbountyreports.com/reports/7603-is-the-google-bucket-meant-to-be-publicly-listable-https2026-10-29 https://bugbountyreports.com/reports/1578-issue-in-the-implementation-of-captcha-and-race-condition2026-10-29 https://bugbountyreports.com/reports/572-issue-with-password-change2026-10-29 https://bugbountyreports.com/reports/1196-issue-with-password-reset-functionality2026-10-29 https://bugbountyreports.com/reports/574-issue-with-remember-user-token2026-10-29 https://bugbountyreports.com/reports/8903-issuer-not-verified-from-obtained-token-in-user-oidc2026-10-29 https://bugbountyreports.com/reports/2882-issues-with-forgot-password-error-handling2026-10-29 https://bugbountyreports.com/reports/1574-issues-with-uploading-list-images2026-10-29 https://bugbountyreports.com/reports/4253-isteamassets-gives-partners-control-over-unrelated2026-10-29 https://bugbountyreports.com/reports/8164-it-is-possible-to-elevate-privileges-for-any-authenticated2026-10-29 https://bugbountyreports.com/reports/6486-it-s-just-a-man-on-a-mission2026-10-29 https://bugbountyreports.com/reports/3793-it-s-possible-to-put-sdx-orderbook-into-invalid-state-and2026-10-29 https://bugbountyreports.com/reports/3661-items-bought-for-free-due-to-lacks-of-quantity-controls2026-10-29 https://bugbountyreports.com/reports/10466-jaas-sip-gateway-authorization-bypass2026-10-29 https://bugbountyreports.com/reports/8490-jaas-8x8-vc-removed-users-can-still-have-read-write-access2026-10-29 https://bugbountyreports.com/reports/6910-japan-csrf-in-webapp-starbucks-co-jp-with-user-interaction2026-10-29 https://bugbountyreports.com/reports/5809-java-debug-console-provides-command-injection-without2026-10-29 https://bugbountyreports.com/reports/1889-java-deserialization-rce-via-jboss-jmxinvokerservlet2026-10-29 https://bugbountyreports.com/reports/2334-java-deserialization-rce-via-jboss-on-card-starbucks-in2026-10-29 https://bugbountyreports.com/reports/3111-javascript-payload-reflected-back-in-report-embed-code2026-10-29 https://bugbountyreports.com/reports/2134-javascript-and-mailto-links-are-allowed-in-jira-integration2026-10-29 https://bugbountyreports.com/reports/560-javascript-and-mailto-links-are-allowed-on-users-profiles2026-10-29 https://bugbountyreports.com/reports/9535-jazz-net-publicly-accessible-svn-repositories2026-10-29 https://bugbountyreports.com/reports/8911-jdbc-apache-airflow-provider-code-execution-vulnerability2026-10-29 https://bugbountyreports.com/reports/1823-jenkins2026-10-29 https://bugbountyreports.com/reports/9245-jenkins-server-access-due-to-weak-password2026-10-29 https://bugbountyreports.com/reports/4523-jetbrains-idea-project-directory2026-10-29 https://bugbountyreports.com/reports/9318-jira-credential-disclosure-within-mozilla-slack2026-10-29 https://bugbountyreports.com/reports/8199-jira-discloser-information2026-10-29 https://bugbountyreports.com/reports/8481-jitsi-desktop-client-rce-by-interacting-with-malicious-url2026-10-29 https://bugbountyreports.com/reports/10416-jitsi-call-analytics-unauthenticated-arbitrary-file-write2026-10-29 https://bugbountyreports.com/reports/10417-jitsi-meet-prosody-jigasi-missing-header-whitelist-in-mod2026-10-29 https://bugbountyreports.com/reports/8304-jitsi-attacker-is-able-to-cast-a-vote-using-the-victim-s2026-10-29 https://bugbountyreports.com/reports/9549-jitsi-bridge-message-spoofing-due-to-improper-json-handling2026-10-29 https://bugbountyreports.com/reports/8264-jolokia-reflected-xss2026-10-29 https://bugbountyreports.com/reports/1735-jsbeautifier-bapp-race-condition-leads-to-memory-disclosure2026-10-29 https://bugbountyreports.com/reports/2551-json-csrf-on-post-heartbeats-api2026-10-29 https://bugbountyreports.com/reports/609-json-keys-are-not-properly-escaped2026-10-29 https://bugbountyreports.com/reports/8526-json-rpc-methods-for-debugging-enabled-by-default-allow-dos2026-10-29 https://bugbountyreports.com/reports/4187-json-serialization-of-any-project-model-results-in-all2026-10-29 https://bugbountyreports.com/reports/5102-jumpcloud-api-key-leaked-via-open-github-repository2026-10-29 https://bugbountyreports.com/reports/7957-june-2022-incident-report2026-10-29 https://bugbountyreports.com/reports/8643-jwt-audience-claim-is-not-verified2026-10-29 https://bugbountyreports.com/reports/8288-kafka-connect-rce-via-connector-sasl-jaas-jndiloginmodule2026-10-29 https://bugbountyreports.com/reports/4967-kaspersky-password-manager-allows-websites-to-access-user-s2026-10-29 https://bugbountyreports.com/reports/3974-kaspersky-password-manager-is-vulnerable-to-html-injection2026-10-29 https://bugbountyreports.com/reports/4969-kaspersky-protection-extension-for-google-chrome-is2026-10-29 https://bugbountyreports.com/reports/10633-keep-alive-socket-process-a-response-that-was-written2026-10-29 https://bugbountyreports.com/reports/3009-key-reinstallation-attacks-breaking-wpa2-by-forcing-nonce2026-10-29 https://bugbountyreports.com/reports/3195-keys2026-10-29 https://bugbountyreports.com/reports/2012-kh-get-n2s-stack-overrun2026-10-29 https://bugbountyreports.com/reports/2150-kh-put-iv-segfault-mruby-1-2-02026-10-29 https://bugbountyreports.com/reports/6776-khan-academy-clickjacking-to-steal-users-s-credintials2026-10-29 https://bugbountyreports.com/reports/10521-kill-authorization-trusts-the-presented-login-name-instead2026-10-29 https://bugbountyreports.com/reports/10424-kiro-ide-stores-auth-tokens-with-world-readable-permissions2026-10-29 https://bugbountyreports.com/reports/1507-know-undisclosed-bounty-amount-when-bounty-statistics-are2026-10-29 https://bugbountyreports.com/reports/902-know-whether-private-program-for-company-exist-or-not2026-10-29 https://bugbountyreports.com/reports/4588-know-whether-private-project-name-exists-or-not-within-a2026-10-29 https://bugbountyreports.com/reports/6628-knowledge-base-articles-are-globally-modifiable-via2026-10-29 https://bugbountyreports.com/reports/6783-kops-documentation-references-domains-which-were-not2026-10-29 https://bugbountyreports.com/reports/5439-korea-lfi-server-directory-traversal-at-starbucks-co-kr2026-10-29 https://bugbountyreports.com/reports/5301-korea-lfi-via-path-traversal-at-https-msr-istarbucks-co-kr2026-10-29 https://bugbountyreports.com/reports/5915-korea-reflected-xss-on-https-www-istarbucks-co-kr-app2026-10-29 https://bugbountyreports.com/reports/3103-kovri-potential-buffer-over-read-in-garlic-clove-handling2026-10-29 https://bugbountyreports.com/reports/6918-kroki-arbitrary-file-read-write2026-10-29 https://bugbountyreports.com/reports/6297-kubeadm-logs-tokens-before-deleting-them2026-10-29 https://bugbountyreports.com/reports/6178-kubelet-resource-exhaustion-attack-via-metric-label2026-10-29 https://bugbountyreports.com/reports/1141-labels-created-in-private-projects-are-leaked2026-10-29 https://bugbountyreports.com/reports/8050-lack-of-brute-force-protection-while-joining-video-call-in2026-10-29 https://bugbountyreports.com/reports/8589-lack-of-bruteforce-protection-for-totp-2fa2026-10-29 https://bugbountyreports.com/reports/1332-lack-of-cname-a-record-trimming-pointing-uber-domains-to2026-10-29 https://bugbountyreports.com/reports/2537-lack-of-controls-allowing-for-card-and-pin-enumeration2026-10-29 https://bugbountyreports.com/reports/4749-lack-of-csrf-header-validation-at-https-g-mail-grammarly2026-10-29 https://bugbountyreports.com/reports/6726-lack-of-csrf-protection-on-uberps-com-makes-every-form2026-10-29 https://bugbountyreports.com/reports/9944-lack-of-feedback-validation-permits-arbitrary-driver-ratings2026-10-29 https://bugbountyreports.com/reports/997-lack-of-hsts-on-https-apps-owncloud-com2026-10-29 https://bugbountyreports.com/reports/5559-lack-of-https-in-service-communications2026-10-29 https://bugbountyreports.com/reports/2900-lack-of-input-sanitization-in-marketo-form-leads-to2026-10-29 https://bugbountyreports.com/reports/5075-lack-of-input-validation-and-sanitization-in-react2026-10-29 https://bugbountyreports.com/reports/5312-lack-of-input-validation-that-can-lead-denial-of-service-dos2026-10-29 https://bugbountyreports.com/reports/4166-lack-of-length-validation-on-user-address-attribute2026-10-29 https://bugbountyreports.com/reports/10080-lack-of-minimum-value-bid-wheel-verification-on-customer2026-10-29 https://bugbountyreports.com/reports/8193-lack-of-packet-sanitation-in-goflow-results-in-multiple-dos2026-10-29 https://bugbountyreports.com/reports/2546-lack-of-password-confirmation-when-changing-email2026-10-29 https://bugbountyreports.com/reports/3903-lack-of-payment-type-validation-in-dial-uber-com-allows-for2026-10-29 https://bugbountyreports.com/reports/4363-lack-of-proper-paymentprofileuuid-validation-allows-any2026-10-29 https://bugbountyreports.com/reports/6837-lack-of-quarantine-macos-attribute-com-apple-quarantine2026-10-29 https://bugbountyreports.com/reports/4506-lack-of-quarantine-meta-attribute-for-downloaded-files2026-10-29 https://bugbountyreports.com/reports/6599-lack-of-rate-limitation-on-careers-site-allows-the-attacker2026-10-29 https://bugbountyreports.com/reports/9657-lack-of-rate-limiting-in-https-pki-passreset-aspx-leads-to2026-10-29 https://bugbountyreports.com/reports/1422-lack-of-rate-limiting-on-get-uber-com-leads-to-enumeration2026-10-29 https://bugbountyreports.com/reports/3133-lack-of-sanitization-and-insufficient-authentication2026-10-29 https://bugbountyreports.com/reports/9253-lack-of-sanitization-of-the-billing-address-in-pdf-invoice2026-10-29 https://bugbountyreports.com/reports/6687-lack-of-session-expiration-after-password-reset-on-tiktok2026-10-29 https://bugbountyreports.com/reports/9176-lack-of-tenant-scoping-enables-limited-cross-tenant-data2026-10-29 https://bugbountyreports.com/reports/7555-lack-of-url-normalization-renders-blocked-previews-feature2026-10-29 https://bugbountyreports.com/reports/10244-lack-of-validation-in-reward-redemption-allows-unlimited2026-10-29 https://bugbountyreports.com/reports/5113-lack-or-origin-check-leads-to-cross-site-websocket2026-10-29 https://bugbountyreports.com/reports/6897-lack-warning-label-when-receiving-a-letter2026-10-29 https://bugbountyreports.com/reports/266-language-version-disclosure-in-response-header2026-10-29 https://bugbountyreports.com/reports/2941-languagechange-event-fires-simultaneously-on-all-tabs2026-10-29 https://bugbountyreports.com/reports/9557-large-amounts-of-back-end-acronis-source-code-is-publicly2026-10-29 https://bugbountyreports.com/reports/10629-large-site-quick-edit-reparses-a-contributor-display-name2026-10-29 https://bugbountyreports.com/reports/4474-last-build-status-and-coverage-leaked-to-unauthorized-users2026-10-29 https://bugbountyreports.com/reports/4553-last-pipeline-status-for-mr-leaked2026-10-29 https://bugbountyreports.com/reports/8149-last-video-frame-is-still-sent-after-video-is-disabled-in-a2026-10-29 https://bugbountyreports.com/reports/4789-latest-activity-id-and-latest-activity-at-may-disclose2026-10-29 https://bugbountyreports.com/reports/10668-launchpad-file-read-leaks-production-keys2026-10-29 https://bugbountyreports.com/reports/3093-lazy-load-stored-xss2026-10-29 https://bugbountyreports.com/reports/8694-ldap-anonymous-access-enabled-at-certrep-pki-state-gov-3892026-10-29 https://bugbountyreports.com/reports/8936-ldap-anonymous-login-enabled-in2026-10-29 https://bugbountyreports.com/reports/5005-ldap-injection-at2026-10-29 https://bugbountyreports.com/reports/4389-ldap-login-possible-even-though-account-doesn-t-match-user2026-10-29 https://bugbountyreports.com/reports/8707-ldap-server-null-bind-connection-information-disclosure2026-10-29 https://bugbountyreports.com/reports/4840-ldap-escape-could-produce-string-larger-than-2gb2026-10-29 https://bugbountyreports.com/reports/3196-leak-information-in-real-time-through-api-request2026-10-29 https://bugbountyreports.com/reports/7087-leak-arbitrary-file-under-nextcloud-android-client-privacy2026-10-29 https://bugbountyreports.com/reports/3197-leak-ip-internal2026-10-29 https://bugbountyreports.com/reports/5459-leak-of-authorization-urls-leads-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/7437-leak-of-google-sheets-api-credentials2026-10-29 https://bugbountyreports.com/reports/6717-leak-of-internal-ip-addresses2026-10-29 https://bugbountyreports.com/reports/3516-leak-of-platform-authentication-credentials-via-repeater2026-10-29 https://bugbountyreports.com/reports/8397-leak-of-sensitive-values-to-airflow-rendered-template2026-10-29 https://bugbountyreports.com/reports/820-leak-receipt-of-another-user2026-10-29 https://bugbountyreports.com/reports/9675-leakage-of-traffic-in-plaintext-towards-the-ip-address-of2026-10-29 https://bugbountyreports.com/reports/9857-leaked-credentials-emails-and-passwords-etc2026-10-29 https://bugbountyreports.com/reports/6339-leaked-db-credentials-on-https-mil2026-10-29 https://bugbountyreports.com/reports/7420-leaked-h1-s-employees-email-addresses-meeting-info-on2026-10-29 https://bugbountyreports.com/reports/7172-leaked-jfrog-artifactory-username-and-password-exposed-on2026-10-29 https://bugbountyreports.com/reports/9976-leaked-reused-password-for-a-few-khan-academy-users2026-10-29 https://bugbountyreports.com/reports/353-leaking-csrf-token-over-http-resulting-in-csrf-protection2026-10-29 https://bugbountyreports.com/reports/1874-leaking-digits-oauth-authorization-to-third-party-websites2026-10-29 https://bugbountyreports.com/reports/2555-leaking-password-reset-token-via-referrer-from-external2026-10-29 https://bugbountyreports.com/reports/65-leaking-referrer-in-reset-password-link2026-10-29 https://bugbountyreports.com/reports/3273-leaking-referrer-in-reset-password-link2026-10-29 https://bugbountyreports.com/reports/6682-leaking-rockset-api-key-on-github2026-10-29 https://bugbountyreports.com/reports/3465-leaking-sensitive-files-on-github-leads-to-internal-files2026-10-29 https://bugbountyreports.com/reports/3034-leaking-sensitive-information-lead-to-compromise-employer2026-10-29 https://bugbountyreports.com/reports/3690-leaking-sensitive-information-on-github-lead-full-access-to2026-10-29 https://bugbountyreports.com/reports/9511-leaking-usernames-through-endpoints-wordpress2026-10-29 https://bugbountyreports.com/reports/9674-leaking-vpn-traffic-through-non-rfc1918-local-ip-addresses2026-10-29 https://bugbountyreports.com/reports/8741-leaks-of-username-and-password-leads-to-cve-2018-188622026-10-29 https://bugbountyreports.com/reports/1859-leave-inaccessible-messaging-system-with-a-message-https2026-10-29 https://bugbountyreports.com/reports/942-legacy-api-exposes-private-video-titles2026-10-29 https://bugbountyreports.com/reports/1487-legal-application-is-missing-csp-content-security-policy2026-10-29 https://bugbountyreports.com/reports/2918-legal-robot-aws-s3-bucket-directory-listing2026-10-29 https://bugbountyreports.com/reports/2794-length-extension-attack-leading-to-html-injection2026-10-29 https://bugbountyreports.com/reports/2696-lengthy-manual-entry-of-2fa-secret2026-10-29 https://bugbountyreports.com/reports/3964-lert-uber-com-few-default-folders-files-of-aura-framework2026-10-29 https://bugbountyreports.com/reports/5365-lets-encrypt-certificates-affected-by-caa-rechecking2026-10-29 https://bugbountyreports.com/reports/3609-lfi-and-ssrf-via-xxe-in-emblem-editor2026-10-29 https://bugbountyreports.com/reports/8371-lfi-at-http-www2026-10-29 https://bugbountyreports.com/reports/7808-lfi-in-filepathdownload-parameter-via2026-10-29 https://bugbountyreports.com/reports/3436-lfi-in-pchart-php-library2026-10-29 https://bugbountyreports.com/reports/4921-lfi-through-the-mysql-connection2026-10-29 https://bugbountyreports.com/reports/8010-lfi-via-jolokia-at-https-12932026-10-29 https://bugbountyreports.com/reports/4568-lfi-with-potential-to-rce-on-using-cve-2019-33962026-10-29 https://bugbountyreports.com/reports/7061-lib-net-ftp-rb-trusting-pasv-responses-allow-client-abuse2026-10-29 https://bugbountyreports.com/reports/803-libcurl-duphandle-read-out-of-bounds2026-10-29 https://bugbountyreports.com/reports/9540-libcurl-freeing-stack-buffer-during-x509-certificate-parsing2026-10-29 https://bugbountyreports.com/reports/397-libcurl-url-request-injection2026-10-29 https://bugbountyreports.com/reports/10311-liberapay-member-team-twitter-account-broken-link-hijacking2026-10-29 https://bugbountyreports.com/reports/2940-libevent-stack-buffer-overflow-in-evutil-parse-sockaddr-port2026-10-29 https://bugbountyreports.com/reports/10562-libmariadb-mariadb-connector-c-stack-overflow-via-server2026-10-29 https://bugbountyreports.com/reports/871-libphutil-removing-bytes-from-a-phutilrope-does-not-work-as2026-10-29 https://bugbountyreports.com/reports/4587-libtiff-4-0-6-heap-bufer-overflow-out-of-bounds-read-cve2026-10-29 https://bugbountyreports.com/reports/4586-libtiff-4-0-6-segfault-read-outside-of-buffer-cve-2016-92972026-10-29 https://bugbountyreports.com/reports/9299-libuv-improper-domain-lookup-that-potentially-leads-to-ssrf2026-10-29 https://bugbountyreports.com/reports/3755-license-verification-mechanism-can-be-bypassed2026-10-29 https://bugbountyreports.com/reports/6574-licenses-key-disclosure2026-10-29 https://bugbountyreports.com/reports/67-lighttpd-version-disclosure-directory-listing2026-10-29 https://bugbountyreports.com/reports/2058-limit-email-address-length2026-10-29 https://bugbountyreports.com/reports/1356-limit-http-methods-on-other-domains2026-10-29 https://bugbountyreports.com/reports/2456-limit-number-of-images-in-statement2026-10-29 https://bugbountyreports.com/reports/2230-limitation-of-app-specific-password-scope-can-be-bypassed2026-10-29 https://bugbountyreports.com/reports/2574-limited-code-execution-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/847-limited-csrf-bypass2026-10-29 https://bugbountyreports.com/reports/8863-limited-disclosure-employee-credentials-checked-in-to2026-10-29 https://bugbountyreports.com/reports/5775-limited-lfi2026-10-29 https://bugbountyreports.com/reports/2076-limited-open-redirection-using-sso-saml2026-10-29 https://bugbountyreports.com/reports/9011-limited-path-traversal-in-node-js-sdk-leads-to-pii2026-10-29 https://bugbountyreports.com/reports/9845-limited-privilege-user-can-create-unauthorized-referrals-on2026-10-29 https://bugbountyreports.com/reports/4008-line-feed-injection-in-get-request-leads-aws-s3-bucket2026-10-29 https://bugbountyreports.com/reports/7524-line-profile-id-leaks-in-openchat2026-10-29 https://bugbountyreports.com/reports/3437-link-filter-protection-bypass2026-10-29 https://bugbountyreports.com/reports/4109-link-poisoning-on-https-secure-login-gov-login-page2026-10-29 https://bugbountyreports.com/reports/1656-link-sanitation-bypass-in-xss-clean2026-10-29 https://bugbountyreports.com/reports/10101-link-unfurling-calls-out-to-arbitrary-urls-and-the-private2026-10-29 https://bugbountyreports.com/reports/8360-link-shortener-bypass-regression-on-fix-for-10326102026-10-29 https://bugbountyreports.com/reports/7272-link-avito-ru-bypass-of-restrictions-on-external-links2026-10-29 https://bugbountyreports.com/reports/9803-linkedin-broken-link-hijacking-on-https-hemi-xyz-about2026-10-29 https://bugbountyreports.com/reports/1182-linkedin-url-should-be-https2026-10-29 https://bugbountyreports.com/reports/8977-linkedin-users-primary-email-full-name-visibilty2026-10-29 https://bugbountyreports.com/reports/3794-linkinfo-openbasedir-bypass-on-windows-php2026-10-29 https://bugbountyreports.com/reports/5903-linux-client-is-vulnerable-to-directory-traversal-when2026-10-29 https://bugbountyreports.com/reports/4952-linux-desktop-application-slack-executable-does-not-use-pie2026-10-29 https://bugbountyreports.com/reports/4502-linux-kernel-cve-2017-1000112-a-memory-corruption-due-to2026-10-29 https://bugbountyreports.com/reports/4450-linux-kernel-cve-2017-6074-dccp-double-free-vulnerability2026-10-29 https://bugbountyreports.com/reports/4501-linux-kernel-cve-2017-7308-a-signedness-issue-in-af-packet2026-10-29 https://bugbountyreports.com/reports/2966-linux-tbb-sftp-uri-allows-local-ip-disclosure2026-10-29 https://bugbountyreports.com/reports/3908-list-any-file-in-the-folder-by-using-path-traversal2026-10-29 https://bugbountyreports.com/reports/814-list-of-devices-is-accessible-regardless-of-the-account2026-10-29 https://bugbountyreports.com/reports/3064-listing-of-amazon-s3-bucket-accessible-to-any-amazon2026-10-29 https://bugbountyreports.com/reports/6664-listing-of-email-addresses-of-whitelisted-business-users2026-10-29 https://bugbountyreports.com/reports/9348-llm01-invisible-prompt-injection2026-10-29 https://bugbountyreports.com/reports/7151-loading-yaml-in-java-client-can-lead-to-command-execution2026-10-29 https://bugbountyreports.com/reports/8244-local-applications-from-user-s-computer-can-listen-for2026-10-29 https://bugbountyreports.com/reports/5743-local-file-disclosure-xss-csrf-in-airos-6-2-0-devices2026-10-29 https://bugbountyreports.com/reports/7019-local-file-disclosure-delete-on-us-az-vpn-acronis-com2026-10-29 https://bugbountyreports.com/reports/9415-local-file-disclosure-on-the-https-edu-leads-to-the-full2026-10-29 https://bugbountyreports.com/reports/6499-local-file-disclosure-on-the-https-leads-to-the-source-code2026-10-29 https://bugbountyreports.com/reports/7788-local-file-disclosure-through-ssrf-at-next-nutanix-com2026-10-29 https://bugbountyreports.com/reports/2514-local-file-disclosure-via-ffmpeg-hls-processing2026-10-29 https://bugbountyreports.com/reports/3985-local-file-download2026-10-29 https://bugbountyreports.com/reports/9475-local-file-inclusion-in-download-php2026-10-29 https://bugbountyreports.com/reports/6311-local-file-inclusion-in-registration-page2026-10-29 https://bugbountyreports.com/reports/1442-local-file-inclusion-path-bypass2026-10-29 https://bugbountyreports.com/reports/1302-local-file-inclusion-vulnerability-in-concrete5-version-5-72026-10-29 https://bugbountyreports.com/reports/2192-local-file-inclusion-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/1815-local-file-inclusion-vulnerability-on-an-army-system-allows2026-10-29 https://bugbountyreports.com/reports/8224-local-file-read-at-https-htus2026-10-29 https://bugbountyreports.com/reports/1089-local-file-read-in-image-editor2026-10-29 https://bugbountyreports.com/reports/8415-local-file-read-vulnerability-on-htus2026-10-29 https://bugbountyreports.com/reports/4361-local-files-could-be-overwritten-in-gitlab-leading-to2026-10-29 https://bugbountyreports.com/reports/3759-local-files-reading-from-the-file-origin-through-brave2026-10-29 https://bugbountyreports.com/reports/3732-local-files-reading-from-the-web-using-brave2026-10-29 https://bugbountyreports.com/reports/3760-local-files-reading-using-link-rel-import2026-10-29 https://bugbountyreports.com/reports/9573-local-privilege-escalation-and-code-execution-when2026-10-29 https://bugbountyreports.com/reports/7204-local-privilege-escalation-during-execution-of2026-10-29 https://bugbountyreports.com/reports/7025-local-privilege-escalation-in-anti-ransomware-service-exe2026-10-29 https://bugbountyreports.com/reports/5642-local-privilege-escalation-to-root-via-xpc2026-10-29 https://bugbountyreports.com/reports/9570-local-privilege-escalation-using-system-clean-up2026-10-29 https://bugbountyreports.com/reports/9569-local-privilege-escalation-via-backup-delete2026-10-29 https://bugbountyreports.com/reports/9574-local-privilege-escalation-via-dll-search-order-hijacking2026-10-29 https://bugbountyreports.com/reports/9550-local-privilege-escalation-via-dll-search-order-hijacking2026-10-29 https://bugbountyreports.com/reports/9562-local-privilege-escalation-via-exe-hijacking-with-acronis2026-10-29 https://bugbountyreports.com/reports/9561-local-privilege-escalation-via-exe-hijacking-with-acronis2026-10-29 https://bugbountyreports.com/reports/7154-local-privilege-escalation-via-insecure-msi-file2026-10-29 https://bugbountyreports.com/reports/9553-local-privilege-escalation-when-deleting-a-file-from2026-10-29 https://bugbountyreports.com/reports/9571-local-privilege-escalation-when-updating-acronis-true-image2026-10-29 https://bugbountyreports.com/reports/4680-locale-accept-from-http-out-of-bounds-access2026-10-29 https://bugbountyreports.com/reports/214-locale-parselocale-double-free2026-10-29 https://bugbountyreports.com/reports/4348-locked-transfer-functional-burning2026-10-29 https://bugbountyreports.com/reports/20-log-in-a-user-to-another-account2026-10-29 https://bugbountyreports.com/reports/205-log-out-cross-site-request-forgery2026-10-29 https://bugbountyreports.com/reports/1352-log-pollution-can-lead-to-html-injection2026-10-29 https://bugbountyreports.com/reports/7514-log4j-rce-on-https-judge-me-reviews2026-10-29 https://bugbountyreports.com/reports/7538-log4shell-rce-0-day-exploit-on2026-10-29 https://bugbountyreports.com/reports/2951-logging-a-user-into-attacker-s-account-using-password-reset2026-10-29 https://bugbountyreports.com/reports/8758-logging-in-without-knowing-credentials-after-logged-out2026-10-29 https://bugbountyreports.com/reports/1462-logging-out-any-user2026-10-29 https://bugbountyreports.com/reports/585-logic-error-with-notifications-user-that-has-left-team2026-10-29 https://bugbountyreports.com/reports/4050-logic-flaw-in-the-post-creation-process-allows-creating2026-10-29 https://bugbountyreports.com/reports/2809-logic-issue-in-email-change-process2026-10-29 https://bugbountyreports.com/reports/3047-logic-issue-in-email-change-process2026-10-29 https://bugbountyreports.com/reports/526-logic-issue-with-reputation-boost-reputation-points2026-10-29 https://bugbountyreports.com/reports/578-logical-issues-with-account-settings2026-10-29 https://bugbountyreports.com/reports/4116-login-as-root-without-password-on-edgeswitchx2026-10-29 https://bugbountyreports.com/reports/1622-login-credentials-transmitted-in-cleartext-on-index2026-10-29 https://bugbountyreports.com/reports/122-login-csrf2026-10-29 https://bugbountyreports.com/reports/276-login-csrf2026-10-29 https://bugbountyreports.com/reports/2394-login-csrf-login-authentication-flaw2026-10-29 https://bugbountyreports.com/reports/6797-login-csrf-login-authentication-flaw-on-https-liberapay-com2026-10-29 https://bugbountyreports.com/reports/177-login-csrf-can-be-bypassed-similar-approach-to-previous-one2026-10-29 https://bugbountyreports.com/reports/4560-login-csrf-in-analytics-mopub-com2026-10-29 https://bugbountyreports.com/reports/200-login-csrf-in-secret-ly2026-10-29 https://bugbountyreports.com/reports/992-login-csrf-using-google-oauth2026-10-29 https://bugbountyreports.com/reports/220-login-csrf-using-twitter-oauth2026-10-29 https://bugbountyreports.com/reports/32-login-csrf-using-twitter-oauth2026-10-29 https://bugbountyreports.com/reports/5633-login-csrf-vulnerability-on-hackerone-com2026-10-29 https://bugbountyreports.com/reports/2189-login-form-on-non-https-page2026-10-29 https://bugbountyreports.com/reports/9854-login-information-and-credentials-have-been-leaked-on2026-10-29 https://bugbountyreports.com/reports/151-login-page-password-guessing-attack2026-10-29 https://bugbountyreports.com/reports/9313-login-page-password-guessing-attack2026-10-29 https://bugbountyreports.com/reports/6446-login-page-vulnerable-to-bruteforce-attacks-via-rate2026-10-29 https://bugbountyreports.com/reports/176-login-password-guessing-attack2026-10-29 https://bugbountyreports.com/reports/263-login-password-guessing-attack2026-10-29 https://bugbountyreports.com/reports/7159-login-session-not-expire2026-10-29 https://bugbountyreports.com/reports/2721-login-to-any-account-with-the-emailaddress2026-10-29 https://bugbountyreports.com/reports/2642-login-to-any-user-account-using-other-facebook-app-access2026-10-29 https://bugbountyreports.com/reports/827-login-to-any-user-s-cashier-account-and-full-account2026-10-29 https://bugbountyreports.com/reports/2274-login-using-disconnected-google-account-i-e-login-using-old2026-10-29 https://bugbountyreports.com/reports/1275-login-via-fb-leads-to-create-a-new-account-instead-of2026-10-29 https://bugbountyreports.com/reports/2327-login-with-google-not-authenticated-on-ios-app2026-10-29 https://bugbountyreports.com/reports/8305-logj4-vulnerability-htus2026-10-29 https://bugbountyreports.com/reports/544-logout-any-user-of-same-team2026-10-29 https://bugbountyreports.com/reports/2281-logout-csrf2026-10-29 https://bugbountyreports.com/reports/230-logout-csrf-app-simplenote-com-logout2026-10-29 https://bugbountyreports.com/reports/6529-loing-in-to-marketplace-panel-on-enablement-informatica-com2026-10-29 https://bugbountyreports.com/reports/6102-long-filenames-cause-oom-and-temp-files-are-not-cleaned2026-10-29 https://bugbountyreports.com/reports/10473-loss-of-multisig-funds-through-single-malicious-participant2026-10-29 https://bugbountyreports.com/reports/8497-low-authorization-level-at-server-side-api-operation-e2e2026-10-29 https://bugbountyreports.com/reports/6320-low-privileged-staff-member-can-export-billing-charges2026-10-29 https://bugbountyreports.com/reports/6997-low-privileged-user-can-add-or-remove-cash-to-from-sales2026-10-29 https://bugbountyreports.com/reports/6573-low-privileged-user-can-create-high-privileged-user-s2026-10-29 https://bugbountyreports.com/reports/9363-low-privileges-auth-remote-command-execution-php-file2026-10-29 https://bugbountyreports.com/reports/9855-low-level-p2p-ping-tcp-flooding-leads-to-a-remote-crash-in2026-10-29 https://bugbountyreports.com/reports/10567-low-privilege-rce-in-mariadb-sys-refcursor-cursor-array-use2026-10-29 https://bugbountyreports.com/reports/10058-low-privileged-user-can-enable-or-disable-lovable-ai-for2026-10-29 https://bugbountyreports.com/reports/9361-lynxview-js-interfaces-takeover-via-deeplink-traversal2026-10-29 https://bugbountyreports.com/reports/268-lz4-core2026-10-29 https://bugbountyreports.com/reports/1729-lzmadecompressor-decompress-use-after-free2026-10-29 https://bugbountyreports.com/reports/8474-mail-app-blind-ssrf-via-imaphost-parameter2026-10-29 https://bugbountyreports.com/reports/8475-mail-app-blind-ssrf-via-sierve-server-fonctionnality-and2026-10-29 https://bugbountyreports.com/reports/8476-mail-app-blind-ssrf-via-smtphost-parameter2026-10-29 https://bugbountyreports.com/reports/8540-mail-app-stores-cleartext-password-in-database-until-oauth22026-10-29 https://bugbountyreports.com/reports/9681-mail-auto-configurator-can-be-tricked-into-sending-account2026-10-29 https://bugbountyreports.com/reports/10514-mail-contact-autocomplete-bypasses-administrator-configured2026-10-29 https://bugbountyreports.com/reports/5588-mail-does-not-verify-imap-smtp-host-connected-via-tls2026-10-29 https://bugbountyreports.com/reports/892-mail-spaming2026-10-29 https://bugbountyreports.com/reports/10207-mail-stored-html-injection-in-subject-text2026-10-29 https://bugbountyreports.com/reports/8213-mail-acronis-com-is-vulnerable-to-zero-day-vulnerability2026-10-29 https://bugbountyreports.com/reports/2609-mailbomb-through-invite-feature-on-chrome-addon2026-10-29 https://bugbountyreports.com/reports/2538-mailgun-misconfiguration2026-10-29 https://bugbountyreports.com/reports/1734-mailgun-misconfiguration-leads-to-email-snooping-and2026-10-29 https://bugbountyreports.com/reports/2976-mailgun-misconfiguration-on-email-bitwarden-com2026-10-29 https://bugbountyreports.com/reports/2483-mailpoet-newsletters-2-7-2-authenticated-reflected-cross2026-10-29 https://bugbountyreports.com/reports/4525-mailsploit-a-sender-spoofing-bug-in-over-30-email-clients2026-10-29 https://bugbountyreports.com/reports/599-mailto-link-injection-on-https-hackerone-com-directory2026-10-29 https://bugbountyreports.com/reports/9631-maintainer-can-leak-sentry-token-by-changing-the-configured2026-10-29 https://bugbountyreports.com/reports/408-make-api-calls-on-behalf-of-another-user-csrf-protection2026-10-29 https://bugbountyreports.com/reports/551-making-any-report-failed-to-load2026-10-29 https://bugbountyreports.com/reports/107-making-groups-in-any-project-without-permission2026-10-29 https://bugbountyreports.com/reports/6082-making-program-preference-program-visibilty-feature-usless2026-10-29 https://bugbountyreports.com/reports/9964-making-transfer-v2-channel-unupgradable-through-the2026-10-29 https://bugbountyreports.com/reports/5255-malformed-bmp-file-in-counter-strike-1-6-may-cause2026-10-29 https://bugbountyreports.com/reports/3585-malformed-bsp-access-violation-in-cs-go-can-lead-to-remote2026-10-29 https://bugbountyreports.com/reports/4625-malformed-mdl-triggers-an-access-violation-on-goldsrc-hl-exe2026-10-29 https://bugbountyreports.com/reports/5253-malformed-wav-triggers-an-access-violation-on-goldsrc-hl-exe2026-10-29 https://bugbountyreports.com/reports/5352-malformed-bsp-in-goldsrc-engine-may-cause-shellcode2026-10-29 https://bugbountyreports.com/reports/602-malformed-ecparameters-causes-infinite-loop2026-10-29 https://bugbountyreports.com/reports/5756-malformed-http-2-settings-frame-leads-to-reachable-assert2026-10-29 https://bugbountyreports.com/reports/4514-malformed-map-detailed-texture-files-in-goldsrc-games-lead2026-10-29 https://bugbountyreports.com/reports/5350-malformed-nav-file-leads-to-buffer-overflow-and-code2026-10-29 https://bugbountyreports.com/reports/4513-malformed-playlist-txt-in-goldsrc-games-leads-to-access2026-10-29 https://bugbountyreports.com/reports/5247-malformed-save-files-sav-allow-to-write-files-with2026-10-29 https://bugbountyreports.com/reports/2353-malformed-sha512-ticket-dos-cve-2016-63022026-10-29 https://bugbountyreports.com/reports/3656-malformed-skybox-tga-in-half-life-goldsrc-leads-to-access2026-10-29 https://bugbountyreports.com/reports/5438-malformed-string-sent-through-fireserver-leads-to-server2026-10-29 https://bugbountyreports.com/reports/7002-malicious-apps-can-crash-nextcloud-android-client-by2026-10-29 https://bugbountyreports.com/reports/3990-malicious-callback-url-can-be-set-while-creating2026-10-29 https://bugbountyreports.com/reports/10356-malicious-conflux-endpoint-can-leave-stale-global-ooo-queue2026-10-29 https://bugbountyreports.com/reports/1253-malicious-file-upload2026-10-29 https://bugbountyreports.com/reports/3758-malicious-get-random-rct-outs-bin-rpc-can-cause-a-near2026-10-29 https://bugbountyreports.com/reports/4934-malicious-server-can-force-read-any-file-on-clients-system2026-10-29 https://bugbountyreports.com/reports/8686-maliciously-crafted-message-can-cause-rocket-chat-server-to2026-10-29 https://bugbountyreports.com/reports/4836-malloc-negative-size-parameter2026-10-29 https://bugbountyreports.com/reports/3624-malware-in-active-support-gem2026-10-29 https://bugbountyreports.com/reports/7397-man-in-the-middle-using-loadbalancer-or-externalips-services2026-10-29 https://bugbountyreports.com/reports/9997-man-in-the-middle-through-broken-ssl-certificate2026-10-29 https://bugbountyreports.com/reports/9593-management-console-editor-privilege-escalation-to-root-ssh2026-10-29 https://bugbountyreports.com/reports/9595-management-console-editor-privilege-escalation-to-root-ssh2026-10-29 https://bugbountyreports.com/reports/9598-management-console-editor-privilege-escalation-to-root-ssh2026-10-29 https://bugbountyreports.com/reports/9599-management-console-editor-privilege-escalation-to-root-ssh2026-10-29 https://bugbountyreports.com/reports/9601-management-console-editor-privilege-escalation-to-root-ssh2026-10-29 https://bugbountyreports.com/reports/9592-management-console-editor-privilege-escalation-to-root-ssh2026-10-29 https://bugbountyreports.com/reports/8385-managing-pages2026-10-29 https://bugbountyreports.com/reports/4548-manipulate-hacker-profile-and-private-program-hacktivity-to2026-10-29 https://bugbountyreports.com/reports/1742-manipulate-the-practical-http-host-header2026-10-29 https://bugbountyreports.com/reports/6536-manipulating-response-leads-to-free-access-to-streamlabs2026-10-29 https://bugbountyreports.com/reports/4635-manipulation-of-exam-results-at-semrush-academy2026-10-29 https://bugbountyreports.com/reports/8054-many-commands-can-be-manipulated-to-delete-identities-or2026-10-29 https://bugbountyreports.com/reports/2954-many-slack-teams-can-be-joined-by-abusing-an-improperly2026-10-29 https://bugbountyreports.com/reports/930-many-xss-in-widgets-shopifyapps-com2026-10-29 https://bugbountyreports.com/reports/2065-mapbox-android-sdk-uses-broadcast-receiver-instead-of-local2026-10-29 https://bugbountyreports.com/reports/1210-mapbox-api-access-token-with-no-scope-can-read-styles2026-10-29 https://bugbountyreports.com/reports/10523-mariadb-grant-proxy-permits-unauthorized-authentication2026-10-29 https://bugbountyreports.com/reports/10577-mariadb-handlersocket-improper-request-field-count2026-10-29 https://bugbountyreports.com/reports/10576-mariadb-low-privilege-user-can-exhaust-memory-through-a2026-10-29 https://bugbountyreports.com/reports/10522-mariadb-heap-buffer-overflow-in-ha-tina-chain-append-lets-a2026-10-29 https://bugbountyreports.com/reports/2221-markdown-based-stored-xss-ie-only2026-10-29 https://bugbountyreports.com/reports/630-markdown-code-block-sequence-makes-report-unreadable2026-10-29 https://bugbountyreports.com/reports/5068-markdown-parsing-issue-enables-insertion-of-malicious-tags2026-10-29 https://bugbountyreports.com/reports/500-markdown-parsing-issue-enables-insertion-of-malicious-tags2026-10-29 https://bugbountyreports.com/reports/3189-markdown-parsing-issue-enables-insertion-of-malicious-tags2026-10-29 https://bugbountyreports.com/reports/529-marking-notifications-as-read-csrf-bug2026-10-29 https://bugbountyreports.com/reports/7983-mass-account-takeover-at-https-app-taxjar-com-no-user2026-10-29 https://bugbountyreports.com/reports/8384-mass-account-takeover2026-10-29 https://bugbountyreports.com/reports/5307-mass-account-takeovers-using-http-request-smuggling-on2026-10-29 https://bugbountyreports.com/reports/8245-mass-accounts-takeover-without-any-user-interaction-at2026-10-29 https://bugbountyreports.com/reports/1163-mass-assignment-vulnerability-in-partners-uber-com2026-10-29 https://bugbountyreports.com/reports/9896-massive-pii-leakage-for2026-10-29 https://bugbountyreports.com/reports/7150-mattermost-server-oauth-flow-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/6135-mb-strtolower-utf-32le-stack-buffer-overflow-at-php-unicode2026-10-29 https://bugbountyreports.com/reports/4127-media-parsing-in-canvas-is-at-least-vulnerable-to-denial-of2026-10-29 https://bugbountyreports.com/reports/3224-mediaelements-xss2026-10-29 https://bugbountyreports.com/reports/1114-mediation-link-can-be-accepted-by-other-users2026-10-29 https://bugbountyreports.com/reports/672-mem-out-of-bounds-write-segfault-in-zend-assign-div-spec-cv2026-10-29 https://bugbountyreports.com/reports/9341-member-role-which-doesn-t-have-permission-to-send-message2026-10-29 https://bugbountyreports.com/reports/6848-member-still-able-close-another-user-poll-on-communities2026-10-29 https://bugbountyreports.com/reports/6006-members-from-parent-group-keep-their-access-level-on-a2026-10-29 https://bugbountyreports.com/reports/6888-members-personal-information-leak-due-to-idor2026-10-29 https://bugbountyreports.com/reports/9057-memcached-used-as-ratelimiter-backend-is-no-op2026-10-29 https://bugbountyreports.com/reports/1914-memcpy-negative-parameter-bc-new-num-ex2026-10-29 https://bugbountyreports.com/reports/1913-memcpy-negative-size-parameter-in-php-resolve-path2026-10-29 https://bugbountyreports.com/reports/3826-memectf-serial-exploitation-to-local-file-read-to2026-10-29 https://bugbountyreports.com/reports/4696-memory-allocator-fails-to-realloc-small-block-to-large-one2026-10-29 https://bugbountyreports.com/reports/2162-memory-corrouption-in-mrb-gc-mark2026-10-29 https://bugbountyreports.com/reports/4827-memory-corruption-due-to-missing-check-size-in-php-math2026-10-29 https://bugbountyreports.com/reports/4825-memory-corruption-in-php-math-number-format-ex2026-10-29 https://bugbountyreports.com/reports/4663-memory-corruption-in-during-deserialized-object-destruction2026-10-29 https://bugbountyreports.com/reports/558-memory-corruption-in-phar-parse-tarfile-when-entry-filename2026-10-29 https://bugbountyreports.com/reports/4848-memory-corruption-in-wordwrap-function2026-10-29 https://bugbountyreports.com/reports/9196-memory-corruption-via-large-pixels2026-10-29 https://bugbountyreports.com/reports/4641-memory-corruption-when-parsing-a-hostile-phar-archive2026-10-29 https://bugbountyreports.com/reports/4699-memory-corruption-while-parsing-http-response2026-10-29 https://bugbountyreports.com/reports/1755-memory-disclosure-in-mruby-string-lines-method2026-10-29 https://bugbountyreports.com/reports/1882-memory-disclosure-in-timegm2026-10-29 https://bugbountyreports.com/reports/6680-memory-dump-and-env-disclosure-via-spring-boot-actuator2026-10-29 https://bugbountyreports.com/reports/10621-memory-exhaustion-dos-via-unbounded-file-read-in2026-10-29 https://bugbountyreports.com/reports/9651-memory-leak-in-bytes-to-hexstring-function2026-10-29 https://bugbountyreports.com/reports/10265-memory-leak-in-gem-decode-logic-can-allow-attacker-to-take2026-10-29 https://bugbountyreports.com/reports/10254-memory-leak-in-node-js-http-2-server-via-window-update-on2026-10-29 https://bugbountyreports.com/reports/5871-memory-leak-in-ocutil-dll-library-in-desktop-client-can2026-10-29 https://bugbountyreports.com/reports/10210-memory-leak-that-enables-remote-denial-of-service-against2026-10-29 https://bugbountyreports.com/reports/4858-memory-leakage-in-exif-process-ifd-in-tiff-cve-2016-71282026-10-29 https://bugbountyreports.com/reports/2598-mercurial-can-be-tricked-into-granting-authorized-users2026-10-29 https://bugbountyreports.com/reports/4541-mercurial-git-subrepo-lead-to-arbritary-command-injection2026-10-29 https://bugbountyreports.com/reports/6200-message-authentication-codes-calculated-by-the-default2026-10-29 https://bugbountyreports.com/reports/8169-message-id-enumeration-with-action-link-handler2026-10-29 https://bugbountyreports.com/reports/8174-message-id-enumeration-with-regular-expression-in2026-10-29 https://bugbountyreports.com/reports/8659-messages-can-be-hidden-regardless-of-server-configuration2026-10-29 https://bugbountyreports.com/reports/8525-messages-can-still-be-seen-on-conversation-after-expiring2026-10-29 https://bugbountyreports.com/reports/6736-messages-disclosure-via-search-feature-of-other-users-group2026-10-29 https://bugbountyreports.com/reports/2660-meta-characters-are-not-filtered-into-full-name-on-profile2026-10-29 https://bugbountyreports.com/reports/240-meta-characters-not-filtered-on-signup2026-10-29 https://bugbountyreports.com/reports/9575-metamask-browser-on-android-does-not-enforce-content2026-10-29 https://bugbountyreports.com/reports/8812-metamask-browser-url-and-transaction-origin-spoofing2026-10-29 https://bugbountyreports.com/reports/10053-microsoft-x-apikey-exposed-in-mozilla-ci-public-logs2026-10-29 https://bugbountyreports.com/reports/9887-middleware-authentication-bypass-on-ibm-portal2026-10-29 https://bugbountyreports.com/reports/4368-milestones-leaked-via-search-api2026-10-29 https://bugbountyreports.com/reports/7684-military-name-email-phone-address-certdata-disclosure2026-10-29 https://bugbountyreports.com/reports/5323-minimal-information-disclosure-of-internal-asset-names-and2026-10-29 https://bugbountyreports.com/reports/783-minimum-bounty-of-a-private-program-is-visible-for-users2026-10-29 https://bugbountyreports.com/reports/6681-minor-account-privacy-can-set-to-everyone2026-10-29 https://bugbountyreports.com/reports/742-minor-bug-public-un-compiled-css-with-original-sass2026-10-29 https://bugbountyreports.com/reports/9484-minor-security-issue-with-hackerone-invitations-from2026-10-29 https://bugbountyreports.com/reports/9989-mint-oauth2-access-token-for-targeted-user2026-10-29 https://bugbountyreports.com/reports/2231-mirb-only-stack-buffer-overflow-oob-write-in-main2026-10-29 https://bugbountyreports.com/reports/345-misc-python-bugs-memory-corruption-use-after-free2026-10-29 https://bugbountyreports.com/reports/985-misconfiguration-in-2-factor-allows-sensitive-data-expose2026-10-29 https://bugbountyreports.com/reports/9097-misconfiguration-in-aws-cloudfront-cdn-configuration-makes2026-10-29 https://bugbountyreports.com/reports/7584-misconfiguration-in-build-environment-allows-dll-preloading2026-10-29 https://bugbountyreports.com/reports/1775-misconfiguration-in-two-factor-authorisation2026-10-29 https://bugbountyreports.com/reports/6531-misconfiguration-of-merchant-id-in-jwt-header-weird-debug2026-10-29 https://bugbountyreports.com/reports/6750-misconfigured-aws-s3-bucket-leaks-senstive-data-such-of2026-10-29 https://bugbountyreports.com/reports/8212-misconfigured-build-on-websites-abuse-cloudflare-com2026-10-29 https://bugbountyreports.com/reports/6738-misconfigured-oauth-leads-to-pre-account-takeover2026-10-29 https://bugbountyreports.com/reports/1950-misconfigured-password-reset-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/7706-misconfigured-rate-limit-at-app-sign-plus-forgot-password2026-10-29 https://bugbountyreports.com/reports/7828-misconfigured-rate-limit-for-sms-phone-verification-endpoint2026-10-29 https://bugbountyreports.com/reports/2044-misconfigured-user-account-settings-on-dod-website2026-10-29 https://bugbountyreports.com/reports/7146-mishandling-of-hackerone-clear-background-checks-resulting2026-10-29 https://bugbountyreports.com/reports/5530-mismatch-between-frontend-and-backend-validation-via-ban2026-10-29 https://bugbountyreports.com/reports/3613-misreporting-of-received-amount-by-show-transfers2026-10-29 https://bugbountyreports.com/reports/306-missing-size-check-on-files-to-upload-could-make-memory2026-10-29 https://bugbountyreports.com/reports/9908-missing-line-beginner-leads-to-origin-spoofing2026-10-29 https://bugbountyreports.com/reports/9471-missing-access-control-allows-for-user-creation-and2026-10-29 https://bugbountyreports.com/reports/2823-missing-access-control-at-password-change2026-10-29 https://bugbountyreports.com/reports/1624-missing-access-control-exposing-detailed-information-on-all2026-10-29 https://bugbountyreports.com/reports/10228-missing-access-control-in-migrationfile-allows-attacker-to2026-10-29 https://bugbountyreports.com/reports/10339-missing-access-control-when-linking-banners-or-campaigns-to2026-10-29 https://bugbountyreports.com/reports/10338-missing-access-control-when-linking-trackers-to-campaigns2026-10-29 https://bugbountyreports.com/reports/10332-missing-access-control-when-modifying-parent-entities-via2026-10-29 https://bugbountyreports.com/reports/2544-missing-account-deletion-notification2026-10-29 https://bugbountyreports.com/reports/7529-missing-authentication-in-buddy-group-api-of-line-timeline2026-10-29 https://bugbountyreports.com/reports/812-missing-authorization-check-on-dashboard-overviews2026-10-29 https://bugbountyreports.com/reports/1431-missing-authorization-checks-leading-to-the-exposure-of2026-10-29 https://bugbountyreports.com/reports/3507-missing-back-end-user-input-validation-can-lead-to-dos-flaw2026-10-29 https://bugbountyreports.com/reports/8655-missing-brute-force-protection-for-passwords-of-password2026-10-29 https://bugbountyreports.com/reports/8919-missing-brute-force-protection-on-login-page-on-www-acronis2026-10-29 https://bugbountyreports.com/reports/8867-missing-brute-force-protection-on-oauth2-api-controller2026-10-29 https://bugbountyreports.com/reports/8562-missing-brute-force-protection-on-password-confirmation2026-10-29 https://bugbountyreports.com/reports/7496-missing-captcha-and-rate-limit-protection-in-help-form2026-10-29 https://bugbountyreports.com/reports/2719-missing-certificate-authority-authorization-rule2026-10-29 https://bugbountyreports.com/reports/4172-missing-certificate-authority-authorization-rule2026-10-29 https://bugbountyreports.com/reports/8432-missing-character-limitation-allows-to-put-generate-a2026-10-29 https://bugbountyreports.com/reports/2288-missing-dmarc-on-weblate-org2026-10-29 https://bugbountyreports.com/reports/4467-missing-dnssec2026-10-29 https://bugbountyreports.com/reports/10516-missing-duplicate-check-allowing-multiple-retention-rules2026-10-29 https://bugbountyreports.com/reports/10573-missing-file-privilege-enforcement-in-connect-file-udfs2026-10-29 https://bugbountyreports.com/reports/2560-missing-filteration-of-meta-characters-in-all-full-name2026-10-29 https://bugbountyreports.com/reports/2333-missing-filteration-of-meta-characters-in-full-name-field2026-10-29 https://bugbountyreports.com/reports/1040-missing-function-level-access-control-in-cindex-php-widget2026-10-29 https://bugbountyreports.com/reports/8983-missing-function-level-access-control-in-mozilla-formula2026-10-29 https://bugbountyreports.com/reports/2869-missing-homograph-filter-character2026-10-29 https://bugbountyreports.com/reports/314-missing-hsts-strict-transport-security2026-10-29 https://bugbountyreports.com/reports/2739-missing-issuer-parameter-on-totp-2fa2026-10-29 https://bugbountyreports.com/reports/8375-missing-length-validation-of-user-displayname-allows-to2026-10-29 https://bugbountyreports.com/reports/9659-missing-line-terminator-on-allowedorigins-enables-origin2026-10-29 https://bugbountyreports.com/reports/2606-missing-link-to-2fa-recovery-code2026-10-29 https://bugbountyreports.com/reports/2666-missing-link-to-totp-manual-enroll-option2026-10-29 https://bugbountyreports.com/reports/5894-missing-memory-corruption-protection-on-windows-release2026-10-29 https://bugbountyreports.com/reports/4816-missing-null-check-in-dom-document-save-html2026-10-29 https://bugbountyreports.com/reports/857-missing-of-csrf-protection2026-10-29 https://bugbountyreports.com/reports/7527-missing-ownership-check-in-2fa-for-secondary-client-login2026-10-29 https://bugbountyreports.com/reports/10091-missing-ownership-check-in-tables-app-allows-moving-columns2026-10-29 https://bugbountyreports.com/reports/5413-missing-ownership-check-on-remote-wipe-endpoint2026-10-29 https://bugbountyreports.com/reports/10396-missing-ownership-validation-allows-cross-manager-tracker2026-10-29 https://bugbountyreports.com/reports/9451-missing-permission-check-when-removing-a-photo-from-an-album2026-10-29 https://bugbountyreports.com/reports/4035-missing-protection-mechanism-in-mail-servers-allows2026-10-29 https://bugbountyreports.com/reports/6085-missing-rate-limit-for-current-password-field-password2026-10-29 https://bugbountyreports.com/reports/2324-missing-rate-limit-for-current-password-field-in-nextcloud2026-10-29 https://bugbountyreports.com/reports/4234-missing-rate-limit-in-forgot-password-can-lead-to-email2026-10-29 https://bugbountyreports.com/reports/4357-missing-rate-limit-in-password-change2026-10-29 https://bugbountyreports.com/reports/5837-missing-rate-limit-in-signup-form2026-10-29 https://bugbountyreports.com/reports/4171-missing-rate-limit-on-critical-user-actions-e-g-reset2026-10-29 https://bugbountyreports.com/reports/1038-missing-rate-limit-on-private-videos-password2026-10-29 https://bugbountyreports.com/reports/1687-missing-rate-limiting-for-sensitive-actions-like-forgot2026-10-29 https://bugbountyreports.com/reports/371-missing-rate-limiting-on-https-twitter-com-account-complete2026-10-29 https://bugbountyreports.com/reports/8534-missing-rate-limiting-on-password-reset-functionality2026-10-29 https://bugbountyreports.com/reports/2409-missing-rate-limiting-protection-leading-to-mass-triggering2026-10-29 https://bugbountyreports.com/reports/1663-missing-rel-noopener-noreferrer-in-target-blank-links2026-10-29 https://bugbountyreports.com/reports/1528-missing-rel-noreferrer-tag-allows-link-in-list-to-change2026-10-29 https://bugbountyreports.com/reports/5487-missing-resource-identifier-encoding-may-lead-to-security2026-10-29 https://bugbountyreports.com/reports/2406-missing-restriction-on-string-size2026-10-29 https://bugbountyreports.com/reports/2845-missing-restriction-on-string-size2026-10-29 https://bugbountyreports.com/reports/1860-missing-restriction-on-string-size-in-profile-fields2026-10-29 https://bugbountyreports.com/reports/2446-missing-restriction-on-string-size-of-contact-field2026-10-29 https://bugbountyreports.com/reports/2310-missing-restriction-on-string-size-of-full-name-at-https2026-10-29 https://bugbountyreports.com/reports/2974-missing-robots-exclusion-header-for-user-uploads2026-10-29 https://bugbountyreports.com/reports/1513-missing-security-headers-possible-clickjacking2026-10-29 https://bugbountyreports.com/reports/295-missing-sender-policy-framework-spf2026-10-29 https://bugbountyreports.com/reports/6066-missing-server-side-controls-when-editing-the-board-s2026-10-29 https://bugbountyreports.com/reports/2170-missing-server-side-rate-limiting-can-lead-to-vk-account2026-10-29 https://bugbountyreports.com/reports/1236-missing-server-side-validation-of-csrf-middleware-token-in2026-10-29 https://bugbountyreports.com/reports/237-missing-spf-sender-policy-framework-for-meteorapm-com2026-10-29 https://bugbountyreports.com/reports/2539-missing-spf-flags2026-10-29 https://bugbountyreports.com/reports/5277-missing-spf-flags-for-customerupdates-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/521-missing-spf-flags-for-hackerone-com2026-10-29 https://bugbountyreports.com/reports/513-missing-spf-flags-for-myshopify-com2026-10-29 https://bugbountyreports.com/reports/243-missing-spf-for-factlink-com-and-staging-factlink-com2026-10-29 https://bugbountyreports.com/reports/11-missing-spf-for-hackerone-com2026-10-29 https://bugbountyreports.com/reports/1569-missing-spf-for-legalrobot-com2026-10-29 https://bugbountyreports.com/reports/403-missing-spf-header-on-revert-io2026-10-29 https://bugbountyreports.com/reports/5923-missing-spf-records2026-10-29 https://bugbountyreports.com/reports/2996-missing-ssl-can-leak-job-token2026-10-29 https://bugbountyreports.com/reports/4845-missing-type-check-when-unserializing-splarray2026-10-29 https://bugbountyreports.com/reports/159-missing-x-content-type-options2026-10-29 https://bugbountyreports.com/reports/5279-missing-x-content-type-options2026-10-29 https://bugbountyreports.com/reports/6485-mission-completed-grinch-networks-is-down-and-christmas2026-10-29 https://bugbountyreports.com/reports/5652-misuse-of-an-authentication-cookie-combined-with-a-path2026-10-29 https://bugbountyreports.com/reports/7378-misuse-of-groups-feature-allows-workspace-members-to-join2026-10-29 https://bugbountyreports.com/reports/4915-misusing-of-fpu-instruction-could-cause-security2026-10-29 https://bugbountyreports.com/reports/1962-mixed-active-content-issue-on-https-www-lyst-com2026-10-29 https://bugbountyreports.com/reports/936-mixed-active-scripting-issue-on-stats-owncloud-org2026-10-29 https://bugbountyreports.com/reports/2697-mixed-content-over-https2026-10-29 https://bugbountyreports.com/reports/5521-mk-site-cross-site-scripting-xss-in-script-context2026-10-29 https://bugbountyreports.com/reports/4713-mod-http2-memory-corruption-on-early-pushes-cve-2019-100812026-10-29 https://bugbountyreports.com/reports/4714-mod-http2-read-after-free-in-h2-connection-shutdown-cve2026-10-29 https://bugbountyreports.com/reports/415-mod-lua-crash-in-websockets-ping-handling2026-10-29 https://bugbountyreports.com/reports/372-mod-proxy-fcgi-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/4779-mod-remoteip-stack-buffer-overflow-and-null-pointer2026-10-29 https://bugbountyreports.com/reports/3766-mod-userdir-crlf-injection-cve-2016-49752026-10-29 https://bugbountyreports.com/reports/9443-moderate-apache-http-server-proxy-encoding-problem-cve-20242026-10-29 https://bugbountyreports.com/reports/9444-moderate-apache-http-server-http-response-splitting-cve2026-10-29 https://bugbountyreports.com/reports/9529-moderate-apache-http-server-mod-rewrite-proxy-handler2026-10-29 https://bugbountyreports.com/reports/253-moderate-mod-deflate-denial-of-service2026-10-29 https://bugbountyreports.com/reports/7906-moderator-can-enable-cam-mic-remotely-if-cam-mic-permission2026-10-29 https://bugbountyreports.com/reports/6534-moderator-user-has-access-to-owner-s-support-portal-and2026-10-29 https://bugbountyreports.com/reports/7959-moderators-can-send-messages-to-users-from-banned2026-10-29 https://bugbountyreports.com/reports/5245-modify-account-details-by-exploiting-clickjacking2026-10-29 https://bugbountyreports.com/reports/5216-modify-host-header-which-is-sent-to-email2026-10-29 https://bugbountyreports.com/reports/7162-modify-in-flight-data-to-payment-provider-smart2pay2026-10-29 https://bugbountyreports.com/reports/8107-modifying-sprunk-vs-ecola-crew-data2026-10-29 https://bugbountyreports.com/reports/4327-monero-can-leak-unitialized-memory2026-10-29 https://bugbountyreports.com/reports/3291-monero-gui-not-linked-with-dynamicbase-or-hardening-on2026-10-29 https://bugbountyreports.com/reports/10479-monero-gui-openalias-dnssec-invalid-resolution-still-writes2026-10-29 https://bugbountyreports.com/reports/10670-monero-ipv6-128-tracking-bypasses-per-ip-limit-enables2026-10-29 https://bugbountyreports.com/reports/4954-monero-wallet-gui-for-windows-arbitrary-code-execution2026-10-29 https://bugbountyreports.com/reports/5304-monero-wallet-password-change-is-confirmed-when-not-matching2026-10-29 https://bugbountyreports.com/reports/3383-monero-website-kovri-on-your-policy-are-returning-404-not2026-10-29 https://bugbountyreports.com/reports/10474-monero-deeplink-parsing-accepts-tx-amount-all-and-can2026-10-29 https://bugbountyreports.com/reports/3611-monerod-can-be-disabled-by-a-well-timed-tcp-reset-packet2026-10-29 https://bugbountyreports.com/reports/8125-monerod-json-rpc-server-remote-dos2026-10-29 https://bugbountyreports.com/reports/2716-moneybird-customers-invoices-leak-in-cacheable-urls2026-10-29 https://bugbountyreports.com/reports/10027-mongodb-query-logs-schema-leak-via-unauthenticated-endpoint2026-10-29 https://bugbountyreports.com/reports/9407-monitoring-prow-canary-k8s-io-is-vulnerable-to-cve-20222026-10-29 https://bugbountyreports.com/reports/6894-moodle-xss-on-evolve-glovoapp-com2026-10-29 https://bugbountyreports.com/reports/8693-moodle-xss-on-s-immerscio-comprehend-ibm-com2026-10-29 https://bugbountyreports.com/reports/1657-more-content-spoofing-through-dir-param-in-the-files-app2026-10-29 https://bugbountyreports.com/reports/4199-moving-a-report-to-a-different-program-doesn-t-reassign-the2026-10-29 https://bugbountyreports.com/reports/8685-moving-private-messages-into-vision-with-updatemessage2026-10-29 https://bugbountyreports.com/reports/9109-mozilla-employee-s-token-for-sql-telemetry-mozilla-org2026-10-29 https://bugbountyreports.com/reports/9082-mozilla-fuzzmanager-api-token-exposed-in-git-commit2026-10-29 https://bugbountyreports.com/reports/8950-mozilla-mastodon-staging-instance-admin-api-key-disclosure2026-10-29 https://bugbountyreports.com/reports/9991-mozilla-vpn-clients-rce-via-file-write-and-path-traversal2026-10-29 https://bugbountyreports.com/reports/9968-mozillavpn-elevation-of-privilege-via-a-logic-vulnerability2026-10-29 https://bugbountyreports.com/reports/9967-mozillavpn-elevation-of-privilege-via-a-race-condition2026-10-29 https://bugbountyreports.com/reports/1898-mrb-str-modify-try-to-write-to-memory-not-marked-for-writing2026-10-29 https://bugbountyreports.com/reports/1930-mrb-vformat-heap-overflow-could-lead-to-code-execution2026-10-29 https://bugbountyreports.com/reports/2146-mrb-vm-exec-null-ptr-dereference2026-10-29 https://bugbountyreports.com/reports/2201-mruby-heap-use-after-free2026-10-29 https://bugbountyreports.com/reports/3157-mruby-heredoc-notation2026-10-29 https://bugbountyreports.com/reports/1762-mruby-time-crash-host-with-uninitialized-time-obj2026-10-29 https://bugbountyreports.com/reports/3447-ms5-debug-page-exposing-internal-info-internal-ips-headers2026-10-29 https://bugbountyreports.com/reports/1558-msilib-opendatabase-type-confusion2026-10-29 https://bugbountyreports.com/reports/4087-mssing-authorization-on-private-message-replies-buddypress2026-10-29 https://bugbountyreports.com/reports/4630-mssql-injection-via-param-customwho-in-https-news2026-10-29 https://bugbountyreports.com/reports/3886-multiple-bugs-in-api-data-gov-signup-endpoint-leads-to-send2026-10-29 https://bugbountyreports.com/reports/6734-multiple-bugs-leads-to-rce-on-tiktok-for-android2026-10-29 https://bugbountyreports.com/reports/1374-multiple-critical-vulnerabilities-in-odnoklassniki-android2026-10-29 https://bugbountyreports.com/reports/1300-multiple-cross-site-request-forgery-vulnerabilities-in2026-10-29 https://bugbountyreports.com/reports/8955-multiple-cross-site-scripting-xss-vulnerabilities-in-revive2026-10-29 https://bugbountyreports.com/reports/6388-multiple-cross-site-scripting-vulnerability-via-the2026-10-29 https://bugbountyreports.com/reports/4991-multiple-cryptographic-vulnerabilities-in-login-page-on2026-10-29 https://bugbountyreports.com/reports/2152-multiple-domxss-on-amplify-web-player2026-10-29 https://bugbountyreports.com/reports/5754-multiple-email-usage-my-stripo-email2026-10-29 https://bugbountyreports.com/reports/3840-multiple-file-manipulation-bugs-in-wp-super-cache2026-10-29 https://bugbountyreports.com/reports/4708-multiple-heap-overflow-due-to-integer-overflows-xml-filter2026-10-29 https://bugbountyreports.com/reports/4650-multiple-heap-overflows-in-php-raw-url-encode-php-url-encode2026-10-29 https://bugbountyreports.com/reports/4923-multiple-http-smuggling-reports2026-10-29 https://bugbountyreports.com/reports/4429-multiple-http-2-dos-issues2026-10-29 https://bugbountyreports.com/reports/7824-multiple-idors-in-family-pairing-api2026-10-29 https://bugbountyreports.com/reports/5610-multiple-information-disclosure-with-go-pprof-on-api-ne2026-10-29 https://bugbountyreports.com/reports/4698-multiple-issues-in-libxml2-2-9-2-2-9-52026-10-29 https://bugbountyreports.com/reports/328-multiple-issues-in-looking-glass-software-aka-from-web-to2026-10-29 https://bugbountyreports.com/reports/187-multiple-issues-related-to-registering-applications2026-10-29 https://bugbountyreports.com/reports/1099-multiple-issues-with-markdown-and-url-parsing2026-10-29 https://bugbountyreports.com/reports/5542-multiple-links-vulnerable-to-reflected-xss2026-10-29 https://bugbountyreports.com/reports/9231-multiple-open-redirect-on-tiktok-domains2026-10-29 https://bugbountyreports.com/reports/8498-multiple-openssl-error-handling-issues-in-nodejs-crypto2026-10-29 https://bugbountyreports.com/reports/9225-multiple-permission-model-bypasses-due-to-improper-path2026-10-29 https://bugbountyreports.com/reports/414-multiple-python-integer-overflows2026-10-29 https://bugbountyreports.com/reports/586-multiple-reflected-cross-site-scripting-vulnerabilities-in2026-10-29 https://bugbountyreports.com/reports/752-multiple-so-called-type-juggling-attacks-most-notably2026-10-29 https://bugbountyreports.com/reports/1301-multiple-stored-cross-site-scripting-vulnerabilities-in2026-10-29 https://bugbountyreports.com/reports/1237-multiple-stored-xss2026-10-29 https://bugbountyreports.com/reports/3898-multiple-stored-xss-in-wordpress2026-10-29 https://bugbountyreports.com/reports/1235-multiple-stored-xss-on-sanbox-veris-in-through-veris2026-10-29 https://bugbountyreports.com/reports/619-multiple-sub-domain-are-vulnerable-because-of-leaking-full2026-10-29 https://bugbountyreports.com/reports/3102-multiple-subdomain-takeovers-via-unclaimed-instances2026-10-29 https://bugbountyreports.com/reports/564-multiple-type-confusions-in-unicode-error-handlers2026-10-29 https://bugbountyreports.com/reports/563-multiple-use-after-free-bugs-in-element-module2026-10-29 https://bugbountyreports.com/reports/534-multiple-use-after-free-bugs-in-heapq-module2026-10-29 https://bugbountyreports.com/reports/535-multiple-use-after-free-bugs-in-json-encoding2026-10-29 https://bugbountyreports.com/reports/677-multiple-use-after-free-vulnerabilites-in-unserialize2026-10-29 https://bugbountyreports.com/reports/4795-multiple-use-after-frees-in-obj2ast-methods2026-10-29 https://bugbountyreports.com/reports/1262-multiple-vulnerabilities-including-sqli-in-love-uber-com2026-10-29 https://bugbountyreports.com/reports/1451-multiple-vulnerabilities-in-a-wordpress-plugin-at-drive2026-10-29 https://bugbountyreports.com/reports/4883-multiple-vulnerabilities-related-to-pcre-functions-already2026-10-29 https://bugbountyreports.com/reports/7591-multiple-vulnerability-leading-to-account-takeover-in2026-10-29 https://bugbountyreports.com/reports/9457-multiple-xss-and-open-http-redirection2026-10-29 https://bugbountyreports.com/reports/1441-multiple-xss-in-camptix-event-ticketing-plugin2026-10-29 https://bugbountyreports.com/reports/4119-multiple-xss-on-account-settings-that-can-hijack-any-users2026-10-29 https://bugbountyreports.com/reports/2993-multiple-xss-on-infogram-templates2026-10-29 https://bugbountyreports.com/reports/659-multiple-xss-vulnerabilities-in-concrete5-5-7-3-12026-10-29 https://bugbountyreports.com/reports/9959-mutation-based-stored-xss-on-trix-editor-version-latest-2-12026-10-29 https://bugbountyreports.com/reports/8687-mute-user-can-disclose-private-channel-members-to2026-10-29 https://bugbountyreports.com/reports/5195-my-stripo-emai-email-verification-bypassed-and-also-create2026-10-29 https://bugbountyreports.com/reports/10465-myndr-cors-misconfiguration2026-10-29 https://bugbountyreports.com/reports/3255-myshopify-com-domain-takeover2026-10-29 https://bugbountyreports.com/reports/8388-mysql-credentials-exposed-on-https-cz-acronis-com-docker2026-10-29 https://bugbountyreports.com/reports/3429-mysql-username-and-password-leaked-in-developer2026-10-29 https://bugbountyreports.com/reports/8470-mystery-with-a-leaked-token-and-reusability-of-email2026-10-29 https://bugbountyreports.com/reports/8673-name-collision-of-shared-folders2026-10-29 https://bugbountyreports.com/reports/6378-named-pipe-connection-inteception2026-10-29 https://bugbountyreports.com/reports/8917-names-not-completely-redacted-despite-redact-the-names-of2026-10-29 https://bugbountyreports.com/reports/5751-napi-get-value-string-x-allow-various-kinds-of-memory2026-10-29 https://bugbountyreports.com/reports/9434-navgraph-confusion-allows-any-3p-app-to-send-and-read2026-10-29 https://bugbountyreports.com/reports/3730-navigation-to-chrome-extension-origin-internal-pages-from2026-10-29 https://bugbountyreports.com/reports/3728-navigation-to-protocol-handler-url-from-the-opened-page2026-10-29 https://bugbountyreports.com/reports/3786-navigation-to-restricted-origins-via-open-in-new-tab2026-10-29 https://bugbountyreports.com/reports/5812-near-to-infinite-loop-when-changing-group-s-name-that-has2026-10-29 https://bugbountyreports.com/reports/1843-near-duplicate-accounts-allowed-with-ignored-email-mutations2026-10-29 https://bugbountyreports.com/reports/3258-negative-size-in-tar-header-causes-infinite-loop2026-10-29 https://bugbountyreports.com/reports/4677-negative-size-parameter-1-in-memcpy-mbfl-strcut2026-10-29 https://bugbountyreports.com/reports/6220-negative-size-parameter-in-mb-split2026-10-29 https://bugbountyreports.com/reports/946-nested-attributes-reject-if-proc-can-be-circumvented-by2026-10-29 https://bugbountyreports.com/reports/3126-net-ftp-allows-command-injection-in-filenames2026-10-29 https://bugbountyreports.com/reports/9900-netlify-authentication-token-exposed-in-public-mozilla-ci2026-10-29 https://bugbountyreports.com/reports/9754-netrc-and-redirect-credential-leak2026-10-29 https://bugbountyreports.com/reports/8295-new-add-contacts-remove-contacts-quick-commands-susseptible2026-10-29 https://bugbountyreports.com/reports/8868-new-apppassword-can-be-generated-without-password2026-10-29 https://bugbountyreports.com/reports/570-new-device-confirmation-tokens-are-not-properly-validated2026-10-29 https://bugbountyreports.com/reports/569-new-device-confirmation-token-is-valid-until-not-used2026-10-29 https://bugbountyreports.com/reports/9295-new-hacktivity-features-bounty-rewards-leakage-where2026-10-29 https://bugbountyreports.com/reports/1066-new-hacktivity-view-discloses-report-ids-of-non-public2026-10-29 https://bugbountyreports.com/reports/1118-new-hacktivity-view-discloses-report-ids-of-non-public2026-10-29 https://bugbountyreports.com/reports/7058-new-link-opening-method-makes-hackerone-vulnerable-to2026-10-29 https://bugbountyreports.com/reports/9036-new-search-feature-search-for-non-public-words-in-limited2026-10-29 https://bugbountyreports.com/reports/3108-new-team-invitation-functionality-allows-extend-team2026-10-29 https://bugbountyreports.com/reports/6611-new-users-can-read-all-nextcloud-deck-data-from-previous2026-10-29 https://bugbountyreports.com/reports/8772-new-xss-vector-in-readermode-with-reader-title-nonce2026-10-29 https://bugbountyreports.com/reports/1347-newsletter-nextcloud-com-bypass-firewall-protection2026-10-29 https://bugbountyreports.com/reports/1450-newsroom-uber-com-is-vulnerable-to-some-xss-attack-via2026-10-29 https://bugbountyreports.com/reports/2534-nextable-credentials-exposure2026-10-29 https://bugbountyreports.com/reports/5289-nextcloud-10-0-privilege-escalation-issue-normal-user-can2026-10-29 https://bugbountyreports.com/reports/8980-nextcloud-all-in-one-path-disclosure-of-internal-frontend2026-10-29 https://bugbountyreports.com/reports/7866-nextcloud-deck-possibility-for-anyone-to-add-a-stack-with2026-10-29 https://bugbountyreports.com/reports/6931-nextcloud-deck-sharee-search-leaks-searches-to-lookupserver2026-10-29 https://bugbountyreports.com/reports/6821-nextcloud-desktop-client-rce-via-malicious-uri-schemes2026-10-29 https://bugbountyreports.com/reports/4970-nextcloud-domain-and-name-of-every-user-leaked-to-lookup2026-10-29 https://bugbountyreports.com/reports/4173-nextcloud-is-also-accepting-octet-stream-type-of-documents2026-10-29 https://bugbountyreports.com/reports/5169-nextcloud-logs-ldap-passwords2026-10-29 https://bugbountyreports.com/reports/9723-nextcloud-mail-does-not-respect-download-permissions-in2026-10-29 https://bugbountyreports.com/reports/1351-nextcloud-server-software-content-spoofing2026-10-29 https://bugbountyreports.com/reports/9686-nextcloud-tables-app-inserting-rows-to-an-arbitrary-table2026-10-29 https://bugbountyreports.com/reports/10087-nextcloud-tables-v1-share-enumeration-without-authorization2026-10-29 https://bugbountyreports.com/reports/6555-nextcloud-snap-circleci-project-has-vulnerable2026-10-29 https://bugbountyreports.com/reports/1271-nextcloud-com-content-injection-custom-404-error2026-10-29 https://bugbountyreports.com/reports/1272-nextcloud-com-directory-listening-for-wp-includes-forders2026-10-29 https://bugbountyreports.com/reports/1346-nextcloud-com-mail-bombing-no-rate-limiting-on-sending2026-10-29 https://bugbountyreports.com/reports/8393-nextcloudcmd-incorrectly-trusts-bad-tls-certificates2026-10-29 https://bugbountyreports.com/reports/8878-nginx-alias-traversal-babel-bluetab-net2026-10-29 https://bugbountyreports.com/reports/4398-nginx-misconfiguration-leading-to-direct-php-source-code2026-10-29 https://bugbountyreports.com/reports/1667-nginx-server-version-disclosure2026-10-29 https://bugbountyreports.com/reports/1681-nginx-version-disclosure-via-response-header2026-10-29 https://bugbountyreports.com/reports/1258-ngnix-server-version-disclosure2026-10-29 https://bugbountyreports.com/reports/5851-ngnix-server-version-disclosure2026-10-29 https://bugbountyreports.com/reports/2108-niche-s3-buckets-are-readable-writeable-deleteable-by2026-10-29 https://bugbountyreports.com/reports/5509-no-acl-on-s3-bucket-in-https-www2026-10-29 https://bugbountyreports.com/reports/982-no-any-kind-of-protection-on-delete-account2026-10-29 https://bugbountyreports.com/reports/3416-no-authentication-on-email-address-for-password-reset2026-10-29 https://bugbountyreports.com/reports/7027-no-brute-force-protection-on-web-api-cloud-acronis-com2026-10-29 https://bugbountyreports.com/reports/183-no-bruteforce-protection2026-10-29 https://bugbountyreports.com/reports/134-no-bruteforce-protection2026-10-29 https://bugbountyreports.com/reports/2306-no-bruteforce-protection2026-10-29 https://bugbountyreports.com/reports/4744-no-captcha-for-register-user-and-weak-question-attacker-can2026-10-29 https://bugbountyreports.com/reports/1279-no-captcha-on-newsletter-nextcloudcom-leaves-vulnerable-to2026-10-29 https://bugbountyreports.com/reports/143-no-captcha-or-rate-limit-on-login-page2026-10-29 https://bugbountyreports.com/reports/87-no-cross-site-request-forgery-protection-at-multiple2026-10-29 https://bugbountyreports.com/reports/6004-no-csrf-protection-in-resend-confirmation-email-feature2026-10-29 https://bugbountyreports.com/reports/698-no-csrf-protection-on-index-php-ccm-system-user-add-group2026-10-29 https://bugbountyreports.com/reports/9191-no-csrf-protection-when-adding-an-item-to-cart2026-10-29 https://bugbountyreports.com/reports/697-no-csrf-protection-when-creating-new-community-points2026-10-29 https://bugbountyreports.com/reports/222-no-csrf-token-found-on-user-details-update2026-10-29 https://bugbountyreports.com/reports/7190-no-dmarc-record-at-cordacon-com2026-10-29 https://bugbountyreports.com/reports/6278-no-email-checking-at-invitation-confirmation-link-leads-to2026-10-29 https://bugbountyreports.com/reports/379-no-email-verification-on-username-change2026-10-29 https://bugbountyreports.com/reports/2881-no-error-or-notification-on-reset-password-page2026-10-29 https://bugbountyreports.com/reports/6845-no-error-thrown-when-idor-attempted-while-editing-address2026-10-29 https://bugbountyreports.com/reports/2289-no-expiration-of-session-id-after-password-change2026-10-29 https://bugbountyreports.com/reports/2650-no-filteration-of-null-characters-in-name-field2026-10-29 https://bugbountyreports.com/reports/2779-no-length-limit-in-invite-code-can-cause-server-degradation2026-10-29 https://bugbountyreports.com/reports/5096-no-length-on-password2026-10-29 https://bugbountyreports.com/reports/7575-no-length-on-password2026-10-29 https://bugbountyreports.com/reports/2793-no-limit-of-summary-length-allows-denail-of-service2026-10-29 https://bugbountyreports.com/reports/7257-no-limit-on-email-subscription2026-10-29 https://bugbountyreports.com/reports/1134-no-limitation-on-following-allows-user-to-follow-people2026-10-29 https://bugbountyreports.com/reports/3119-no-notification-of-change-email-feature2026-10-29 https://bugbountyreports.com/reports/2662-no-notification-on-change-password-feature2026-10-29 https://bugbountyreports.com/reports/3739-no-notification-send-to-victim-if-attacker-hacks-accesses2026-10-29 https://bugbountyreports.com/reports/2396-no-notificatoin-sent-on-email-after-account-deletion2026-10-29 https://bugbountyreports.com/reports/2548-no-notificatoin-sent-on-email-after-account-deletion2026-10-29 https://bugbountyreports.com/reports/10658-no-password-confirmation-required-when-using-apptoken-on2026-10-29 https://bugbountyreports.com/reports/8403-no-password-length-limit-when-creating-a-user-as-an2026-10-29 https://bugbountyreports.com/reports/8479-no-password-length-restriction-in-reset-password-endpoint2026-10-29 https://bugbountyreports.com/reports/8105-no-password-length-restriction-in-reset-password-endpoint2026-10-29 https://bugbountyreports.com/reports/2267-no-password-length-restriction-leads-to-denial-of-service2026-10-29 https://bugbountyreports.com/reports/3468-no-password-verification-on-changing-email-address-cause2026-10-29 https://bugbountyreports.com/reports/6862-no-rate-limit2026-10-29 https://bugbountyreports.com/reports/2021-no-rate-limit-for-referral-program2026-10-29 https://bugbountyreports.com/reports/3500-no-rate-limit-in-email-leads-to-huge-mass-mailings2026-10-29 https://bugbountyreports.com/reports/6448-no-rate-limit-in-email-subscription2026-10-29 https://bugbountyreports.com/reports/1515-no-rate-limit-in-inviting-similar-contact-multiple-times2026-10-29 https://bugbountyreports.com/reports/9008-no-rate-limit-in-login-page2026-10-29 https://bugbountyreports.com/reports/7186-no-rate-limit-in-otp-code-sending2026-10-29 https://bugbountyreports.com/reports/9648-no-rate-limit-in-otp-code-sending2026-10-29 https://bugbountyreports.com/reports/7185-no-rate-limit-lead-to-otp-brute-forcing2026-10-29 https://bugbountyreports.com/reports/3116-no-rate-limit-on-account-deletion-request-leads-to-huge2026-10-29 https://bugbountyreports.com/reports/7014-no-rate-limit-on-add-new-translation-project2026-10-29 https://bugbountyreports.com/reports/4009-no-rate-limit-on-add-new-word2026-10-29 https://bugbountyreports.com/reports/4390-no-rate-limit-on-app-crowdsignal-com-finish-quiz2026-10-29 https://bugbountyreports.com/reports/7232-no-rate-limit-on-contact-us2026-10-29 https://bugbountyreports.com/reports/2616-no-rate-limit-on-creating-private-leaderboards2026-10-29 https://bugbountyreports.com/reports/4177-no-rate-limit-on-crowdsignal-polls-when-adding-comment2026-10-29 https://bugbountyreports.com/reports/7311-no-rate-limit-on-dashboard-myndr-net-auth2026-10-29 https://bugbountyreports.com/reports/5250-no-rate-limit-on-forgot-password-leading-to-massive-email2026-10-29 https://bugbountyreports.com/reports/8981-no-rate-limit-on-forgot-password-on-https-apps-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/6927-no-rate-limit-on-forgot-password-page2026-10-29 https://bugbountyreports.com/reports/8949-no-rate-limit-on-forgot-password-page2026-10-29 https://bugbountyreports.com/reports/6622-no-rate-limit-on-licenses-activation2026-10-29 https://bugbountyreports.com/reports/3112-no-rate-limit-on-password-reset-function2026-10-29 https://bugbountyreports.com/reports/7375-no-rate-limit-on-redditgifts-gift-when-adding-comment2026-10-29 https://bugbountyreports.com/reports/5799-no-rate-limit-on-reset-password2026-10-29 https://bugbountyreports.com/reports/7247-no-rate-limit-on-reset-password2026-10-29 https://bugbountyreports.com/reports/1214-no-rate-limit-or-captcha-to-identify-humans2026-10-29 https://bugbountyreports.com/reports/2834-no-rate-limit-or-captcha-to-identify-humans2026-10-29 https://bugbountyreports.com/reports/6280-no-rate-limit-when-accessing-password-protection-enabled2026-10-29 https://bugbountyreports.com/reports/2552-no-rate-limit-when-creating-new-goals-https-wakatime-com2026-10-29 https://bugbountyreports.com/reports/838-no-rate-limit-which-leads-to-users-information-disclosure2026-10-29 https://bugbountyreports.com/reports/8712-no-rate-limit-while-adding-additional-emails-feature2026-10-29 https://bugbountyreports.com/reports/2748-no-rate-limitation-on-regenerate-api-key2026-10-29 https://bugbountyreports.com/reports/6426-no-rate-limiting-create-data2026-10-29 https://bugbountyreports.com/reports/6425-no-rate-limiting-create-plug-ins2026-10-29 https://bugbountyreports.com/reports/2393-no-rate-limiting-at-contact2026-10-29 https://bugbountyreports.com/reports/5214-no-rate-limiting-for-confirmation-email-lead-to-email2026-10-29 https://bugbountyreports.com/reports/6233-no-rate-limiting-for-confirmation-email-lead-to-email2026-10-29 https://bugbountyreports.com/reports/6192-no-rate-limiting-for-confirmation-email-lead-to-huge-mass2026-10-29 https://bugbountyreports.com/reports/2553-no-rate-limiting-for-confirmation-email-can-spam-anyone2026-10-29 https://bugbountyreports.com/reports/8311-no-rate-limiting-for-remove-account-lead-to-huge-mass2026-10-29 https://bugbountyreports.com/reports/6327-no-rate-limiting-for-subscribe-email-lead-to-cross-origin2026-10-29 https://bugbountyreports.com/reports/5196-no-rate-limiting-on-reset-password-request-endpoint2026-10-29 https://bugbountyreports.com/reports/5573-no-rate-limiting-on-https-accounts-password-reset-endpoint2026-10-29 https://bugbountyreports.com/reports/3888-no-rate-limiting-on-https-biz-uber-com-confirm-allowed-an2026-10-29 https://bugbountyreports.com/reports/10218-no-rate-limiting-on-password-attempts-after-insecure2026-10-29 https://bugbountyreports.com/reports/5524-no-rate-limiting-on-password-reset-page2026-10-29 https://bugbountyreports.com/reports/5813-no-rate-limiting-on-phone-number-login-leads-to-login-bypass2026-10-29 https://bugbountyreports.com/reports/6065-no-rate-limiting-on-sinup-page2026-10-29 https://bugbountyreports.com/reports/2265-no-rate-limitting-at-change-password2026-10-29 https://bugbountyreports.com/reports/4013-no-rate-on-add-suggest2026-10-29 https://bugbountyreports.com/reports/1659-no-rate-limit-in-server-security-check2026-10-29 https://bugbountyreports.com/reports/1218-no-rate-limit-in-two-factor-authentication-leads-to-bypass2026-10-29 https://bugbountyreports.com/reports/2549-no-redirect-uri-for-twitter-oath-resulting-in-token-leak2026-10-29 https://bugbountyreports.com/reports/5529-no-redirect-uri-in-the-db-for-web-internal-clientkey-leads2026-10-29 https://bugbountyreports.com/reports/4274-no-searchengine-sanatizing-can-lead-to-command-injection2026-10-29 https://bugbountyreports.com/reports/9328-no-session-expiry-after-log-out-attacker-can-reuse-the-old2026-10-29 https://bugbountyreports.com/reports/5207-no-session-logout-after-changing-password-alsoandroid2026-10-29 https://bugbountyreports.com/reports/10005-no-spf-dmarc-records-on-mb-cosmos-com2026-10-29 https://bugbountyreports.com/reports/2607-no-string-size-restriction-on-team-name2026-10-29 https://bugbountyreports.com/reports/1861-no-user-confirmation-when-an-auto-updated-extension-gets2026-10-29 https://bugbountyreports.com/reports/5256-no-username-used-in-authenthication-to-www-mopub-com2026-10-29 https://bugbountyreports.com/reports/1552-no-valid-spf-record2026-10-29 https://bugbountyreports.com/reports/961-no-valid-spf-records2026-10-29 https://bugbountyreports.com/reports/4364-no-valid-spf-records2026-10-29 https://bugbountyreports.com/reports/6913-no-valid-spf-records-don-t-have-dmarc-record2026-10-29 https://bugbountyreports.com/reports/8145-no-validation-to-image-upload-user-can-upload-php-apk-zip2026-10-29 https://bugbountyreports.com/reports/129-no-wildcard-dns2026-10-29 https://bugbountyreports.com/reports/8257-node-18-reads-openssl-cnf-from-home-iojs-build-upon-startup2026-10-29 https://bugbountyreports.com/reports/8879-node-18-reads-openssl-cnf-from-home-iojs-build-upon-startup2026-10-29 https://bugbountyreports.com/reports/5805-node-disk-dos-by-writing-to-container-etc-hosts2026-10-29 https://bugbountyreports.com/reports/7052-node-installer-local-privilege-escalation2026-10-29 https://bugbountyreports.com/reports/2595-node-modules-path-disclosure-due-to-lack-of-error-handling2026-10-29 https://bugbountyreports.com/reports/7259-node-validation-admission-does-not-observe-all-oldobject2026-10-29 https://bugbountyreports.com/reports/10489-node-sqlite-sqltagstore-iterator-replay-lets-attacker-re2026-10-29 https://bugbountyreports.com/reports/1256-node-drchrono-com-information-disclosure-and-windows-host2026-10-29 https://bugbountyreports.com/reports/8023-node-js-dll-hijacking-on-windows2026-10-29 https://bugbountyreports.com/reports/7604-node-js-certificate-verification-bypass-via-string-injection2026-10-29 https://bugbountyreports.com/reports/5752-node-js-http-2-large-settings-frame-dos2026-10-29 https://bugbountyreports.com/reports/9227-node-js-is-vulnerable-to-the-marvin-attack-timing-variant2026-10-29 https://bugbountyreports.com/reports/10212-node-js-permission-model-bypass-via-unchecked-unix-domain2026-10-29 https://bugbountyreports.com/reports/10257-node-js-permission-model-bypass-uds-server-bind-listen2026-10-29 https://bugbountyreports.com/reports/8835-node-js-process-aborts-when-processing-x509-certs-with2026-10-29 https://bugbountyreports.com/reports/10392-node-js-unicode-dot-separator-handling-can-lead-to-tls2026-10-29 https://bugbountyreports.com/reports/10385-node-js-webcrypto-aes-integer-overflow-leads-to-remote2026-10-29 https://bugbountyreports.com/reports/5587-node-js-tls-session-reuse-can-lead-to-hostname-verification2026-10-29 https://bugbountyreports.com/reports/6424-node-js-use-after-free-in-tlswrap2026-10-29 https://bugbountyreports.com/reports/3113-non-critical-code-quality-bug-self-xss-on-map-editor2026-10-29 https://bugbountyreports.com/reports/9485-non-org-admin-group-manager-can-create-groups-in-an2026-10-29 https://bugbountyreports.com/reports/7455-non-privileged-user-is-able-to-approve-his-own-app-himself2026-10-29 https://bugbountyreports.com/reports/1595-non-secure-requests-at-guard-certly-io-not-upgrading-to2026-10-29 https://bugbountyreports.com/reports/262-non-validation-of-session-after-password-reset2026-10-29 https://bugbountyreports.com/reports/9162-non-admin-users-can-reset-app-allowlist-to-the-default2026-10-29 https://bugbountyreports.com/reports/5778-non-admin-users-can-trigger-writes-to-memcached-by-entering2026-10-29 https://bugbountyreports.com/reports/9372-non-authenticated-path-traversal-leading-to-arbitrary-file2026-10-29 https://bugbountyreports.com/reports/3487-non-cloudflare-ips-allowed-to-access-origin-servers2026-10-29 https://bugbountyreports.com/reports/2622-non-functional-2fa-recovery-codes2026-10-29 https://bugbountyreports.com/reports/2953-non-https-link-on-blog2026-10-29 https://bugbountyreports.com/reports/854-non-owner-user-can-remove-online-store-channel-and-re-add-it2026-10-29 https://bugbountyreports.com/reports/10288-non-premium-user-can-disable-ads-in-japanese-version-of-dic2026-10-29 https://bugbountyreports.com/reports/9871-non-production-api-endpoint-for-the-elasticache-service2026-10-29 https://bugbountyreports.com/reports/9924-non-production-api-endpoint-for-the-eventbridge-service2026-10-29 https://bugbountyreports.com/reports/10112-non-production-api-endpoints-for-the-ai-ops-service-fails2026-10-29 https://bugbountyreports.com/reports/10440-non-production-api-endpoints-for-the-amazon-cloudwatch2026-10-29 https://bugbountyreports.com/reports/10418-non-production-api-endpoints-for-the-amazon-s3-tables2026-10-29 https://bugbountyreports.com/reports/9925-non-production-api-endpoints-for-the-bedrock-service-fail2026-10-29 https://bugbountyreports.com/reports/9926-non-production-api-endpoints-for-the-bedrock-agent-service2026-10-29 https://bugbountyreports.com/reports/9870-non-production-api-endpoints-for-the-cloudwatch-service2026-10-29 https://bugbountyreports.com/reports/9822-non-production-api-endpoints-for-the-datazone-service-fail2026-10-29 https://bugbountyreports.com/reports/9827-non-production-api-endpoints-for-the-device-farm-service2026-10-29 https://bugbountyreports.com/reports/9836-non-production-api-endpoints-for-the-documentdb-elastic2026-10-29 https://bugbountyreports.com/reports/9847-non-production-api-endpoints-for-the-forecast-service-fail2026-10-29 https://bugbountyreports.com/reports/9923-non-production-api-endpoints-for-the-global-accelerator2026-10-29 https://bugbountyreports.com/reports/9869-non-production-api-endpoints-for-the-glue-service-fail-to2026-10-29 https://bugbountyreports.com/reports/9922-non-production-api-endpoints-for-the-health-service-fail-to2026-10-29 https://bugbountyreports.com/reports/9919-non-production-api-endpoints-for-the-neptune-graph-service2026-10-29 https://bugbountyreports.com/reports/9918-non-production-api-endpoints-for-the-route-53-service-fail2026-10-29 https://bugbountyreports.com/reports/9867-non-production-api-endpoints-for-the-ssm-service-fail-to2026-10-29 https://bugbountyreports.com/reports/6155-non-production-open-database-in-combination-with-xxe-leads2026-10-29 https://bugbountyreports.com/reports/6341-non-revoked-api-key-disclosure-in-a-disclosed-api-key2026-10-29 https://bugbountyreports.com/reports/9222-non-revoked-api-key-disclosure-in-a-disclosed-api-key2026-10-29 https://bugbountyreports.com/reports/8075-non-revoked-api-key-information-disclosure-via-stripo-report2026-10-29 https://bugbountyreports.com/reports/1443-non-secure-requests-are-not-automatically-upgraded-to-https2026-10-29 https://bugbountyreports.com/reports/9158-non-store-owners-can-transfer-shopify-managed-domain-to2026-10-29 https://bugbountyreports.com/reports/5417-none-permission-staff-member-can-identify-installed2026-10-29 https://bugbountyreports.com/reports/7656-normal-user-is-able-to-export-feature-usage-statistics2026-10-29 https://bugbountyreports.com/reports/5142-norway-store-starbucks-no-csrf-on-email-change2026-10-29 https://bugbountyreports.com/reports/8689-nosql-injection-in-listemojicustom-method-call2026-10-29 https://bugbountyreports.com/reports/9440-nosql-injection-leaks-visitor-token-and-livechat-messages2026-10-29 https://bugbountyreports.com/reports/8172-nosql-injection-discloses-s3-file-upload-urls2026-10-29 https://bugbountyreports.com/reports/594-not-completed-accounts-take-over-urgent-bug2026-10-29 https://bugbountyreports.com/reports/1661-not-using-binary-safe-functions-for-substr-strlen-function2026-10-29 https://bugbountyreports.com/reports/1021-not-using-secure-flag-option-on-cookies-could-lead-to-a-man2026-10-29 https://bugbountyreports.com/reports/9403-notes-app-can-be-tricked-into-using-a-received-share2026-10-29 https://bugbountyreports.com/reports/8871-notes-attachments-render-html-in-preview-mode2026-10-29 https://bugbountyreports.com/reports/7883-notification-implicit-pendingintent-in-com-nextcloud-client2026-10-29 https://bugbountyreports.com/reports/741-notification-request-disclose-private-information-about2026-10-29 https://bugbountyreports.com/reports/3934-notifications-sent-due-to-transfer-report-functionality-may2026-10-29 https://bugbountyreports.com/reports/2307-notify-user-about-password-change2026-10-29 https://bugbountyreports.com/reports/2599-ntpd-read-mru-list-does-inadequate-incoming-packet-checks2026-10-29 https://bugbountyreports.com/reports/969-null-byte-injection2026-10-29 https://bugbountyreports.com/reports/5502-null-byte-injection-in-https2026-10-29 https://bugbountyreports.com/reports/4720-null-character-at-fnmatch2026-10-29 https://bugbountyreports.com/reports/10637-null-dereference-in-x509toobject2026-10-29 https://bugbountyreports.com/reports/2315-null-password-setting-a-new-password-doesn-t-check-for2026-10-29 https://bugbountyreports.com/reports/691-null-pointer-deref-segfault-in-spl-autoload-via-ob-start2026-10-29 https://bugbountyreports.com/reports/1181-null-pointer-deref-segfault-in-stream-context-get-default2026-10-29 https://bugbountyreports.com/reports/673-null-pointer-deref-segfault-in-zend-eval-const-expr2026-10-29 https://bugbountyreports.com/reports/4691-null-pointer-deref-with-ob-start-with-compact2026-10-29 https://bugbountyreports.com/reports/4690-null-pointer-deref-with-ob-start-with-get-defined-vars2026-10-29 https://bugbountyreports.com/reports/1779-null-pointer-derefence-due-to-bug-in-codegen-with-negation2026-10-29 https://bugbountyreports.com/reports/2596-null-pointer-dereference-and-segfault-in-tile-count-merge2026-10-29 https://bugbountyreports.com/reports/4877-null-pointer-dereference-at-gdscalevert2026-10-29 https://bugbountyreports.com/reports/9848-null-pointer-dereference-by-crafted-response-from-ai-model2026-10-29 https://bugbountyreports.com/reports/1782-null-pointer-dereference-due-to-bug-in-codegen-with2026-10-29 https://bugbountyreports.com/reports/1851-null-pointer-dereference-due-to-tocttou-bug-in-mrb-time2026-10-29 https://bugbountyreports.com/reports/2111-null-pointer-dereference-in-get-file2026-10-29 https://bugbountyreports.com/reports/4487-null-pointer-dereference-in-mrb-check-frozen2026-10-29 https://bugbountyreports.com/reports/1784-null-pointer-dereference-in-ary-concat2026-10-29 https://bugbountyreports.com/reports/2153-null-pointer-dereference-in-ary-concat2026-10-29 https://bugbountyreports.com/reports/1483-null-pointer-dereference-in-exif-process-user-comment2026-10-29 https://bugbountyreports.com/reports/6207-null-pointer-dereference-in-imap-mail2026-10-29 https://bugbountyreports.com/reports/2025-null-pointer-dereference-in-mark-context-stack2026-10-29 https://bugbountyreports.com/reports/2024-null-pointer-dereference-in-mrb-class2026-10-29 https://bugbountyreports.com/reports/2155-null-pointer-dereference-in-mrb-class2026-10-29 https://bugbountyreports.com/reports/1909-null-pointer-dereference-in-mrb-random-initialize2026-10-29 https://bugbountyreports.com/reports/1905-null-pointer-dereference-in-mrb-str-modify2026-10-29 https://bugbountyreports.com/reports/1906-null-pointer-dereference-in-mrb-str-prepend2026-10-29 https://bugbountyreports.com/reports/2156-null-pointer-dereference-in-op-enter2026-10-29 https://bugbountyreports.com/reports/6104-null-pointer-dereference-in-phar-create-or-parse-filename2026-10-29 https://bugbountyreports.com/reports/747-null-pointer-dereference-in-phar-get-fp-offset2026-10-29 https://bugbountyreports.com/reports/6216-null-pointer-dereference-in-php-session-upload-progress2026-10-29 https://bugbountyreports.com/reports/2425-null-pointer-dereference-in-sass-eval-operator-sass-map2026-10-29 https://bugbountyreports.com/reports/4797-null-pointer-dereference-in-set-conversion-mode-due-uncheck2026-10-29 https://bugbountyreports.com/reports/4813-null-pointer-dereference-in-simplexmlelement-asxml2026-10-29 https://bugbountyreports.com/reports/4665-null-pointer-dereference-in-wddx-packet-deserialization2026-10-29 https://bugbountyreports.com/reports/1780-null-pointer-dereference-regression-in-parse-y2026-10-29 https://bugbountyreports.com/reports/1774-null-pointer-dereference-when-parsing-ternary-operators2026-10-29 https://bugbountyreports.com/reports/4810-null-pointer-dereference-while-unserialize-php-object2026-10-29 https://bugbountyreports.com/reports/2511-null-pointer-dereference-with-send-method-missing2026-10-29 https://bugbountyreports.com/reports/2158-null-pointer-dereferences-from-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/2222-null-pointer-dereferences-in-ary-concat2026-10-29 https://bugbountyreports.com/reports/2225-null-pointer-dereferences-in-kh-copy-mt2026-10-29 https://bugbountyreports.com/reports/2220-null-pointer-dereferences-in-mrb-get-args2026-10-29 https://bugbountyreports.com/reports/1765-null-target-class-dos2026-10-29 https://bugbountyreports.com/reports/679-number-of-invited-researchers-disclosed-as-part-of-json2026-10-29 https://bugbountyreports.com/reports/443-number-username-and-name-disclosure2026-10-29 https://bugbountyreports.com/reports/121-numerous-open-ports-services2026-10-29 https://bugbountyreports.com/reports/5664-oauth-redirect-uri-bypass-using-idn-homograph-attack2026-10-29 https://bugbountyreports.com/reports/2929-oauth-2-authorization-bypass-via-csrf-and-cross-site2026-10-29 https://bugbountyreports.com/reports/62-oauth-access-token-stealing-in-phabricator2026-10-29 https://bugbountyreports.com/reports/938-oauth-authorization-page-vulnerable-to-clickjacking2026-10-29 https://bugbountyreports.com/reports/148-oauth-bug2026-10-29 https://bugbountyreports.com/reports/3074-oauth-flow-on-the-comments-widget-login-can-lead-to-the2026-10-29 https://bugbountyreports.com/reports/131-oauth-open-redirect2026-10-29 https://bugbountyreports.com/reports/842-oauth-pemission-set-as-true-lead-to-authorize-malicious2026-10-29 https://bugbountyreports.com/reports/10433-oauth-redirect-uri-validation-bypass-for-proxima-first2026-10-29 https://bugbountyreports.com/reports/68-oauth-stealing-attack-new2026-10-29 https://bugbountyreports.com/reports/9233-oauth2-authorization-code-is-valid-indefinetly2026-10-29 https://bugbountyreports.com/reports/3590-oauth2-access-token-and-app-password-security-vulnerability2026-10-29 https://bugbountyreports.com/reports/7801-oauth2-bearer-not-checked-for-connection-re-use2026-10-29 https://bugbountyreports.com/reports/9064-oauth2-client-secret-stored-in-plain-text-in-the-database2026-10-29 https://bugbountyreports.com/reports/8535-object-injection-in-stripe-billing-typographic-github2026-10-29 https://bugbountyreports.com/reports/2821-object-injection-in-woocommerce-handle-pdt-responses-from2026-10-29 https://bugbountyreports.com/reports/9759-object-level-access-control-leads-to-reading-user-s-full2026-10-29 https://bugbountyreports.com/reports/7658-objectid-in-share-location-can-be-set-to-open-arbitrary-url2026-10-29 https://bugbountyreports.com/reports/2831-observer-com-url-should-https2026-10-29 https://bugbountyreports.com/reports/1589-obtain-the-username-the-uid-of-the-one-doing-the-s3-sync-on2026-10-29 https://bugbountyreports.com/reports/2139-ocsp-status-request-extension-unbounded-memory-growth-cve2026-10-29 https://bugbountyreports.com/reports/8910-odbc-apache-airflow-provider-code-execution-vulnerability2026-10-29 https://bugbountyreports.com/reports/8026-off-by-slash-vulnerability-in-nodejs-org-and-iojs-org2026-10-29 https://bugbountyreports.com/reports/8070-off-by-slash-vulnerability-in-nodejs-org-and-iojs-org2026-10-29 https://bugbountyreports.com/reports/2407-old-password-can-be-new-password2026-10-29 https://bugbountyreports.com/reports/5086-old-session-does-not-expire-after-password-change2026-10-29 https://bugbountyreports.com/reports/6549-old-session-does-not-expires-after-password-change2026-10-29 https://bugbountyreports.com/reports/7244-old-session-dose-not-expire-after-password-change2026-10-29 https://bugbountyreports.com/reports/1289-old-titles-are-not-hidden-in-reports-with-limited-disclosure2026-10-29 https://bugbountyreports.com/reports/4345-olo-total-price-manipulation-using-negative-quantities2026-10-29 https://bugbountyreports.com/reports/6315-on-singing-up-with-a-phone-number-the-4-digit-otp-does-not2026-10-29 https://bugbountyreports.com/reports/7819-one-click-account-hijacking-via-unvalidated-deeplink2026-10-29 https://bugbountyreports.com/reports/6429-one-click-account-takeover-using-ouath-csrf-bypass-by2026-10-29 https://bugbountyreports.com/reports/5342-one-click-code-execution-via-file2026-10-29 https://bugbountyreports.com/reports/7995-one-click-xss-in-www-shopify-com2026-10-29 https://bugbountyreports.com/reports/8037-one-click-account-hijack-for-anyone-using-apple-sign-in2026-10-29 https://bugbountyreports.com/reports/10560-one-click-cross-account-javascript-execution-steals-a2026-10-29 https://bugbountyreports.com/reports/10045-oneagent-unprivileged-ntlm-user-coercion2026-10-29 https://bugbountyreports.com/reports/1225-onelogin-authentication-bypass-on-wordpress-sites2026-10-29 https://bugbountyreports.com/reports/1342-onelogin-authentication-bypass-on-wordpress-sites-via-xmlrpc2026-10-29 https://bugbountyreports.com/reports/8774-onion-location-header-allows-to-open-arbitrary-urls2026-10-29 https://bugbountyreports.com/reports/9524-online-status-of-arbitrary-users-can-be-changed2026-10-29 https://bugbountyreports.com/reports/4594-online-training-material-disclosing-username-and-password2026-10-29 https://bugbountyreports.com/reports/5317-only-the-file-extensions-are-checked-not-the-mime-types-as2026-10-29 https://bugbountyreports.com/reports/7054-oob-read-in-libuv2026-10-29 https://bugbountyreports.com/reports/6223-oob-read-in-php-strip-tags-ex2026-10-29 https://bugbountyreports.com/reports/2352-oob-read-in-ts-obj-print-bio-cve-2016-21802026-10-29 https://bugbountyreports.com/reports/6865-oob-reads-in-network-message-handlers-leads-to-rce2026-10-29 https://bugbountyreports.com/reports/2347-oob-write-in-bn-bn2dec-cve-2016-21822026-10-29 https://bugbountyreports.com/reports/2348-oob-write-in-mdc2-update-cve-2016-63032026-10-29 https://bugbountyreports.com/reports/2366-op-scall-in-lhs-of-a-op-asgn-resulting-in-arbitrary-memory2026-10-29 https://bugbountyreports.com/reports/3241-opcode-cache2026-10-29 https://bugbountyreports.com/reports/7731-open-akamai-arl-xss-at2026-10-29 https://bugbountyreports.com/reports/7776-open-akamai-arl-xss-at2026-10-29 https://bugbountyreports.com/reports/9496-open-akamai-arl-xss-on-http-master-config2026-10-29 https://bugbountyreports.com/reports/9495-open-akamai-arl-xss-on-http-media2026-10-29 https://bugbountyreports.com/reports/458-open-authentication-bug2026-10-29 https://bugbountyreports.com/reports/2186-open-aws-amazon-s3-buckets2026-10-29 https://bugbountyreports.com/reports/6715-open-aws-s3-bucket-at-ubergreece-s3-amazonaws-com-exposes2026-10-29 https://bugbountyreports.com/reports/4211-open-aws-s3-bucket-leaks-all-images-uploaded-to-zomato-chat2026-10-29 https://bugbountyreports.com/reports/1499-open-couchdb-on-experiments-ec2-shopify-com-59842026-10-29 https://bugbountyreports.com/reports/5134-open-firebase-database-msdict-dev-firebaseio-com2026-10-29 https://bugbountyreports.com/reports/4982-open-ftp-on2026-10-29 https://bugbountyreports.com/reports/4592-open-ftp-server-on-a-dod-system2026-10-29 https://bugbountyreports.com/reports/5825-open-github-repo-leaking-weblate-secret-key2026-10-29 https://bugbountyreports.com/reports/5160-open-memory-dump-method-leaking-customer-information-secret2026-10-29 https://bugbountyreports.com/reports/2732-open-prod-jenkins-instance2026-10-29 https://bugbountyreports.com/reports/2119-open-redirect2026-10-29 https://bugbountyreports.com/reports/2733-open-redirect2026-10-29 https://bugbountyreports.com/reports/2952-open-redirect2026-10-29 https://bugbountyreports.com/reports/3941-open-redirect2026-10-29 https://bugbountyreports.com/reports/4107-open-redirect2026-10-29 https://bugbountyreports.com/reports/7242-open-redirect2026-10-29 https://bugbountyreports.com/reports/8191-open-redirect2026-10-29 https://bugbountyreports.com/reports/8463-open-redirect2026-10-29 https://bugbountyreports.com/reports/7541-open-redirect2026-10-29 https://bugbountyreports.com/reports/8547-open-redirect-https-jetblue-com-url2026-10-29 https://bugbountyreports.com/reports/9026-open-redirect-polycom-company-directory2026-10-29 https://bugbountyreports.com/reports/5789-open-redirect-www-shopify-com2026-10-29 https://bugbountyreports.com/reports/6392-open-redirect-6-0-0-rails-6-0-3-22026-10-29 https://bugbountyreports.com/reports/7512-open-redirect-dom-based-on-av-ru-via-return-url-parameter2026-10-29 https://bugbountyreports.com/reports/2452-open-redirect-reflected-xss-payload-in-root-that-affects2026-10-29 https://bugbountyreports.com/reports/8003-open-redirect-8x8-com2026-10-29 https://bugbountyreports.com/reports/5629-open-redirect-affecting-m-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/755-open-redirect-after-login-at-http-ecommerce-shopify-com2026-10-29 https://bugbountyreports.com/reports/1563-open-redirect-allows-changing-iframe-content-in-myshopify2026-10-29 https://bugbountyreports.com/reports/869-open-redirect-at-myshopify-com-account-login-checkout-url2026-10-29 https://bugbountyreports.com/reports/8309-open-redirect-at2026-10-29 https://bugbountyreports.com/reports/3235-open-redirect-at-app-goodhire-com-via-returnurl-parameter2026-10-29 https://bugbountyreports.com/reports/5539-open-redirect-at-https-account-mackeeper-com-auth-signin2026-10-29 https://bugbountyreports.com/reports/4278-open-redirect-at-https-inventory-upserve-com-http-google-com2026-10-29 https://bugbountyreports.com/reports/6389-open-redirect-at-https-oauth-secure-pixiv-net2026-10-29 https://bugbountyreports.com/reports/5640-open-redirect-at-https-store-mackeeper-com-767-cookie-via2026-10-29 https://bugbountyreports.com/reports/7246-open-redirect-at-https-www-nutanix-com-tw-login-via-icid2026-10-29 https://bugbountyreports.com/reports/8294-open-redirect-at-mc-beta-cloud-acronis-com2026-10-29 https://bugbountyreports.com/reports/7873-open-redirect-bypass2026-10-29 https://bugbountyreports.com/reports/5132-open-redirect-bypass-ssrf-security-vulnerability2026-10-29 https://bugbountyreports.com/reports/8752-open-redirect-due-to-scanning-qr-code-via-brave-browser2026-10-29 https://bugbountyreports.com/reports/693-open-redirect-filter-bypass2026-10-29 https://bugbountyreports.com/reports/5387-open-redirect-filter-bypass-through-character-via-url2026-10-29 https://bugbountyreports.com/reports/7956-open-redirect-found-on-account-brave-com2026-10-29 https://bugbountyreports.com/reports/7669-open-redirect-get-based-on-https-www-flickr-com-browser2026-10-29 https://bugbountyreports.com/reports/2783-open-redirect-helps-to-steal-facebook-access-token2026-10-29 https://bugbountyreports.com/reports/2585-open-redirect-in-greenhouse-io2026-10-29 https://bugbountyreports.com/reports/614-open-redirect-in-language-change2026-10-29 https://bugbountyreports.com/reports/1946-open-redirect-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/1726-open-redirect-in-bulk-edit2026-10-29 https://bugbountyreports.com/reports/6528-open-redirect-in-ck-php-and-lg-php2026-10-29 https://bugbountyreports.com/reports/4365-open-redirect-in-comment-section2026-10-29 https://bugbountyreports.com/reports/5484-open-redirect-in-eb9f-pivcac-prod-login-gov2026-10-29 https://bugbountyreports.com/reports/7340-open-redirect-in-fastify-static-via-mishandled-user-s-input2026-10-29 https://bugbountyreports.com/reports/5619-open-redirect-in-https-www-rockstargames-com-gtaonline2026-10-29 https://bugbountyreports.com/reports/8529-open-redirect-in-logout-login2026-10-29 https://bugbountyreports.com/reports/1576-open-redirect-in-m-uber-com2026-10-29 https://bugbountyreports.com/reports/499-open-redirect-in-rfc67492026-10-29 https://bugbountyreports.com/reports/3904-open-redirect-in-riders-uber-com2026-10-29 https://bugbountyreports.com/reports/10268-open-redirect-in-rocket-chat2026-10-29 https://bugbountyreports.com/reports/4742-open-redirect-in-semrush-com2026-10-29 https://bugbountyreports.com/reports/3879-open-redirect-in-serendipity-exit-php2026-10-29 https://bugbountyreports.com/reports/2631-open-redirect-in-shopify-app-url2026-10-29 https://bugbountyreports.com/reports/2270-open-redirect-in-signing-in-via-social-sites2026-10-29 https://bugbountyreports.com/reports/4191-open-redirect-in-switch-account-functionality2026-10-29 https://bugbountyreports.com/reports/4748-open-redirect-in-the-path-of-vendhq-com2026-10-29 https://bugbountyreports.com/reports/1501-open-redirect-in-unifi-ubnt-com-controller-finder2026-10-29 https://bugbountyreports.com/reports/9161-open-redirect-in-user-saml-via-relaystate-parameter2026-10-29 https://bugbountyreports.com/reports/286-open-redirect-in-wordpress-feed-statistics-affected-all2026-10-29 https://bugbountyreports.com/reports/7448-open-redirect-in-www-shopify-dev-environment2026-10-29 https://bugbountyreports.com/reports/493-open-redirect-leak-of-authenticity-token-lead-to-full2026-10-29 https://bugbountyreports.com/reports/309-open-redirect-login-account2026-10-29 https://bugbountyreports.com/reports/8779-open-redirect-on-unsupported-browser-warning2026-10-29 https://bugbountyreports.com/reports/6150-open-redirect-on-blog-wavecell-com2026-10-29 https://bugbountyreports.com/reports/4264-open-redirect-on2026-10-29 https://bugbountyreports.com/reports/9888-open-redirect-on2026-10-29 https://bugbountyreports.com/reports/10620-open-redirect-on-app-hey-com-bypasses-hey-desktop-s2026-10-29 https://bugbountyreports.com/reports/4021-open-redirect-on-central-uber-com-allows-for-account2026-10-29 https://bugbountyreports.com/reports/5418-open-redirect-on-greater-asia-domains2026-10-29 https://bugbountyreports.com/reports/6759-open-redirect-on-http-events-hackerone-com-redirect-url2026-10-29 https://bugbountyreports.com/reports/7663-open-redirect-on-https-8x8-com-login-nextpage-2f2026-10-29 https://bugbountyreports.com/reports/5609-open-redirect-on-https-account-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/3882-open-redirect-on-https-blog-fuzzing-project-org2026-10-29 https://bugbountyreports.com/reports/6171-open-redirect-on-https-go-bitwala-com2026-10-29 https://bugbountyreports.com/reports/4280-open-redirect-on-https-hq-api-upserve-com2026-10-29 https://bugbountyreports.com/reports/6624-open-redirect-on-https-signin-rockstargames-com-connect2026-10-29 https://bugbountyreports.com/reports/6868-open-redirect-on-https-www-twitterflightschool-com-widgets2026-10-29 https://bugbountyreports.com/reports/6597-open-redirect-on-login-page-of-stocky-app2026-10-29 https://bugbountyreports.com/reports/10230-open-redirect-on-lovable-dev-via-redirect-parameter-leads2026-10-29 https://bugbountyreports.com/reports/3891-open-redirect-on-rush-uber-com-business-uber-com-and-help2026-10-29 https://bugbountyreports.com/reports/1587-open-redirect-on-slack-com2026-10-29 https://bugbountyreports.com/reports/4078-open-redirect-on-the-https-tt-hboeck-de2026-10-29 https://bugbountyreports.com/reports/3242-open-redirect-on-the-nl-wordpress-net2026-10-29 https://bugbountyreports.com/reports/8179-open-redirect-on-www-redditinc-com-via-failed-query-param2026-10-29 https://bugbountyreports.com/reports/8196-open-redirect-on-www-redditinc-com-via-failed-query-param2026-10-29 https://bugbountyreports.com/reports/4758-open-redirect-open-rocket-chat-file-upload-id-filename-svg2026-10-29 https://bugbountyreports.com/reports/1489-open-redirect-possible-in-https-www-shopify-com-admin2026-10-29 https://bugbountyreports.com/reports/4552-open-redirect-protection-https-www-pixiv-net-jump-php-is2026-10-29 https://bugbountyreports.com/reports/3132-open-redirect-protection-bypass2026-10-29 https://bugbountyreports.com/reports/463-open-redirect-sends-authenticity-token-to-any-website-or-ip2026-10-29 https://bugbountyreports.com/reports/2927-open-redirect-through-post-request2026-10-29 https://bugbountyreports.com/reports/7298-open-redirect-through-post-request-in-oauth2026-10-29 https://bugbountyreports.com/reports/7651-open-redirect-to-stealing-aadvid2026-10-29 https://bugbountyreports.com/reports/1500-open-redirect-using-checkout-url2026-10-29 https://bugbountyreports.com/reports/868-open-redirect-using-theme-install2026-10-29 https://bugbountyreports.com/reports/2276-open-redirect-via-next-parameter-in-third-party2026-10-29 https://bugbountyreports.com/reports/4790-open-redirect-via-login-avito-ru-protection-bypass2026-10-29 https://bugbountyreports.com/reports/9274-open-redirect-via-non-latin-subdomain-in-vcc-8x8-com-agui2026-10-29 https://bugbountyreports.com/reports/9668-open-redirect-via-redirect-to-parameter-in-tumblr-com2026-10-29 https://bugbountyreports.com/reports/9687-open-redirect-via-x-forwarded-host2026-10-29 https://bugbountyreports.com/reports/4123-open-redirect-vulnerability2026-10-29 https://bugbountyreports.com/reports/2497-open-redirect-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/8590-open-redirect-vulnerability-in-action-pack2026-10-29 https://bugbountyreports.com/reports/4036-open-redirect-vulnerability-in-index-php2026-10-29 https://bugbountyreports.com/reports/1382-open-redirect-vulnerability-in-moneybird-com2026-10-29 https://bugbountyreports.com/reports/6445-open-redirect-vulnerability-on-tiktok-ads-portal2026-10-29 https://bugbountyreports.com/reports/9683-open-redirect-when-logging-in-with-user-oidc2026-10-29 https://bugbountyreports.com/reports/2423-open-redirect-while-disconnecting-authenticated-account2026-10-29 https://bugbountyreports.com/reports/2426-open-redirect-while-disconnecting-email2026-10-29 https://bugbountyreports.com/reports/7029-open-redirect2026-10-29 https://bugbountyreports.com/reports/6812-open-redirect-vkma2026-10-29 https://bugbountyreports.com/reports/7409-open-redirect-m-vk-com2026-10-29 https://bugbountyreports.com/reports/233-open-redirection2026-10-29 https://bugbountyreports.com/reports/8473-open-redirection2026-10-29 https://bugbountyreports.com/reports/8033-open-redirection-at-https-smartreports-mtncameroon-net2026-10-29 https://bugbountyreports.com/reports/5309-open-redirection-bypass-in-www-admin-campaign-modify-php2026-10-29 https://bugbountyreports.com/reports/9779-open-redirection-effects-autodiscover-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/2864-open-redirection-found-in-users-whisper-sh2026-10-29 https://bugbountyreports.com/reports/4223-open-redirection-in-https-www-hackerone-com-index-php2026-10-29 https://bugbountyreports.com/reports/390-open-redirection-in-fabric-io2026-10-29 https://bugbountyreports.com/reports/3278-open-redirection-in-index-php-page2026-10-29 https://bugbountyreports.com/reports/4102-open-redirection-in-login-korean-starbucks2026-10-29 https://bugbountyreports.com/reports/633-open-redirection-in-oauth2026-10-29 https://bugbountyreports.com/reports/3726-open-redirection-in-oauth2026-10-29 https://bugbountyreports.com/reports/53-open-redirection-in-smarthistory-khanacademy2026-10-29 https://bugbountyreports.com/reports/3186-open-redirection-on-auth-rbk-money2026-10-29 https://bugbountyreports.com/reports/329-open-redirection-on-secure-phabricator-com2026-10-29 https://bugbountyreports.com/reports/1104-open-redirection-on-uber-com2026-10-29 https://bugbountyreports.com/reports/627-open-redirection-security-filter-bypassed2026-10-29 https://bugbountyreports.com/reports/3550-open-redirection-vulnerability-in-m-vk-com2026-10-29 https://bugbountyreports.com/reports/3049-open-redirection-while-saving-user-account-settings2026-10-29 https://bugbountyreports.com/reports/1312-open-redirector-via-apps-files-pdfviewer-for-un2026-10-29 https://bugbountyreports.com/reports/2474-open-redirects-protection-bypass2026-10-29 https://bugbountyreports.com/reports/5445-open-s3-bucket-accessible-by-any-aws-user2026-10-29 https://bugbountyreports.com/reports/8034-open-s3-bucket-accessible-by-any-aws-user2026-10-29 https://bugbountyreports.com/reports/7750-open-s3-bucket-accessible-by-any-user2026-10-29 https://bugbountyreports.com/reports/2091-open-s3-bucket-writeable-to-any-aws-user2026-10-29 https://bugbountyreports.com/reports/5992-open-sonarqube-instance-leaking-internal-source-code2026-10-29 https://bugbountyreports.com/reports/5597-open-turn-relay-abuse-is-possible-due-to-lack-of-peer2026-10-29 https://bugbountyreports.com/reports/1959-open-url-redirect-through-png-files2026-10-29 https://bugbountyreports.com/reports/232-open-url-redirection2026-10-29 https://bugbountyreports.com/reports/522-open-redirect-on-hackerone-com2026-10-29 https://bugbountyreports.com/reports/940-open-redirect-on-paragonie-com2026-10-29 https://bugbountyreports.com/reports/680-open-unvalidated-redirect-issue2026-10-29 https://bugbountyreports.com/reports/4920-openssh-dropbearsshd-xauth-command-injection2026-10-29 https://bugbountyreports.com/reports/350-openssh-server-forced-command-handling-information2026-10-29 https://bugbountyreports.com/reports/1-openssh-memory-corruption-in-aes-gcm-support2026-10-29 https://bugbountyreports.com/reports/9001-openssl-engines-can-be-used-to-bypass-and-or-disable-the2026-10-29 https://bugbountyreports.com/reports/8780-openssl-engines-can-be-used-to-bypass-and-or-disable-the2026-10-29 https://bugbountyreports.com/reports/1048-openssl-key-recovery-attack-on-dh-small-subgroups-cve-20162026-10-29 https://bugbountyreports.com/reports/10655-openssl-provider-ossl-lib-ctx-used-after-free-via-the2026-10-29 https://bugbountyreports.com/reports/9124-openssl-vulnerable-to-the-marvin-attack-cve-2022-43042026-10-29 https://bugbountyreports.com/reports/4892-openssl-seal-uninitialized-memory-usage2026-10-29 https://bugbountyreports.com/reports/3810-openssl-x509-name-equality-check-does-not-work-patch2026-10-29 https://bugbountyreports.com/reports/8859-operation-createorupdateso5lineupmutation-does-not-restrict2026-10-29 https://bugbountyreports.com/reports/3042-opportunity-to-obtain-private-tweets-through-search-widget2026-10-29 https://bugbountyreports.com/reports/2329-option-method-enabled2026-10-29 https://bugbountyreports.com/reports/4457-option-method-enabled-in-kartpay-webservers2026-10-29 https://bugbountyreports.com/reports/45-options-method-enabled2026-10-29 https://bugbountyreports.com/reports/119-options-method-enabled2026-10-29 https://bugbountyreports.com/reports/3419-optionsbleed-cve-2017-97982026-10-29 https://bugbountyreports.com/reports/4230-order-creation-webhooks-can-be-edited-deleted-by-staff-with2026-10-29 https://bugbountyreports.com/reports/6287-order-lookup-features-of-shopify-chat-application-leads-to2026-10-29 https://bugbountyreports.com/reports/10012-order-more-than-maximum-allowed-quantity2026-10-29 https://bugbountyreports.com/reports/3344-order-notifications-being-sent-for-a-deactivated-staff2026-10-29 https://bugbountyreports.com/reports/5912-orderlistinitial-leaks-order-details2026-10-29 https://bugbountyreports.com/reports/7608-orders-full-read-for-a-staff-with-only-customers-permissions2026-10-29 https://bugbountyreports.com/reports/10625-ordinary-hey-user-can-make-hey-originate-authenticated-mail2026-10-29 https://bugbountyreports.com/reports/2978-organization-admin-privilege-escalation-to-owner2026-10-29 https://bugbountyreports.com/reports/9076-organization-members-can-delete-reports-in-teams-they-have2026-10-29 https://bugbountyreports.com/reports/7223-organization-members-in-snap-kit-may-deactivate-apps2026-10-29 https://bugbountyreports.com/reports/5578-organization-takeover2026-10-29 https://bugbountyreports.com/reports/5577-organization-takeover-via-invitation-api2026-10-29 https://bugbountyreports.com/reports/8436-origin-ip-address-disclosure-through-pingora-response-header2026-10-29 https://bugbountyreports.com/reports/3503-origin-ip-found-cloudflare-bypassed2026-10-29 https://bugbountyreports.com/reports/8842-origin-ip-found-cloudflare-bypassed2026-10-29 https://bugbountyreports.com/reports/7850-origin-ip-found-waf-cloudflare-bypass2026-10-29 https://bugbountyreports.com/reports/7077-os-command-injection-in-rdoc-documentation-generator2026-10-29 https://bugbountyreports.com/reports/10423-os-command-injection-in-aws-cdk-lib-nodejsfunction-via2026-10-29 https://bugbountyreports.com/reports/4437-os-command-injection-in-nexus-repository-manager-2-x2026-10-29 https://bugbountyreports.com/reports/5737-os-command-injection-in-nexus-repository-manager-2-x-bypass2026-10-29 https://bugbountyreports.com/reports/4746-os-command-injection-in-nexus-repository-manager-2-x-bypass2026-10-29 https://bugbountyreports.com/reports/5580-os-command-injection-on-jison-all-parser-ports2026-10-29 https://bugbountyreports.com/reports/4464-os-command-injection-via-egrep-in-rake-filelist2026-10-29 https://bugbountyreports.com/reports/3025-os-username-disclosure2026-10-29 https://bugbountyreports.com/reports/1296-osx-slack-protocol-handler-javascript-injection2026-10-29 https://bugbountyreports.com/reports/1079-other-buffer-overflow-in-php-of-the-airmax-products2026-10-29 https://bugbountyreports.com/reports/6422-other-misconfiguration-on-slack-server2026-10-29 https://bugbountyreports.com/reports/5401-otp-bypass-unintended-disclosure-of-otp-to-client-allows2026-10-29 https://bugbountyreports.com/reports/8233-otp-bypass-in-verifying-nin2026-10-29 https://bugbountyreports.com/reports/9748-otp-code-leaked-in-api-response2026-10-29 https://bugbountyreports.com/reports/941-otrs-owncloud-com-reflected-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/1482-out-of-bound-read-in-exif-process-ifd-in-makernote2026-10-29 https://bugbountyreports.com/reports/4860-out-of-bound-when-verify-signature-of-tar-phar-in-phar2026-10-29 https://bugbountyreports.com/reports/4861-out-of-bound-when-verify-signature-of-zip-phar-in-phar2026-10-29 https://bugbountyreports.com/reports/6224-out-of-bounds-memory-read-in-exif-process-user-comment2026-10-29 https://bugbountyreports.com/reports/6225-out-of-bounds-memory-read-in-exif-scan-thumbnail2026-10-29 https://bugbountyreports.com/reports/6213-out-of-bounds-memory-read-in-php-jpg-get162026-10-29 https://bugbountyreports.com/reports/2360-out-of-bounds-memory-read-in-unserialize2026-10-29 https://bugbountyreports.com/reports/3913-out-of-bounds-memory-read-in-unserialize2026-10-29 https://bugbountyreports.com/reports/395-out-of-bounds-read-crashes-php-cgi2026-10-29 https://bugbountyreports.com/reports/3463-out-of-bounds-read-in-libcurl-s-imap-fetch-response-parser2026-10-29 https://bugbountyreports.com/reports/2687-out-of-date-disqus-shortname-usage-in-the-web-app-source2026-10-29 https://bugbountyreports.com/reports/5227-out-of-order-tls-handshake-application-data-messages-lead2026-10-29 https://bugbountyreports.com/reports/10304-out-of-scope-improper-input-validation-order-on-api2026-10-29 https://bugbountyreports.com/reports/4710-out-of-bound-read-in-phar-parse-zipfile2026-10-29 https://bugbountyreports.com/reports/6112-out-of-bound-read-in-urldecode-cve-2020-70672026-10-29 https://bugbountyreports.com/reports/6107-out-of-bounds-read-in-iconv-c-php-iconv-mime-decode-due-to2026-10-29 https://bugbountyreports.com/reports/10524-out-of-bounds-read-in-mariadb-frm-parsing-enables-rce-via2026-10-29 https://bugbountyreports.com/reports/6221-out-of-bounds-read-in-php-strip-tags-ex2026-10-29 https://bugbountyreports.com/reports/4700-out-of-bounds-read-in-timelib-meridian2026-10-29 https://bugbountyreports.com/reports/3381-out-of-bounds-read-when-importing-corrupt-blockchain-with2026-10-29 https://bugbountyreports.com/reports/4685-out-of-bounds-reads-in-zif-grapheme-stripos-with-negative2026-10-29 https://bugbountyreports.com/reports/4977-out-of-date-version-apache2026-10-29 https://bugbountyreports.com/reports/5406-outdated-coturn-is-vulnerable-to-known-vulnerabilities-high2026-10-29 https://bugbountyreports.com/reports/2099-outdated-jenkins-server-hosted-at-owncloud-org2026-10-29 https://bugbountyreports.com/reports/2990-outdated-jquery-version2026-10-29 https://bugbountyreports.com/reports/3322-outdated-mediaelement-js-reflected-cross-site-scripting-xss2026-10-29 https://bugbountyreports.com/reports/6667-outdated-wordpress-installation-and-plugins-at-www2026-10-29 https://bugbountyreports.com/reports/7383-outsider-can-affect-upvote-percentage-of-private-subreddit2026-10-29 https://bugbountyreports.com/reports/6764-over-privileged-api-credentials-for-elastic-agent2026-10-29 https://bugbountyreports.com/reports/2933-overreads-overcopies-in-torsocks2026-10-29 https://bugbountyreports.com/reports/9667-overwrite-any-file-of-the-web-server2026-10-29 https://bugbountyreports.com/reports/1490-owncloud-2-2-2-6192-dll-hijacking-vulnerability2026-10-29 https://bugbountyreports.com/reports/1001-owncloud-com-account-compromise-through-csrf2026-10-29 https://bugbountyreports.com/reports/723-owncloud-com-allowed-an-attacker-to-force-a-user-to-change2026-10-29 https://bugbountyreports.com/reports/819-owncloud-com-content-sniffing-not-disabled2026-10-29 https://bugbountyreports.com/reports/768-owncloud-com-cross-site-tracing2026-10-29 https://bugbountyreports.com/reports/733-owncloud-com-cve-2015-5477-bind9-tkey-vulnerability-exploit2026-10-29 https://bugbountyreports.com/reports/767-owncloud-com-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/765-owncloud-com-outdated-plugins-contains-public-exploits2026-10-29 https://bugbountyreports.com/reports/1012-owncloud-com-parameter-pollution-in-social-sharing-buttons2026-10-29 https://bugbountyreports.com/reports/766-owncloud-com-permerror-spf-permanent-error-too-many-dns2026-10-29 https://bugbountyreports.com/reports/949-owncloud-com-persistent-xss-in-account-profile2026-10-29 https://bugbountyreports.com/reports/792-owncloud-com-wp-super-cache-plugin-is-outdated2026-10-29 https://bugbountyreports.com/reports/915-owncloud-help-text-injection2026-10-29 https://bugbountyreports.com/reports/7965-ownership-check-missing-when-updating-or-deleting2026-10-29 https://bugbountyreports.com/reports/1186-padding-oracle-in-aes-ni-cbc-mac-check-cve-2016-21072026-10-29 https://bugbountyreports.com/reports/5504-padding-oracle-ms10-070-in-the-a-dod-website-https2026-10-29 https://bugbountyreports.com/reports/7639-page-has-a-link-to-google-drive-which-has-logos-and-a-few2026-10-29 https://bugbountyreports.com/reports/4066-page-replacement-and-redirect-loop2026-10-29 https://bugbountyreports.com/reports/34-page-controls-menu-js-can-reveal-collection-version-of-page2026-10-29 https://bugbountyreports.com/reports/10328-page-line-me-open-redirect-leading-to-oauth-authorization2026-10-29 https://bugbountyreports.com/reports/2659-pages-don-t-render-in-old-browsers-like-ie112026-10-29 https://bugbountyreports.com/reports/787-paid-account-can-review-download-any-invoice-of-any-other2026-10-29 https://bugbountyreports.com/reports/7097-pam-ussh-does-not-properly-validate-the-ssh-certificate2026-10-29 https://bugbountyreports.com/reports/2063-pam-ussh-may-be-tricked-into-using-another-logged-in-user-s2026-10-29 https://bugbountyreports.com/reports/4624-panorama-ui-xss-leads-to-remote-code-execution-via-kick2026-10-29 https://bugbountyreports.com/reports/2922-paragonie-airship-admin-csrf-on-extensions-pages2026-10-29 https://bugbountyreports.com/reports/6711-param-allows-any-external-resource-to-be-downloadable-https2026-10-29 https://bugbountyreports.com/reports/1875-parameter-manipulation-allowed-for-editing-the-shipping2026-10-29 https://bugbountyreports.com/reports/1847-parameter-manipulation-allowed-for-viewing-of-other-user-s2026-10-29 https://bugbountyreports.com/reports/872-parameter-pollution-in-social-sharing-buttons2026-10-29 https://bugbountyreports.com/reports/9280-par-metro-xss-nome-de-usu-rio2026-10-29 https://bugbountyreports.com/reports/2962-parsing-invalid-unicode-codepoints-using-json-c-extension-22026-10-29 https://bugbountyreports.com/reports/4067-partial-bypass-of-483774-with-blind-xxe-on-https-duckduckgo2026-10-29 https://bugbountyreports.com/reports/1713-partial-disclosure-of-report-activity-through-new-export-as2026-10-29 https://bugbountyreports.com/reports/5007-partial-pii-leakage-due-to-public-set-gitlab2026-10-29 https://bugbountyreports.com/reports/7148-partial-report-contents-leakage-via-http-2-concurrent2026-10-29 https://bugbountyreports.com/reports/4631-partial-ssn-exposed-through-presentation-slides-on2026-10-29 https://bugbountyreports.com/reports/10089-participants-were-able-to-blindly-delete-poll-drafts-of2026-10-29 https://bugbountyreports.com/reports/3684-participation-of-expired-account-holders-in-projects-can2026-10-29 https://bugbountyreports.com/reports/6028-partner-s-non-verified-business-email-change-reflected-into2026-10-29 https://bugbountyreports.com/reports/4755-pass2-no-dither-out-of-bounds-access2026-10-29 https://bugbountyreports.com/reports/8431-passcode-bypass-on-talk-android-app2026-10-29 https://bugbountyreports.com/reports/1183-passphrase-credential-lock-bypass2026-10-29 https://bugbountyreports.com/reports/9046-password-and-mail-address-stored-unencrypted-in-memory2026-10-29 https://bugbountyreports.com/reports/5265-password-authentication-at-newsletter-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/6600-password-authentication-when-changing-information-bypass2026-10-29 https://bugbountyreports.com/reports/2767-password-complexity-ignores-empty-spaces2026-10-29 https://bugbountyreports.com/reports/3264-password-complexity-not-enforced-on-password-change2026-10-29 https://bugbountyreports.com/reports/2766-password-complexity-not-evenly-enforced2026-10-29 https://bugbountyreports.com/reports/1890-password-complexity-requirements-not-enforced2026-10-29 https://bugbountyreports.com/reports/242-password-complexity-very-low2026-10-29 https://bugbountyreports.com/reports/6636-password-cracking-weak-password-used-to-secure-containing-a2026-10-29 https://bugbountyreports.com/reports/8093-password-disclosure-in-initial-setup-of-mail-app2026-10-29 https://bugbountyreports.com/reports/1672-password-forgot-password-reset-request-bug2026-10-29 https://bugbountyreports.com/reports/1626-password-less-login-token-expiration-issue2026-10-29 https://bugbountyreports.com/reports/4281-password-not-checked-when-disabling-2fa-on-hackerone2026-10-29 https://bugbountyreports.com/reports/5287-password-of-failed-2fa-login-attempt-is-stored-in-log2026-10-29 https://bugbountyreports.com/reports/9058-password-of-talk-conversations-can-be-bruteforced2026-10-29 https://bugbountyreports.com/reports/171-password-policy2026-10-29 https://bugbountyreports.com/reports/2583-password-policy-issue2026-10-29 https://bugbountyreports.com/reports/319-password-policy-issue-weak-protect2026-10-29 https://bugbountyreports.com/reports/8192-password-policy-restriction-bypass2026-10-29 https://bugbountyreports.com/reports/6025-password-protection-can-be-removed-for-newly-created2026-10-29 https://bugbountyreports.com/reports/880-password-reset-query-param-overrides-postdata2026-10-29 https://bugbountyreports.com/reports/2718-password-reset-access-control2026-10-29 https://bugbountyreports.com/reports/336-password-reset-bug2026-10-29 https://bugbountyreports.com/reports/7525-password-reset-by-malicious-input-on-air-line-me2026-10-29 https://bugbountyreports.com/reports/1590-password-reset-emails-missing-tls-leads-account-takeover2026-10-29 https://bugbountyreports.com/reports/8837-password-reset-endpoint-is-not-brute-force-protected2026-10-29 https://bugbountyreports.com/reports/2730-password-reset-form-ignores-email-field2026-10-29 https://bugbountyreports.com/reports/196-password-reset-link-doesn-t-expire2026-10-29 https://bugbountyreports.com/reports/2414-password-reset-link-hijacking-via-host-header-poisoning2026-10-29 https://bugbountyreports.com/reports/6794-password-reset-link-hijacking-via-host-header-poisoning2026-10-29 https://bugbountyreports.com/reports/3117-password-reset-link-injection-allows-redirect-to-malicious2026-10-29 https://bugbountyreports.com/reports/1238-password-reset-link-is-not-expiring2026-10-29 https://bugbountyreports.com/reports/1565-password-reset-link-issue2026-10-29 https://bugbountyreports.com/reports/5916-password-reset-link-not-expired-at-stocky-app2026-10-29 https://bugbountyreports.com/reports/7157-password-reset-link-not-expiring-after-changing-password-in2026-10-29 https://bugbountyreports.com/reports/5029-password-reset-link-not-expiring-after-changing-the-email2026-10-29 https://bugbountyreports.com/reports/1746-password-reset-link-remains-valid-after-email-change2026-10-29 https://bugbountyreports.com/reports/2640-password-reset-links-should-expire-after-being-used-instead2026-10-29 https://bugbountyreports.com/reports/2798-password-reset-token-issue2026-10-29 https://bugbountyreports.com/reports/2886-password-reset-token-leak-on-third-party-website-via2026-10-29 https://bugbountyreports.com/reports/7160-password-reset-token-leak-on-third-party-website-via2026-10-29 https://bugbountyreports.com/reports/8086-password-reset-token-leak-on-third-party-website-via2026-10-29 https://bugbountyreports.com/reports/7609-password-reset-token-leak-via-host-header-on-third-party2026-10-29 https://bugbountyreports.com/reports/3632-password-reset-token-leakage-via-referer2026-10-29 https://bugbountyreports.com/reports/2298-password-reset-token-leaking-allowed-for-ato-of-an-uber2026-10-29 https://bugbountyreports.com/reports/2986-password-reset-token-not-expired2026-10-29 https://bugbountyreports.com/reports/250-password-reset-token-not-expiring2026-10-29 https://bugbountyreports.com/reports/3032-password-reset-token-not-expiring2026-10-29 https://bugbountyreports.com/reports/2138-password-reset-token-not-expiring2026-10-29 https://bugbountyreports.com/reports/8082-password-reset-tokens-sent-to-csp-reporting-endpoints2026-10-29 https://bugbountyreports.com/reports/2039-password-reset-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2737-password-restriction2026-10-29 https://bugbountyreports.com/reports/282-password-sent-over-http2026-10-29 https://bugbountyreports.com/reports/10253-password-strength-policy-bypass-via-server-side-validation2026-10-29 https://bugbountyreports.com/reports/5087-password-token-leak-via-host-header2026-10-29 https://bugbountyreports.com/reports/2522-password-token-validation-in-https-demo-weblate-org2026-10-29 https://bugbountyreports.com/reports/2641-password-token-validation-in-https-wakatime-com2026-10-29 https://bugbountyreports.com/reports/2744-password-token-validation-in-weblate-bypass2026-10-29 https://bugbountyreports.com/reports/2745-password-token-validation-in-weblate-bypass-22026-10-29 https://bugbountyreports.com/reports/1174-password-s-can-be-found-via-login-process2026-10-29 https://bugbountyreports.com/reports/4473-passwords-being-stored-as-plain-text-in-logging2026-10-29 https://bugbountyreports.com/reports/750-passwords-returned-in-later-responses2026-10-29 https://bugbountyreports.com/reports/9273-patch-method-manipulation-allowing-the-users-to-escalate2026-10-29 https://bugbountyreports.com/reports/86-path-disclosure-info-disclosure-in-http-www-localize-io2026-10-29 https://bugbountyreports.com/reports/8278-path-paths-and-file-disclosure-vulnerabilities-at-influxdb2026-10-29 https://bugbountyreports.com/reports/6890-path-traversal-cve-2020-34522026-10-29 https://bugbountyreports.com/reports/8885-path-traversal-allows-tricking-the-talk-android-app-into2026-10-29 https://bugbountyreports.com/reports/7423-path-traversal-and-file-disclosure-vulnerability-in-apache2026-10-29 https://bugbountyreports.com/reports/7451-path-traversal-and-remote-code-execution-in-apache-http2026-10-29 https://bugbountyreports.com/reports/7454-path-traversal-and-remote-code-execution-in-apache-http2026-10-29 https://bugbountyreports.com/reports/9773-path-traversal-by-drive-name-in-windows-environment2026-10-29 https://bugbountyreports.com/reports/9230-path-traversal-by-monkey-patching-buffer-internals2026-10-29 https://bugbountyreports.com/reports/9374-path-traversal-by-monkey-patching-buffer-internals2026-10-29 https://bugbountyreports.com/reports/8593-path-traversal-in-a-tomcat-server2026-10-29 https://bugbountyreports.com/reports/5958-path-traversal-in-app-proxy2026-10-29 https://bugbountyreports.com/reports/5581-path-traversal-in-command-line-client2026-10-29 https://bugbountyreports.com/reports/9435-path-traversal-in-deeplink-query-parameter-can-expose-any2026-10-29 https://bugbountyreports.com/reports/5850-path-traversal-in-filename-in-line-mac-client2026-10-29 https://bugbountyreports.com/reports/5035-path-traversal-in-https-www-npmjs-com-package-http-server2026-10-29 https://bugbountyreports.com/reports/10561-path-traversal-in-mbstream-extract2026-10-29 https://bugbountyreports.com/reports/10480-path-traversal-in-nextcloud-talk-android-exposes-user2026-10-29 https://bugbountyreports.com/reports/7898-path-traversal-in-nuget-package-registry2026-10-29 https://bugbountyreports.com/reports/6799-path-traversal-in-tempfile-on-windows-os-due-to-unsanitized2026-10-29 https://bugbountyreports.com/reports/10261-path-traversal-in-writefile-via-unsafe-prefix-containment2026-10-29 https://bugbountyreports.com/reports/6258-path-traversal-in-zip-extract-routine-on-line-android2026-10-29 https://bugbountyreports.com/reports/8205-path-traversal-issue-at-https-blaze2026-10-29 https://bugbountyreports.com/reports/4145-path-traversal-leading-to-limited-csrf-on-get-requests-on2026-10-29 https://bugbountyreports.com/reports/8581-path-traversal-leads-to-reading-of-local-files-on-and2026-10-29 https://bugbountyreports.com/reports/7345-path-traversal-on2026-10-29 https://bugbountyreports.com/reports/4576-path-traversal-on2026-10-29 https://bugbountyreports.com/reports/3583-path-traversal-on-default-installed-rails-application-asset2026-10-29 https://bugbountyreports.com/reports/5892-path-traversal-on-https-allows-arbitrary-file-read-cve-20202026-10-29 https://bugbountyreports.com/reports/7327-path-traversal-on-meetcqpub1-gsa-gov-allows-attackers-to2026-10-29 https://bugbountyreports.com/reports/3240-path-traversal-on-resolve-path2026-10-29 https://bugbountyreports.com/reports/9022-path-traversal-through-path-stored-in-uint8array2026-10-29 https://bugbountyreports.com/reports/9169-path-traversal-through-path-stored-in-uint8array-in-node-js2026-10-29 https://bugbountyreports.com/reports/4589-path-traversal-using-symlink2026-10-29 https://bugbountyreports.com/reports/10081-path-traversal-via-archive-extract-cve-2021-3281-incomplete2026-10-29 https://bugbountyreports.com/reports/9891-path-traversal-vulnerability-found-on-ibm-cloud2026-10-29 https://bugbountyreports.com/reports/10140-path-traversal-vulnerability-identified-on-ibm-endpoint2026-10-29 https://bugbountyreports.com/reports/8096-path-traversal-vulnerability-in-grafana-8-x-allows-local2026-10-29 https://bugbountyreports.com/reports/9943-path-traversal-vulnerability-in-lila-project2026-10-29 https://bugbountyreports.com/reports/10046-path-traversal-vulnerability-in-nextcloud-tables-enables2026-10-29 https://bugbountyreports.com/reports/6442-path-traversal-ios2026-10-29 https://bugbountyreports.com/reports/7901-path-traversal-to-rce2026-10-29 https://bugbountyreports.com/reports/10245-pats-without-the-required-scope-can-leak-issues2026-10-29 https://bugbountyreports.com/reports/8073-pause-based-desync-in-apache-httpd2026-10-29 https://bugbountyreports.com/reports/9486-payload-delivery-via-social-media-urls-on-h1-profile2026-10-29 https://bugbountyreports.com/reports/1575-payment-gateway-status-transferred-to-shopify-without2026-10-29 https://bugbountyreports.com/reports/7255-payment-method-token-being-sent-to-3rd-party-analytics2026-10-29 https://bugbountyreports.com/reports/9646-paypal-client-id-and-stripe-api-key-indexed-on-web-archive2026-10-29 https://bugbountyreports.com/reports/10041-pending-invites-remain-valid-even-after-the-inviter-is2026-10-29 https://bugbountyreports.com/reports/5781-pending-mfa-logins-aren-t-immediatly-expired-after-a2026-10-29 https://bugbountyreports.com/reports/5947-pentester-can-obtain-information-about-other-pentesters-who2026-10-29 https://bugbountyreports.com/reports/3541-people-who-interviewed-for-hackerone-security-analyst2026-10-29 https://bugbountyreports.com/reports/5244-periscope-android-app-deeplink-leads-to-csrf-in-follow2026-10-29 https://bugbountyreports.com/reports/5362-periscope-ios-app-csrf-in-follow-action-due-to-deeplink2026-10-29 https://bugbountyreports.com/reports/4538-periscope-all-firebase-database-takeover2026-10-29 https://bugbountyreports.com/reports/4894-perl-env-key-stack-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/1051-perl-5-22-vdir-mappatha-w-out-of-bounds-reads-and-buffer2026-10-29 https://bugbountyreports.com/reports/8966-permanent-casb-integration-takeover-due-to-improper-access2026-10-29 https://bugbountyreports.com/reports/39-permanent-denial-of-service2026-10-29 https://bugbountyreports.com/reports/6554-permanent-dos-at-https-happy-tools-when-inviting-a-user2026-10-29 https://bugbountyreports.com/reports/6281-permanent-dos-with-one-click2026-10-29 https://bugbountyreports.com/reports/8882-permission-model-bypass-by-specifying-a-path-traversal2026-10-29 https://bugbountyreports.com/reports/10259-permission-model-bypass-in-realpathsync-native-allows-file2026-10-29 https://bugbountyreports.com/reports/10360-permission-model-bypass-via-process-report-writereport-path2026-10-29 https://bugbountyreports.com/reports/10389-permission-model-bypass-via-filehandle-utimes-in-the2026-10-29 https://bugbountyreports.com/reports/10636-permission-model-bypass-with-fs-realpathsync2026-10-29 https://bugbountyreports.com/reports/10443-permission-model-bypass-trace-events-createtracing-enable2026-10-29 https://bugbountyreports.com/reports/10449-permission-model-bypass-process-report-writes-and2026-10-29 https://bugbountyreports.com/reports/10657-permission-model-filesystem-over-grant-via-wildcard-radix2026-10-29 https://bugbountyreports.com/reports/9456-permission-model-improperly-processes-unc-paths2026-10-29 https://bugbountyreports.com/reports/9021-permission-model-improperly-protects-against-path-traversal2026-10-29 https://bugbountyreports.com/reports/9089-permission-model-improperly-protects-against-path-traversal2026-10-29 https://bugbountyreports.com/reports/10446-permission-model-allow-fs-read-allow-fs-write-radix-tree2026-10-29 https://bugbountyreports.com/reports/8942-permissions-not-respected-when-copying-entire-group-folders2026-10-29 https://bugbountyreports.com/reports/9088-permissions-policies-can-be-bypassed-via-module-load-and2026-10-29 https://bugbountyreports.com/reports/8894-permissions-policies-can-be-bypassed-via-module-load2026-10-29 https://bugbountyreports.com/reports/8555-permissions-policies-can-be-bypassed-via-process-mainmodule2026-10-29 https://bugbountyreports.com/reports/4778-permissive-cors-policy-trusting-arbitrary-extensions-origin2026-10-29 https://bugbountyreports.com/reports/6956-persistant-arbitrary-code-execution-in-mattermost-android2026-10-29 https://bugbountyreports.com/reports/2747-persistence-of-third-party-association2026-10-29 https://bugbountyreports.com/reports/57-persistent-class-xss-the-fuck2026-10-29 https://bugbountyreports.com/reports/341-persistent-cross-site-scripting-within-the-irccloud-pastebin2026-10-29 https://bugbountyreports.com/reports/1049-persistent-cross-site-scripting-xss-in-map-attribution2026-10-29 https://bugbountyreports.com/reports/3055-persistent-cross-site-scripting-in-woocommerce-wordpress2026-10-29 https://bugbountyreports.com/reports/127-persistent-cross-site-scripting-vulnerability-settings2026-10-29 https://bugbountyreports.com/reports/2260-persistent-csrf-in-giftcert-addtobasket-prevents-purchases2026-10-29 https://bugbountyreports.com/reports/8163-persistent-css-injection-with-marked-markdown-parser-in2026-10-29 https://bugbountyreports.com/reports/3244-persistent-dom-based-xss-in-https-help-twitter-com-via2026-10-29 https://bugbountyreports.com/reports/1078-persistent-input-validation-mail-encoding-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/10551-persistent-smtp-header-injection-via-identity-organization2026-10-29 https://bugbountyreports.com/reports/9266-persistent-unauthorized-administrative-access-on-all2026-10-29 https://bugbountyreports.com/reports/8768-persistent-user-tracking-is-possible-using-window-caches-by2026-10-29 https://bugbountyreports.com/reports/3720-persistent-xss-deleting-a-project-no-longer-vulnerable-in2026-10-29 https://bugbountyreports.com/reports/3579-persistent-xss-selecting-users-as-allowed-merge-request2026-10-29 https://bugbountyreports.com/reports/861-persistent-xss-in-https-p-imgur-com-albumview-gif-and-http2026-10-29 https://bugbountyreports.com/reports/3423-persistent-xss-in-https-sandbox-reverb-com-item2026-10-29 https://bugbountyreports.com/reports/1050-persistent-xss-in-image-title2026-10-29 https://bugbountyreports.com/reports/4367-persistent-xss-in-note-objects2026-10-29 https://bugbountyreports.com/reports/3070-persistent-xss-in-share-button2026-10-29 https://bugbountyreports.com/reports/1856-persistent-xss-in-www-starbucks-com2026-10-29 https://bugbountyreports.com/reports/5052-persistent-xss-on-favorite-via-filename2026-10-29 https://bugbountyreports.com/reports/1142-persistent-xss-on-public-project-page2026-10-29 https://bugbountyreports.com/reports/1381-persistent-xss-on-public-wiki-pages2026-10-29 https://bugbountyreports.com/reports/1206-persistent-xss-on-reservation-booking-page2026-10-29 https://bugbountyreports.com/reports/4471-persistent-xss-via-e-mail-when-creating-merge-requests2026-10-29 https://bugbountyreports.com/reports/5271-persistent-xss-via-filename-in-projects2026-10-29 https://bugbountyreports.com/reports/3754-persistent-xss-via-malicious-license-file2026-10-29 https://bugbountyreports.com/reports/1945-persistent-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/73-persistent-xss-editor-link2026-10-29 https://bugbountyreports.com/reports/1956-personal-information-disclosure-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/399-phabricator-diffusion-application-allows-unauthorized-users2026-10-29 https://bugbountyreports.com/reports/2117-phabricator-is-vulnerable-to-padding-oracle-attacks-and2026-10-29 https://bugbountyreports.com/reports/402-phabricator-phame-blog-skins-local-file-inclusion2026-10-29 https://bugbountyreports.com/reports/7318-phar-deserialization-vulnerability-via-logging-settings2026-10-29 https://bugbountyreports.com/reports/6210-phar-tar-writeheaders-int-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/3688-phishing-user-to-download-malicious-app-could-lead-to2026-10-29 https://bugbountyreports.com/reports/8775-phishing-malware-site-blocking-on-brave-ios-can-be-bypassed2026-10-29 https://bugbountyreports.com/reports/2404-phone-number-exposure-for-riders-drivers-given-email-uuid2026-10-29 https://bugbountyreports.com/reports/6109-php-7-3-3-heap-use-after-free-read-of-size-8-in-match-at2026-10-29 https://bugbountyreports.com/reports/1143-php-and-web-server-version-disclosed-on-leasewebnoc-com2026-10-29 https://bugbountyreports.com/reports/6214-php-builded-for-windows-with-ts-support-does-not-resolve2026-10-29 https://bugbountyreports.com/reports/10399-php-code-injection-in-delivery-limitation-logical2026-10-29 https://bugbountyreports.com/reports/10402-php-code-injection-in-delivery-limitation-logical2026-10-29 https://bugbountyreports.com/reports/6947-php-code-injection-through-previewblock-method2026-10-29 https://bugbountyreports.com/reports/9364-php-code-injection-through-translate-save-method2026-10-29 https://bugbountyreports.com/reports/10335-php-code-injection-via-delivery-limitation-logical2026-10-29 https://bugbountyreports.com/reports/10329-php-code-injection-via-unexpected-delivery-limitation2026-10-29 https://bugbountyreports.com/reports/4869-php-curl-ext-size-t-overflow-lead-to-heap-corruption2026-10-29 https://bugbountyreports.com/reports/14-php-heap-overflow-vulnerability-in-imagecrop2026-10-29 https://bugbountyreports.com/reports/7657-php-info-exposing-secrets-at-https-radio-mtn-bj-info2026-10-29 https://bugbountyreports.com/reports/7491-php-info-file-and-sql-backup-at-vendor-s-subdomain2026-10-29 https://bugbountyreports.com/reports/6491-php-info-page-disclosure2026-10-29 https://bugbountyreports.com/reports/6820-php-info-page-disclosure2026-10-29 https://bugbountyreports.com/reports/9585-php-info-page-disclosure-in2026-10-29 https://bugbountyreports.com/reports/4697-php-ini-parsing-stack-buffer-overflow-vulnerability2026-10-29 https://bugbountyreports.com/reports/6092-php-integer-overflow-in-gdimagewebpctx2026-10-29 https://bugbountyreports.com/reports/6222-php-link-silently-truncates-after-a-null-byte-on-windows2026-10-29 https://bugbountyreports.com/reports/4703-php-mbstring-oniguruma-multiple-remote-heap-stack2026-10-29 https://bugbountyreports.com/reports/4871-php-mcrypt-ext-in-correct-casting-from-size-t-to-int-lead2026-10-29 https://bugbountyreports.com/reports/8596-php-object-injection-building-custom-gadget-chain-rce2026-10-29 https://bugbountyreports.com/reports/4702-php-openssl-zif-openssl-seal-heap-overflow-wild-memcpy2026-10-29 https://bugbountyreports.com/reports/8-php-openssl-x509-parse-memory-corruption-vulnerability2026-10-29 https://bugbountyreports.com/reports/223-php-pdoexception-and-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/404-php-pdoexception-and-full-path-disclosure2026-10-29 https://bugbountyreports.com/reports/421-php-reveals-potentially-sensitive-information-via-certain2026-10-29 https://bugbountyreports.com/reports/4661-php-session-data-injection-vulnerability2026-10-29 https://bugbountyreports.com/reports/1216-php-version-disclosed-on-blog-algolia-com2026-10-29 https://bugbountyreports.com/reports/4701-php-wddx-deserialization-heap-oob-read-in-timelib-meridian2026-10-29 https://bugbountyreports.com/reports/565-php-yaml-parse-yaml-parse-file-yaml-parse-url-double-free2026-10-29 https://bugbountyreports.com/reports/566-php-yaml-parse-yaml-parse-file-yaml-parse-url-unsafe2026-10-29 https://bugbountyreports.com/reports/1132-php-snmp-error-format-string-vulnerability2026-10-29 https://bugbountyreports.com/reports/4838-php-snmp-parse-oid-integer-overflow-in-memory-allocation2026-10-29 https://bugbountyreports.com/reports/510-php-stream-url-wrap-http-ex-type-confusion-vulnerability2026-10-29 https://bugbountyreports.com/reports/4889-php-fpm-fpm-log-c-memory-leak-and-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/6885-php-fpm-status-page-disclosure2026-10-29 https://bugbountyreports.com/reports/4287-phpinfo-page2026-10-29 https://bugbountyreports.com/reports/5753-phpinfo-page-on-http-callstats-io2026-10-29 https://bugbountyreports.com/reports/7359-phpinfo-disclosure-info2026-10-29 https://bugbountyreports.com/reports/9702-phpinfo-exposed-on2026-10-29 https://bugbountyreports.com/reports/9703-phpinfo-exposed-on2026-10-29 https://bugbountyreports.com/reports/6538-phpinfo-on-graph-rockstargames-com-exposes-sensitive2026-10-29 https://bugbountyreports.com/reports/5730-phpunit-is-included-in-groupfolders-release-package2026-10-29 https://bugbountyreports.com/reports/3963-physical-access-to-mobile-app-allows-local-attribute2026-10-29 https://bugbountyreports.com/reports/3629-physical-laptop-takeover2026-10-29 https://bugbountyreports.com/reports/9184-pickle-deserialization-vulnerability-in-xcoms2026-10-29 https://bugbountyreports.com/reports/7155-pii-data-leakage-through-hackerone-reports2026-10-29 https://bugbountyreports.com/reports/3875-pii-disclosure-past-team-members-their-email-id-personal2026-10-29 https://bugbountyreports.com/reports/10007-pii-exposure-via-email-confirmation-link-email-embedded-in2026-10-29 https://bugbountyreports.com/reports/6502-pii-information-leak-at-https-mil2026-10-29 https://bugbountyreports.com/reports/6189-pii-leak-such-as-cac-user-id-at-https-pages-login-aspx2026-10-29 https://bugbountyreports.com/reports/6586-pii-leak-of-personal-at-https-www2026-10-29 https://bugbountyreports.com/reports/6337-pii-leak-of-uscg-designated-examiner-list-at-https-www2026-10-29 https://bugbountyreports.com/reports/6634-pii-leak-via2026-10-29 https://bugbountyreports.com/reports/6632-pii-leak-via2026-10-29 https://bugbountyreports.com/reports/6633-pii-leak-via2026-10-29 https://bugbountyreports.com/reports/5462-pii-leak-via-https2026-10-29 https://bugbountyreports.com/reports/4602-pii-leakage-due-to-caching-of-order-contract-id-s-on2026-10-29 https://bugbountyreports.com/reports/5024-pii-leakage-due-to-scrceenshot-of-health-records2026-10-29 https://bugbountyreports.com/reports/4632-pii-leakage-full-ssn-on2026-10-29 https://bugbountyreports.com/reports/8699-pii-of-users-can-be-downloaded-from-export-pages2026-10-29 https://bugbountyreports.com/reports/5405-pii-of-users-disclosure-using-members-invite-endpoint2026-10-29 https://bugbountyreports.com/reports/5727-pii-phi-data-available-on-web-https-portals-22-documents2026-10-29 https://bugbountyreports.com/reports/7685-pin-bypass2026-10-29 https://bugbountyreports.com/reports/10341-pin-bypass-in-passcodeactivity-via-back-button2026-10-29 https://bugbountyreports.com/reports/6163-pin-for-passwordless-webauthn-is-asked-for-but-not-verified2026-10-29 https://bugbountyreports.com/reports/9513-pinning-leaks-message-content2026-10-29 https://bugbountyreports.com/reports/10024-pivilege-escalation-of-any-new-user-to-keymaster-caused-by2026-10-29 https://bugbountyreports.com/reports/6-pixel-flood-attack2026-10-29 https://bugbountyreports.com/reports/5550-pixel-flood-attack-cause-the-javascript-heap-out-of-memory2026-10-29 https://bugbountyreports.com/reports/6201-pixel-flood-attack-leads-to-application-level-dos2026-10-29 https://bugbountyreports.com/reports/8862-plaintext-leakage-of-dns-requests-in-windows-1-1-1-1-warp2026-10-29 https://bugbountyreports.com/reports/449-player-vimeo-com-reflected-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/4764-plugins-trac-wordpress-org-likely-vulnerable-to-cross-site2026-10-29 https://bugbountyreports.com/reports/573-png-compression-dos2026-10-29 https://bugbountyreports.com/reports/4579-pngcrush-double-free-segfault-could-result-in-dos-cve-20152026-10-29 https://bugbountyreports.com/reports/4578-pngcrush-measure-idat-off-by-one-error-cve-2015-21582026-10-29 https://bugbountyreports.com/reports/8881-policy-restricted-modules-can-escalate-to-higher-privileges2026-10-29 https://bugbountyreports.com/reports/444-poodle-bleed-vulnerability-in-cloud-sub-domain2026-10-29 https://bugbountyreports.com/reports/737-poodle-bug-199-16-156-44-199-16-156-108-mx4-twitter-com2026-10-29 https://bugbountyreports.com/reports/3238-poodle-sslv3-bug-on-multiple-twitter-smtp-servers-mx32026-10-29 https://bugbountyreports.com/reports/687-poodlebleed2026-10-29 https://bugbountyreports.com/reports/8249-pool-upgrade-request-handler-may-allow-an-unauthenticated2026-10-29 https://bugbountyreports.com/reports/9197-port-587-smpt-open-can-send-any-mail-remotely-from-the2026-10-29 https://bugbountyreports.com/reports/4174-ports-are-not-shown-in-third-party-site-redirect-warning2026-10-29 https://bugbountyreports.com/reports/10282-position-fixed-important-bypasses-css-sanitizer-s-fixed2026-10-29 https://bugbountyreports.com/reports/9043-possibility-of-deface-through-translation-tool-www-mozilla2026-10-29 https://bugbountyreports.com/reports/9126-possibility-of-request-smuggling-attack2026-10-29 https://bugbountyreports.com/reports/1260-possibility-to-brute-force-invite-codes-in-riders-uber-com2026-10-29 https://bugbountyreports.com/reports/3785-possibility-to-create-account-without-username2026-10-29 https://bugbountyreports.com/reports/8433-possibility-to-delete-files-attached-to-deck-cards-of-other2026-10-29 https://bugbountyreports.com/reports/3905-possibility-to-enumerate-and-bruteforce-promotion-codes-in2026-10-29 https://bugbountyreports.com/reports/7802-possibility-to-force-an-admin-to-install-recommended2026-10-29 https://bugbountyreports.com/reports/6238-possibility-to-freeze-crash-the-host-system-of-all-slack2026-10-29 https://bugbountyreports.com/reports/1266-possibility-to-get-private-email-using-uuid2026-10-29 https://bugbountyreports.com/reports/8962-possibility-to-guess-email-address-from-gravatar-image-url2026-10-29 https://bugbountyreports.com/reports/3892-possibility-to-inject-a-malicious-javascript-code-in-any2026-10-29 https://bugbountyreports.com/reports/4352-possibility-to-overwrite-any-file-in-the-vpe-cdn-vimeo-tv2026-10-29 https://bugbountyreports.com/reports/6179-possibilty-to-purchase-ultimate-1-year-edu-or-oss2026-10-29 https://bugbountyreports.com/reports/6412-possible-we-need-to-wait-for-some-time-takeover-of2026-10-29 https://bugbountyreports.com/reports/3397-possible-blind-writing-to-s3-bucket2026-10-29 https://bugbountyreports.com/reports/1510-possible-content-spoofing-due-to-missing-error-page2026-10-29 https://bugbountyreports.com/reports/1625-possible-csrf-during-external-programs2026-10-29 https://bugbountyreports.com/reports/1329-possible-csrf-during-joining-report-as-participant2026-10-29 https://bugbountyreports.com/reports/5838-possible-denial-of-service-when-entering-a-loooong-password2026-10-29 https://bugbountyreports.com/reports/6038-possible-denial-of-service-when-entering-a-loooong-password2026-10-29 https://bugbountyreports.com/reports/6159-possible-dom-xss-on-app-hey-com2026-10-29 https://bugbountyreports.com/reports/7870-possible-domain-takeover-on-aws-instance2026-10-29 https://bugbountyreports.com/reports/9872-possible-dos-by-memory-exhaustion-in-net-imap2026-10-29 https://bugbountyreports.com/reports/8802-possible-dos-in-app-with-crashing-exceptions-app2026-10-29 https://bugbountyreports.com/reports/10565-possible-dos-in-numberhelpers2026-10-29 https://bugbountyreports.com/reports/8670-possible-dos-vulnerability-in-multipart-mime-parsing-in-rack2026-10-29 https://bugbountyreports.com/reports/9613-possible-dos-vulnerability-with-range-header-in-rack2026-10-29 https://bugbountyreports.com/reports/7188-possible-ldap-username-and-password-disclosed-on-github2026-10-29 https://bugbountyreports.com/reports/9347-possible-pii-disclosure-via-advanced-vetting-process2026-10-29 https://bugbountyreports.com/reports/9832-possible-redos-vulnerability-in-query-parameter-filtering2026-10-29 https://bugbountyreports.com/reports/111-possible-sensitive-files2026-10-29 https://bugbountyreports.com/reports/9878-possible-sensitive-session-information-leak-in-active2026-10-29 https://bugbountyreports.com/reports/2870-possible-sop-bypass-in-www-starbucks-com-due-to-insecure2026-10-29 https://bugbountyreports.com/reports/1036-possible-sql-injection-on-jump-to-twitter2026-10-29 https://bugbountyreports.com/reports/3927-possible-ssrf-at-url-parameter-while-creating-a-new-package2026-10-29 https://bugbountyreports.com/reports/2374-possible-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/3662-possible-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/2004-possible-subdomain-takeover-at-http-production-s3-rubygems2026-10-29 https://bugbountyreports.com/reports/2694-possible-subdomain-takeover-at-openapi-starbucks-com2026-10-29 https://bugbountyreports.com/reports/9510-possible-subdomain-takeover-for-inbound-emails2026-10-29 https://bugbountyreports.com/reports/3876-possible-take-over-subdomain-for-inbound-emails2026-10-29 https://bugbountyreports.com/reports/1022-possible-timing-side-channel-in-xmlrpc-verification2026-10-29 https://bugbountyreports.com/reports/5794-possible-to-enumerate-addresses-of-users-using-addressid2026-10-29 https://bugbountyreports.com/reports/9810-possible-to-enumerate-valid-files-in-password-protected2026-10-29 https://bugbountyreports.com/reports/7256-possible-to-invite-any-team-member-without-being-logged-in2026-10-29 https://bugbountyreports.com/reports/2919-possible-to-join-any-class-without-coache-s-knowledge2026-10-29 https://bugbountyreports.com/reports/8032-possible-to-make-restricted-files-public-on-phabricator-via2026-10-29 https://bugbountyreports.com/reports/3075-possible-to-redirect-to-a-non-existing-subdomain-after2026-10-29 https://bugbountyreports.com/reports/8632-possible-to-spoof-origin-in-connected-sites2026-10-29 https://bugbountyreports.com/reports/7432-possible-to-steal-any-protected-files-on-android2026-10-29 https://bugbountyreports.com/reports/1263-possible-to-view-driver-waybill-via-driver-uuid2026-10-29 https://bugbountyreports.com/reports/9612-possible-xss-vulnerability-in-action-controller2026-10-29 https://bugbountyreports.com/reports/8677-possible-xss-vulnerability-without-a-content-security-bypass2026-10-29 https://bugbountyreports.com/reports/1658-possilbe-sub-domain-takever-at-prestashop-algolia-com2026-10-29 https://bugbountyreports.com/reports/10320-post-api-bitcoinwithdrawalfees-returns-financial-data2026-10-29 https://bugbountyreports.com/reports/9764-post-based-cross-site-scripting-on-ibm-research-endpoint2026-10-29 https://bugbountyreports.com/reports/8000-post-based-reflected-xss-in-dailydeals-mtn-co-za2026-10-29 https://bugbountyreports.com/reports/5476-post-based-reflected-xss-on-https-apps-topcoder-com-wiki2026-10-29 https://bugbountyreports.com/reports/6493-post-based-rxss-on-https-via-frm-email-parameter2026-10-29 https://bugbountyreports.com/reports/7346-post-based-rxss-on-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/5701-post-based-xss-cross-site-scripting-on-https-apimgr-8x8-com2026-10-29 https://bugbountyreports.com/reports/3639-post-based-xss-on-upload-via-ck-editor-semrush-com2026-10-29 https://bugbountyreports.com/reports/8344-post-following-put-confusion2026-10-29 https://bugbountyreports.com/reports/531-post-in-private-groups-after-getting-removed2026-10-29 https://bugbountyreports.com/reports/10158-post-xss-data-account-id-parameter2026-10-29 https://bugbountyreports.com/reports/10157-post-xss-data-type-parameter2026-10-29 https://bugbountyreports.com/reports/10156-post-xss-fields-account-firstname-parameter2026-10-29 https://bugbountyreports.com/reports/10151-post-xss-fields-account-lastname-parameter2026-10-29 https://bugbountyreports.com/reports/3703-post-xss-in-https-www-khanacademy-org-tr-via-page-search2026-10-29 https://bugbountyreports.com/reports/7133-post-auth-blind-nosql-injection-in-the-users-list-api-leads2026-10-29 https://bugbountyreports.com/reports/7041-post-auth-stored-xss-with-user-interaction-leads-to-remote2026-10-29 https://bugbountyreports.com/reports/4093-post-based-xss-on-apps-shopify-com2026-10-29 https://bugbountyreports.com/reports/2736-posting-to-twitter-csrf-on-php-post-twitter-authenticate-php2026-10-29 https://bugbountyreports.com/reports/9620-posts-sent-via-websockets-aren-t-sanitized-properly2026-10-29 https://bugbountyreports.com/reports/7696-potential-authentication-bypass-through-autologin-feature2026-10-29 https://bugbountyreports.com/reports/5254-potential-buffer-overflow-in-demoplayer-module-of2026-10-29 https://bugbountyreports.com/reports/2815-potential-code-injection-in-fun-delete-directory2026-10-29 https://bugbountyreports.com/reports/4719-potential-command-injection-in-shell-and-shell-test2026-10-29 https://bugbountyreports.com/reports/6537-potential-ddos-when-posting-long-data-into-workflow2026-10-29 https://bugbountyreports.com/reports/8327-potential-denial-of-service-attack-via-the-locale-parameter2026-10-29 https://bugbountyreports.com/reports/598-potential-denial-of-service-in-hackerone-com-reward-settings2026-10-29 https://bugbountyreports.com/reports/211-potential-denial-of-service-in-hackerone-com-teams-new2026-10-29 https://bugbountyreports.com/reports/8681-potential-directory-traversal-in-oc-files-node-folder2026-10-29 https://bugbountyreports.com/reports/8556-potential-dos-vulnerability-in-django-in-multipart-parser2026-10-29 https://bugbountyreports.com/reports/1148-potential-double-free-in-evp-digestinit-ex2026-10-29 https://bugbountyreports.com/reports/837-potential-for-financial-loss-negative-values-for-buy-fee2026-10-29 https://bugbountyreports.com/reports/6430-potential-http-request-smuggling-in-nodejs2026-10-29 https://bugbountyreports.com/reports/6166-potential-http-request-smuggling-in-ruby-webrick2026-10-29 https://bugbountyreports.com/reports/4808-potential-infinite-loop-in-gdimagecreatefromgifctx2026-10-29 https://bugbountyreports.com/reports/5303-potential-linkage-of-public-private-anonymous-node-addresses2026-10-29 https://bugbountyreports.com/reports/2934-potential-memory-corruption-in-or-buffers-c-particularly-on2026-10-29 https://bugbountyreports.com/reports/8960-potential-null-dereference-in-libssh-s-sftp-server2026-10-29 https://bugbountyreports.com/reports/4416-potential-pre-auth-rce-on-twitter-vpn2026-10-29 https://bugbountyreports.com/reports/5363-potential-rce-and-xss-via-file-upload-requiring-user2026-10-29 https://bugbountyreports.com/reports/4642-potential-remote-code-execution-with-phar-archive2026-10-29 https://bugbountyreports.com/reports/2957-potential-server-misconfiguration-leads-to-disclosure-of2026-10-29 https://bugbountyreports.com/reports/9015-potential-spoofing-risk-through-firefox-private-relay2026-10-29 https://bugbountyreports.com/reports/10086-potential-sql-injection-when-annotating-filteredrelation-on2026-10-29 https://bugbountyreports.com/reports/3584-potential-ssrf-and-disclosure-of-sensitive-site-on2026-10-29 https://bugbountyreports.com/reports/5447-potential-stored-cross-site-scripting-vulnerability-in2026-10-29 https://bugbountyreports.com/reports/10250-potential-subdomain-takeover-on-ibm-com-domain2026-10-29 https://bugbountyreports.com/reports/3413-potential-to-abuse-pricing-errors-in-saved-carts2026-10-29 https://bugbountyreports.com/reports/5116-potential-unprivileged-stored-xss-through-wp-targeted-link2026-10-29 https://bugbountyreports.com/reports/4225-potential-use-after-free-due-to-struct-array-entry-t2026-10-29 https://bugbountyreports.com/reports/9670-potential-xss-in-redirect-url-parameter2026-10-29 https://bugbountyreports.com/reports/1007-potential-xss-on-sanitize-rails-html-whitelistsanitizer2026-10-29 https://bugbountyreports.com/reports/9671-potential-xss-vulnerability-in-acronis-login-callback-url2026-10-29 https://bugbountyreports.com/reports/1345-potentially-sensitive-information-on-github2026-10-29 https://bugbountyreports.com/reports/6914-pre-auth-blind-nosql-injection-leading-to-remote-code2026-10-29 https://bugbountyreports.com/reports/7119-pre-auth-rce-in-forgerock-openam-cve-2021-354642026-10-29 https://bugbountyreports.com/reports/7123-pre-auth-rce-in-forgerock-openam-cve-2021-354642026-10-29 https://bugbountyreports.com/reports/9121-pre-auth-rce-in-forgerock-openam-cve-2021-354642026-10-29 https://bugbountyreports.com/reports/6652-pre-auth-remote-code-execution-on-multiple-uber-ssl-vpn2026-10-29 https://bugbountyreports.com/reports/5908-pre-auth-stored-xss-in-comments-via-javascript-url-when2026-10-29 https://bugbountyreports.com/reports/10574-pre-authentication-size-t-integer-underflow-out-of-bounds2026-10-29 https://bugbountyreports.com/reports/10486-pre-authentication-stored-xss-in-essity-customer-service2026-10-29 https://bugbountyreports.com/reports/846-pre-generation-of-2fa-secret-backup-codes-seems-like-an2026-10-29 https://bugbountyreports.com/reports/10109-predictable-proposal-participant-tokens-enable-unauthorized2026-10-29 https://bugbountyreports.com/reports/6366-premium-email-address-check-bypass-hey2026-10-29 https://bugbountyreports.com/reports/3316-prepopulation-of-email-address-and-name-leaks-information2026-10-29 https://bugbountyreports.com/reports/2590-prevent-content-spoofing-on-username-emails-verify-html2026-10-29 https://bugbountyreports.com/reports/2455-prevent-content-spoofing-on-username-emails-verify-html2026-10-29 https://bugbountyreports.com/reports/1071-prevent-content-spoofing-on-search2026-10-29 https://bugbountyreports.com/reports/749-prevent-shop-admin-from-seeing-his-installed-apps-install2026-10-29 https://bugbountyreports.com/reports/3597-preview-bar-incomplete-message-origin-validation-results-in2026-10-29 https://bugbountyreports.com/reports/4175-previous-attachments-can-be-referenced-when-creating-a-new2026-10-29 https://bugbountyreports.com/reports/10201-previous-commentor-on-post-can-still-comment-even-after2026-10-29 https://bugbountyreports.com/reports/2746-previous-password-could-set-as-new-password2026-10-29 https://bugbountyreports.com/reports/4971-previous-token-seems-to-work-even-though-it-does-not-verify2026-10-29 https://bugbountyreports.com/reports/5576-previously-compromised-pulsessl-vpn-hosts2026-10-29 https://bugbountyreports.com/reports/9000-previously-created-sessions-continue-being-valid-after-2fa2026-10-29 https://bugbountyreports.com/reports/4435-previously-created-sessions-continue-being-valid-after-mfa2026-10-29 https://bugbountyreports.com/reports/313-price-manipulation2026-10-29 https://bugbountyreports.com/reports/3893-privacy-policy-contains-hardcoded-link-using-unencrypted2026-10-29 https://bugbountyreports.com/reports/3643-privacy-violation2026-10-29 https://bugbountyreports.com/reports/5416-private-account-causes-displayed-through-api2026-10-29 https://bugbountyreports.com/reports/7141-private-application-files-can-be-uploaded-to-slack-via2026-10-29 https://bugbountyreports.com/reports/9931-private-aws-amis-are-temporarily-being-exposed-publicly2026-10-29 https://bugbountyreports.com/reports/10310-private-circle-can-be-added-to-another-circle-via-api2026-10-29 https://bugbountyreports.com/reports/9597-private-draft-report-exposure-in-a-program-a-user-is-added2026-10-29 https://bugbountyreports.com/reports/2827-private-grab-messages-on-android-app-can-be-accessed-and2026-10-29 https://bugbountyreports.com/reports/4373-private-information-exposed-through-graphql-filters2026-10-29 https://bugbountyreports.com/reports/8447-private-information-exposed-through-graphql-search2026-10-29 https://bugbountyreports.com/reports/7725-private-invitation-links-tokens-leak-to-third-party2026-10-29 https://bugbountyreports.com/reports/6995-private-ip-leaking-through-response2026-10-29 https://bugbountyreports.com/reports/5981-private-leaderboard-owner-email-disclosure-when-sending2026-10-29 https://bugbountyreports.com/reports/5862-private-list-members-disclosure-via-graphql2026-10-29 https://bugbountyreports.com/reports/7899-private-objects-exposed-through-project-import2026-10-29 https://bugbountyreports.com/reports/3008-private-partial-disclosure-of-h1-infrastructure2026-10-29 https://bugbountyreports.com/reports/6905-private-passenger-information-is-exposed-to-the-uber-driver2026-10-29 https://bugbountyreports.com/reports/1019-private-program-activity-timeline-information-disclosure2026-10-29 https://bugbountyreports.com/reports/3053-private-program-all-members-disclosed2026-10-29 https://bugbountyreports.com/reports/701-private-program-and-bounty-details-disclosed-as-part-of2026-10-29 https://bugbountyreports.com/reports/953-private-program-disclosure-in-handle-reports-draft-json2026-10-29 https://bugbountyreports.com/reports/972-private-program-disclosure-in-handle-settings-allow-report2026-10-29 https://bugbountyreports.com/reports/6971-private-program-disclosure-of-through-notifications2026-10-29 https://bugbountyreports.com/reports/7147-private-program-disclosure-through-notifications2026-10-29 https://bugbountyreports.com/reports/4735-private-program-disclosure-via-vpn-suspended-graphql-query2026-10-29 https://bugbountyreports.com/reports/3491-private-program-email-forwarding-response-invitation-not2026-10-29 https://bugbountyreports.com/reports/9099-private-program-name-disclosure-in-the-invitation-mail-for2026-10-29 https://bugbountyreports.com/reports/3628-private-program-policy-page-still-accessible-after-user2026-10-29 https://bugbountyreports.com/reports/117-private-project-access-request-accpeted-via-csrf2026-10-29 https://bugbountyreports.com/reports/118-private-project-access-request-invitation-sent-via-csrf2026-10-29 https://bugbountyreports.com/reports/1137-private-snippets-in-public-internal-projects-leaked-though2026-10-29 https://bugbountyreports.com/reports/5060-private-system-note-disclosure-using-graphql2026-10-29 https://bugbountyreports.com/reports/4776-private-target-account-appears-in-search-results2026-10-29 https://bugbountyreports.com/reports/1188-private-embeddable-videos-leaks-data-through-facebook-open2026-10-29 https://bugbountyreports.com/reports/4315-private-confidential-setting-of-calendar-events-is-ignored2026-10-29 https://bugbountyreports.com/reports/8720-privilege-esacalation-at-apache-airflow-2-5-12026-10-29 https://bugbountyreports.com/reports/281-privilege-escalation2026-10-29 https://bugbountyreports.com/reports/296-privilege-escalation2026-10-29 https://bugbountyreports.com/reports/8076-privilege-escalation-analyst-role-can-view-email-domains-of2026-10-29 https://bugbountyreports.com/reports/1095-privilege-escalation-a-member-with-no-access-to-orders-can2026-10-29 https://bugbountyreports.com/reports/9774-privilege-escalation-a-low-privilege-user-who-does-not-have2026-10-29 https://bugbountyreports.com/reports/9775-privilege-escalation-a-non-owner-user-who-does-not-have2026-10-29 https://bugbountyreports.com/reports/2323-privilege-escalation-normal-user-can-somehow-make-admin-to2026-10-29 https://bugbountyreports.com/reports/10409-privilege-escalation-access-to-the-alert-subscribers-page2026-10-29 https://bugbountyreports.com/reports/3572-privilege-escalation-allows-any-user-to-add-an-administrator2026-10-29 https://bugbountyreports.com/reports/4271-privilege-escalation-allows-to-use-iframe-functionality-w-o2026-10-29 https://bugbountyreports.com/reports/817-privilege-escalation-and-circumvention-of-permission-to2026-10-29 https://bugbountyreports.com/reports/4558-privilege-escalation-due-to-insecure-use-of-logrotate2026-10-29 https://bugbountyreports.com/reports/5969-privilege-escalation-from-any-user-including-external-to2026-10-29 https://bugbountyreports.com/reports/4786-privilege-escalation-from-user-to-system-via2026-10-29 https://bugbountyreports.com/reports/5551-privilege-escalation-in-buddypress-core-allows-moderate-to2026-10-29 https://bugbountyreports.com/reports/9868-privilege-escalation-in-edit-and-create-secret-endpoints2026-10-29 https://bugbountyreports.com/reports/8864-privilege-escalation-in-kops-using-gce-gcp-provider2026-10-29 https://bugbountyreports.com/reports/6282-privilege-escalation-in-point-of-sale-application-from-pos2026-10-29 https://bugbountyreports.com/reports/3045-privilege-escalation-in-the-client-impersonation2026-10-29 https://bugbountyreports.com/reports/4534-privilege-escalation-in-workers-container2026-10-29 https://bugbountyreports.com/reports/7285-privilege-escalation-leading-to-post-in-channel-without2026-10-29 https://bugbountyreports.com/reports/6849-privilege-escalation-leads-to-control-the-owner-access2026-10-29 https://bugbountyreports.com/reports/7474-privilege-escalation-leads-to-trash-other-users-comment2026-10-29 https://bugbountyreports.com/reports/7339-privilege-escalation-of-external-user-with-maintainer2026-10-29 https://bugbountyreports.com/reports/1953-privilege-escalation-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/7856-privilege-escalation-on-tiktok-for-business2026-10-29 https://bugbountyreports.com/reports/1379-privilege-escalation-to-access-all-private-groups-and2026-10-29 https://bugbountyreports.com/reports/2884-privilege-escalation-to-admin-level-account2026-10-29 https://bugbountyreports.com/reports/8265-privilege-escalation-to-all-staff-group2026-10-29 https://bugbountyreports.com/reports/8730-privilege-escalation-to-root-in-pages-build-image-v22026-10-29 https://bugbountyreports.com/reports/9594-privilege-escalation-to-root-ssh-access-via-pre-receive2026-10-29 https://bugbountyreports.com/reports/3073-privilege-escalation-using-api-feature2026-10-29 https://bugbountyreports.com/reports/6908-privilege-escalation-via-rest-api-to-administrator-leads-to2026-10-29 https://bugbountyreports.com/reports/10570-privilege-escalation-via-user-controlled-usernames-roles2026-10-29 https://bugbountyreports.com/reports/775-privilege-escalation-vulnerability2026-10-29 https://bugbountyreports.com/reports/7302-privilege-escalation-vulnerability-in-steam-s-remote-play2026-10-29 https://bugbountyreports.com/reports/3099-privilege-escalation-with-session-hijacking-having-a-non2026-10-29 https://bugbountyreports.com/reports/4376-privilege-escalation-okl-lt2026-10-29 https://bugbountyreports.com/reports/2480-privilege-escalation-user-who-does-not-have-access-is-able2026-10-29 https://bugbountyreports.com/reports/3071-privilege-escalation-from-operator-to-ubnt-and-root-with2026-10-29 https://bugbountyreports.com/reports/4095-privilege-escalation-read-only-to-admin2026-10-29 https://bugbountyreports.com/reports/2960-privilege-escalation2026-10-29 https://bugbountyreports.com/reports/591-privilege-escalation-or-not2026-10-29 https://bugbountyreports.com/reports/9884-privilege-persistence-via-cloned-agent2026-10-29 https://bugbountyreports.com/reports/4115-privilege-0-to-root-privilege-escalation-on-edgeswitch2026-10-29 https://bugbountyreports.com/reports/10318-privilege-relevant-fields-are-clientmodify-in-sap-cdc2026-10-29 https://bugbountyreports.com/reports/6387-probably-unexploitable-xss-via-header-injection2026-10-29 https://bugbountyreports.com/reports/826-problem-with-oauth2026-10-29 https://bugbountyreports.com/reports/1192-problog-2-6-6-csrf-exploit2026-10-29 https://bugbountyreports.com/reports/8834-process-based-permissions-can-be-bypassed-with-the2026-10-29 https://bugbountyreports.com/reports/8946-process-binding-can-bypass-the-permission-model-through2026-10-29 https://bugbountyreports.com/reports/9329-production-key-and-data-found-on-subdomain-no-longer2026-10-29 https://bugbountyreports.com/reports/2345-profile-bio-at-rockstar-is-accepting-control-characters2026-10-29 https://bugbountyreports.com/reports/849-profile-cover-can-also-load-external-url-s2026-10-29 https://bugbountyreports.com/reports/2796-profile-fields-validation-bypass2026-10-29 https://bugbountyreports.com/reports/2836-profile-fields-validation-mismatch2026-10-29 https://bugbountyreports.com/reports/8322-profile-of-disabled-user-stays-accessible2026-10-29 https://bugbountyreports.com/reports/420-profile-photo-update-bypass2026-10-29 https://bugbountyreports.com/reports/1031-profile-pic-padding-length-hiding-fails-due-to-use-of-gzip2026-10-29 https://bugbountyreports.com/reports/2664-profile-shows-incorrect-account-creation-date2026-10-29 https://bugbountyreports.com/reports/5343-profile-picture-name-parameter-with-large-value-lead-to-dos2026-10-29 https://bugbountyreports.com/reports/9256-program-admins-could-add-verified-domains-to-an-organization2026-10-29 https://bugbountyreports.com/reports/4415-program-email-nofication-settings-ignored-when-being-added2026-10-29 https://bugbountyreports.com/reports/8718-program-managers-can-see-draft-reports-using-export-reports2026-10-29 https://bugbountyreports.com/reports/9401-program-member-could-duplicate-report-to-a-non-related2026-10-29 https://bugbountyreports.com/reports/3430-program-metrics-disclosed-response-efficiency-percentage2026-10-29 https://bugbountyreports.com/reports/3048-program-profile-metrics-endpoint-contains-mean-time-to2026-10-29 https://bugbountyreports.com/reports/3281-program-profile-metrics-json-contains-time-to-triage-for2026-10-29 https://bugbountyreports.com/reports/5355-program-analytics-benchmarks-query-shows-information-not2026-10-29 https://bugbountyreports.com/reports/5059-project-milestones-disclosed-via-groups-when-the-victim2026-10-29 https://bugbountyreports.com/reports/4972-project-template-functionality-can-be-used-to-copy-private2026-10-29 https://bugbountyreports.com/reports/178-projects-watch-or-notifications-settings-change-via-csrf2026-10-29 https://bugbountyreports.com/reports/8487-promotion-code-can-be-used-more-than-redemption-limit2026-10-29 https://bugbountyreports.com/reports/3871-proper-verification-is-not-done-before-sending-invitations2026-10-29 https://bugbountyreports.com/reports/6051-property-expr-prototype-pollution2026-10-29 https://bugbountyreports.com/reports/2896-protect-against-tabnabbing-in-statement2026-10-29 https://bugbountyreports.com/reports/5106-protected-tweet-settings-overwritten-by-other-settings2026-10-29 https://bugbountyreports.com/reports/4184-protected-tweets-exposure-through-the-url2026-10-29 https://bugbountyreports.com/reports/4241-protected-tweets-setting-overridden-by-android-app2026-10-29 https://bugbountyreports.com/reports/4006-protocol-ports-are-not-shown-in-third-party-site-redirect2026-10-29 https://bugbountyreports.com/reports/7254-protocol-smuggling-over-ldap-password-field2026-10-29 https://bugbountyreports.com/reports/3221-prototype-pollution-attack-assign-deep2026-10-29 https://bugbountyreports.com/reports/3351-prototype-pollution-attack-deap2026-10-29 https://bugbountyreports.com/reports/3352-prototype-pollution-attack-deep-extend2026-10-29 https://bugbountyreports.com/reports/3750-prototype-pollution-attack-defaults-deep-constructor2026-10-29 https://bugbountyreports.com/reports/3223-prototype-pollution-attack-defaults-deep2026-10-29 https://bugbountyreports.com/reports/3644-prototype-pollution-attack-extend2026-10-29 https://bugbountyreports.com/reports/3215-prototype-pollution-attack-hoek2026-10-29 https://bugbountyreports.com/reports/3842-prototype-pollution-attack-lodash-constructor-prototype2026-10-29 https://bugbountyreports.com/reports/3214-prototype-pollution-attack-lodash2026-10-29 https://bugbountyreports.com/reports/5434-prototype-pollution-attack-lodash2026-10-29 https://bugbountyreports.com/reports/5959-prototype-pollution-attack-lodash2026-10-29 https://bugbountyreports.com/reports/3960-prototype-pollution-attack-lutils-merge2026-10-29 https://bugbountyreports.com/reports/3222-prototype-pollution-attack-merge-deep2026-10-29 https://bugbountyreports.com/reports/3355-prototype-pollution-attack-merge-objects2026-10-29 https://bugbountyreports.com/reports/3354-prototype-pollution-attack-merge-options2026-10-29 https://bugbountyreports.com/reports/3353-prototype-pollution-attack-merge-recursive2026-10-29 https://bugbountyreports.com/reports/3751-prototype-pollution-attack-merge-recursive2026-10-29 https://bugbountyreports.com/reports/3901-prototype-pollution-attack-mergify2026-10-29 https://bugbountyreports.com/reports/3220-prototype-pollution-attack-mixin-deep2026-10-29 https://bugbountyreports.com/reports/4129-prototype-pollution-attack-smart-extend2026-10-29 https://bugbountyreports.com/reports/4038-prototype-pollution-attack-upmerge2026-10-29 https://bugbountyreports.com/reports/3920-prototype-pollution-attack-in-just-extend2026-10-29 https://bugbountyreports.com/reports/3928-prototype-pollution-attack-in-node-extend2026-10-29 https://bugbountyreports.com/reports/4121-prototype-pollution-attack-through-jquery-extend2026-10-29 https://bugbountyreports.com/reports/5148-prototype-pollution-in-dot-prop2026-10-29 https://bugbountyreports.com/reports/5257-prototype-pollution-in-multipart-parsing2026-10-29 https://bugbountyreports.com/reports/7184-prototype-pollution-leads-to-xss-on-https-blog-swiftype-com2026-10-29 https://bugbountyreports.com/reports/5937-prototype-pollution-lodash-4-17-152026-10-29 https://bugbountyreports.com/reports/7546-prototype-pollution-via-console-table-properties2026-10-29 https://bugbountyreports.com/reports/3858-prototype-pollution-vulnerability-in-cached-path-relative2026-10-29 https://bugbountyreports.com/reports/3923-prototype-pollution-vulnerability-in-mpath-package2026-10-29 https://bugbountyreports.com/reports/7037-prototype-pollution-vulnerability-in-noble-package2026-10-29 https://bugbountyreports.com/reports/10388-proxy-credentials-leaked-in-err-proxy-tunnel-error-message2026-10-29 https://bugbountyreports.com/reports/48-proxy-discloses-internal-web-servers2026-10-29 https://bugbountyreports.com/reports/195-proxy-service-crash-dos2026-10-29 https://bugbountyreports.com/reports/9258-proxy-authorization-header-is-not-cleared-in-cross-domain2026-10-29 https://bugbountyreports.com/reports/9260-proxy-authorization-header-is-not-cleared-in-cross-domain2026-10-29 https://bugbountyreports.com/reports/9331-proxy-authorization-header-not-cleared-on-cross-origin2026-10-29 https://bugbountyreports.com/reports/9375-proxy-authorization-header-not-cleared-on-cross-origin2026-10-29 https://bugbountyreports.com/reports/10292-ps4-bd-j-privilege-escalation-using-nested-jar2026-10-29 https://bugbountyreports.com/reports/2601-public-access-to-objects-in-aws-s3-bucket2026-10-29 https://bugbountyreports.com/reports/6069-public-and-secret-api-key-leaked-in-javascript-source2026-10-29 https://bugbountyreports.com/reports/6525-public-and-secret-api-key-leaked-in-javascript-source2026-10-29 https://bugbountyreports.com/reports/8004-public-apache-tomcat-examples-example-directory2026-10-29 https://bugbountyreports.com/reports/2676-public-calendar-link-can-be-invisible2026-10-29 https://bugbountyreports.com/reports/10540-public-collectives-allow-to-create-pages2026-10-29 https://bugbountyreports.com/reports/4410-public-github-repo-leaking-internal-credentials-leading-to2026-10-29 https://bugbountyreports.com/reports/9934-public-github-repositories-for-multiple-hackerone-managed2026-10-29 https://bugbountyreports.com/reports/9771-public-google-drive-link-exposes-military-orders-containing2026-10-29 https://bugbountyreports.com/reports/5166-public-instance-of-jenkins-on-https-with-script-enabled2026-10-29 https://bugbountyreports.com/reports/3686-public-jenkins-instance-with-script-enabled2026-10-29 https://bugbountyreports.com/reports/7665-public-jenkins-instance-with-script-enabled2026-10-29 https://bugbountyreports.com/reports/7847-public-postman-api-collection-leaks-internal-access-to2026-10-29 https://bugbountyreports.com/reports/1704-public-profile-is-vulnerable-to-stored-xss-facebook-token2026-10-29 https://bugbountyreports.com/reports/2085-public-report-reproducible-writable-rubyci-amazon-s3-bucket2026-10-29 https://bugbountyreports.com/reports/10660-public-shares-remain-accessible-via-alternate-endpoints2026-10-29 https://bugbountyreports.com/reports/7166-public-webdav-endpoint-not-bruteforce-protected2026-10-29 https://bugbountyreports.com/reports/5703-publicly-accessible-svn-repository-aastraconf-packet8-net2026-10-29 https://bugbountyreports.com/reports/10224-publicly-accessible-endpoint-exposing-internal-user2026-10-29 https://bugbountyreports.com/reports/10183-publicly-accessible-cdn-endpoint-exposing-xml-metadata2026-10-29 https://bugbountyreports.com/reports/7127-publicly-accessible-continuous-integration-tool2026-10-29 https://bugbountyreports.com/reports/3523-publicly-accessible-datadog-link2026-10-29 https://bugbountyreports.com/reports/5498-publicly-accessible-grafana-install-allows-pivoting-to2026-10-29 https://bugbountyreports.com/reports/4608-publicly-accessible-order-confirmations-leaking-user-emails2026-10-29 https://bugbountyreports.com/reports/9800-publicly-editable-u-s-air-force-google-spreadsheet-exposing2026-10-29 https://bugbountyreports.com/reports/7235-publicly-exposed-hashicorp-vault-secrets-management-at-usec2026-10-29 https://bugbountyreports.com/reports/2089-publicy-accessible-idrac-instance-at-api-m-inapp-pushwoosh2026-10-29 https://bugbountyreports.com/reports/9653-pull-any-automated-record-brief2026-10-29 https://bugbountyreports.com/reports/5228-pull-request-12949-security-implications-without-cve2026-10-29 https://bugbountyreports.com/reports/5021-pulse-secure-file-disclosure-clear-text-and-potential-rce2026-10-29 https://bugbountyreports.com/reports/5845-pulsessl-vpn-site-with-compromised-creds2026-10-29 https://bugbountyreports.com/reports/1060-putting-link-inside-link-in-markdown2026-10-29 https://bugbountyreports.com/reports/4943-putty-pscp-client-side-post-auth-stack-buffer-overwrite2026-10-29 https://bugbountyreports.com/reports/4769-puttygen-160mb-memory-leak-while-trying-to-extract-openssh2026-10-29 https://bugbountyreports.com/reports/4768-puttygen-heap-buffer-overflow-in-mp-get-decimal2026-10-29 https://bugbountyreports.com/reports/4801-py-decref-on-a-non-owned-object-in-the-sre-module2026-10-29 https://bugbountyreports.com/reports/805-pyfloat-fromstring-pynumber-long-buffer-over-reads2026-10-29 https://bugbountyreports.com/reports/4673-python-2-7-32-bit-json-encoding-heap-corruption2026-10-29 https://bugbountyreports.com/reports/1133-python-2-7-strop-replace-integer-overflow2026-10-29 https://bugbountyreports.com/reports/728-python-3-3-3-5-product-setstate-out-of-bounds-read2026-10-29 https://bugbountyreports.com/reports/713-python-deque-index-uninitialized-memory2026-10-29 https://bugbountyreports.com/reports/712-python-scan-eol-buffer-over-read2026-10-29 https://bugbountyreports.com/reports/210-python-vulnerability-reading-arbitrary-process-memory2026-10-29 https://bugbountyreports.com/reports/716-python-xmlparse-setattro-type-confusion2026-10-29 https://bugbountyreports.com/reports/581-python-imageop-unsafe-arithmetic2026-10-29 https://bugbountyreports.com/reports/389-pyunicode-fromformatv-crasher2026-10-29 https://bugbountyreports.com/reports/3088-query-parameter-reordering-causes-redirect-page-to-render2026-10-29 https://bugbountyreports.com/reports/1416-querying-private-posts-and-changing-post-meta2026-10-29 https://bugbountyreports.com/reports/10312-quicksight-authorization-bypass-chat-agents-accessible2026-10-29 https://bugbountyreports.com/reports/1951-quicktime-promotion-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/10583-r2dbc-mariadb-parsec-auth-server-controlled-pbkdf22026-10-29 https://bugbountyreports.com/reports/3509-race-condition-exploiting-the-loyalty-claim-https-xxx2026-10-29 https://bugbountyreports.com/reports/900-race-condition-allowing-user-to-review-app-multiple-times2026-10-29 https://bugbountyreports.com/reports/6660-race-condition-allows-to-get-more-free-trials-and-get-more2026-10-29 https://bugbountyreports.com/reports/5146-race-condition-allows-to-redeem-multiple-times-gift-cards2026-10-29 https://bugbountyreports.com/reports/7303-race-condition-allows-to-send-multiple-times-feedback-for2026-10-29 https://bugbountyreports.com/reports/3773-race-condition-at-create-new-location2026-10-29 https://bugbountyreports.com/reports/9303-race-condition-enables-bypassing-verification-check2026-10-29 https://bugbountyreports.com/reports/3043-race-condition-in-account-survey2026-10-29 https://bugbountyreports.com/reports/1660-race-condition-in-adding-team-members2026-10-29 https://bugbountyreports.com/reports/4245-race-condition-in-claiming-program-credentials2026-10-29 https://bugbountyreports.com/reports/2982-race-condition-in-definition-votes2026-10-29 https://bugbountyreports.com/reports/8024-race-condition-in-faucet-when-using-starport2026-10-29 https://bugbountyreports.com/reports/4371-race-condition-in-flag-submission2026-10-29 https://bugbountyreports.com/reports/4918-race-condition-in-flash-workers-may-cause-an-exploitabl-e2026-10-29 https://bugbountyreports.com/reports/9879-race-condition-in-folder-creation-allows-bypassing-folder2026-10-29 https://bugbountyreports.com/reports/2901-race-condition-in-gitlab-import-giving-access-to-other2026-10-29 https://bugbountyreports.com/reports/8430-race-condition-in-joining-ctf-group2026-10-29 https://bugbountyreports.com/reports/3978-race-condition-in-performing-retest-allows-duplicated2026-10-29 https://bugbountyreports.com/reports/1524-race-condition-in-redeeming-coupons2026-10-29 https://bugbountyreports.com/reports/9044-race-condition-in-up-voting-and-down-voting2026-10-29 https://bugbountyreports.com/reports/7600-race-condition-in-user-comments-likes2026-10-29 https://bugbountyreports.com/reports/480-race-condition-in-workers-may-cause-an-exploitable-double2026-10-29 https://bugbountyreports.com/reports/9645-race-condition-leads-to-add-more-than-5-email-at-data2026-10-29 https://bugbountyreports.com/reports/2342-race-condition-leads-to-duplicate-payouts2026-10-29 https://bugbountyreports.com/reports/7384-race-condition-leads-to-inflation-of-coins-when-bought-via2026-10-29 https://bugbountyreports.com/reports/5331-race-condition-leads-to-undeletable-group-member2026-10-29 https://bugbountyreports.com/reports/6321-race-condition-of-transfer-data-credits-to-organization2026-10-29 https://bugbountyreports.com/reports/6349-race-condition-on-get-free-badoo-premium-which-allows-to2026-10-29 https://bugbountyreports.com/reports/7693-race-condition-on-action-invite-members-to-a-team2026-10-29 https://bugbountyreports.com/reports/9894-race-condition-on-add-1-free-domain2026-10-29 https://bugbountyreports.com/reports/9639-race-condition-on-create-api-function2026-10-29 https://bugbountyreports.com/reports/8035-race-condition-on-https-judge-me-people2026-10-29 https://bugbountyreports.com/reports/6228-race-condition-on-my-stripo-email-at-cabinet-stripeapi-v12026-10-29 https://bugbountyreports.com/reports/2804-race-condition-on-the-federalist-api-endpoints-can-lead-to2026-10-29 https://bugbountyreports.com/reports/7923-race-condition-via-project-team-member-invitation-system2026-10-29 https://bugbountyreports.com/reports/5632-race-condition-vulnerability-on-this-rocks-button2026-10-29 https://bugbountyreports.com/reports/6009-race-condition-when-following-a-user2026-10-29 https://bugbountyreports.com/reports/6105-race-condition-while-removing-the-love-react-in-community2026-10-29 https://bugbountyreports.com/reports/1117-race-conditions-exist-when-accepting-invitations2026-10-29 https://bugbountyreports.com/reports/2855-race-conditions-in-oauth-2-api-implementations2026-10-29 https://bugbountyreports.com/reports/1401-race-conditions-in-popular-reports-feature2026-10-29 https://bugbountyreports.com/reports/8018-rack-cve-2022-30122-denial-of-service-vulnerability-in-rack2026-10-29 https://bugbountyreports.com/reports/5648-rack-parses-encoded-cookie-names-allowing-an-attacker-to2026-10-29 https://bugbountyreports.com/reports/8462-rails-actionview-sanitize-helper-bypass-leading-to-xss2026-10-29 https://bugbountyreports.com/reports/10003-rails-debug-mode-enabled-on-https-44-208-145-207-testrail2026-10-29 https://bugbountyreports.com/reports/607-rails-ujs-will-send-csrf-tokens-to-other-origins2026-10-29 https://bugbountyreports.com/reports/7915-rails-html-safelistsanitizer-vulnerable-to-xss-attack-in-an2026-10-29 https://bugbountyreports.com/reports/7939-rails-html-safelistsanitizer-vulnerable-to-xss-attack-in-an2026-10-29 https://bugbountyreports.com/reports/8364-rails-html-safelistsanitizer-vulnerable-to-xss-when-certain2026-10-29 https://bugbountyreports.com/reports/10278-rails-html-sanitizer-allowed-uri-returns-true-for-entity2026-10-29 https://bugbountyreports.com/reports/1766-range-constructor-type-confusion-dos2026-10-29 https://bugbountyreports.com/reports/1769-range-initialize-copy-null-pointer-dereference2026-10-29 https://bugbountyreports.com/reports/6993-ransomware-protection-is-missing-extentions2026-10-29 https://bugbountyreports.com/reports/7086-ransomware-protection-is-missing-extentions-take-22026-10-29 https://bugbountyreports.com/reports/2296-rate-limit-bypass-on-login-page2026-10-29 https://bugbountyreports.com/reports/9712-rate-limit-bypass-on-passport-acronis-work-using-x2026-10-29 https://bugbountyreports.com/reports/6435-rate-limit-function-bypass-can-leads-to-occur-huge-critical2026-10-29 https://bugbountyreports.com/reports/2542-rate-limit-issue-on-hosted-weblate-org2026-10-29 https://bugbountyreports.com/reports/6247-rate-limit-misconfiguration-on-tumblr-login2026-10-29 https://bugbountyreports.com/reports/5924-rate-limit-too-lenient-for-endpoint-sending-emails2026-10-29 https://bugbountyreports.com/reports/1551-rate-limiting-on-email-confirmation-link2026-10-29 https://bugbountyreports.com/reports/1548-rate-limiting-on-password-reset-links2026-10-29 https://bugbountyreports.com/reports/6566-rate-limiting-on-report-video2026-10-29 https://bugbountyreports.com/reports/6117-rate-limits-too-low-for-email-2fa2026-10-29 https://bugbountyreports.com/reports/1712-rate-limit-bypass2026-10-29 https://bugbountyreports.com/reports/7051-ratelimiting-can-be-bypassed-using-ipv6-subnets2026-10-29 https://bugbountyreports.com/reports/7163-ratelimits-do-not-apply-to-ocs-dataresponse2026-10-29 https://bugbountyreports.com/reports/10285-rbac-bypass-on-app-log-endpoints-via-permissionrequired2026-10-29 https://bugbountyreports.com/reports/9150-rc-between-github-s-repo-transfer-rest-api-and2026-10-29 https://bugbountyreports.com/reports/9600-rc-between-github-s-repo-update-rest-api-and2026-10-29 https://bugbountyreports.com/reports/1684-rc4-cipher-suites-detected-on-status-slack-com2026-10-29 https://bugbountyreports.com/reports/5844-rce-remote-code-execution-in-one-of-dod-s-websites2026-10-29 https://bugbountyreports.com/reports/10349-rce-pat-exfiltration-via-pull-request-target-in-privacy2026-10-29 https://bugbountyreports.com/reports/10348-rce-supply-chain-attack-via-pull-request-target-in-content2026-10-29 https://bugbountyreports.com/reports/4159-rce-and-complete-server-takeover-of-http-www-starbucks-com2026-10-29 https://bugbountyreports.com/reports/9009-rce-and-dos-in-cosmovisor2026-10-29 https://bugbountyreports.com/reports/7269-rce-apache-struts2-remote-command-execution-s2-045-on-wifi2026-10-29 https://bugbountyreports.com/reports/5598-rce-as-admin-defeats-wordpress-hardening-and-file2026-10-29 https://bugbountyreports.com/reports/2190-rce-by-command-line-argument-injection-to-gm-convert-in2026-10-29 https://bugbountyreports.com/reports/3372-rce-by-import-channel-field2026-10-29 https://bugbountyreports.com/reports/9424-rce-by-parsing-rdoc-options-in-rdoc2026-10-29 https://bugbountyreports.com/reports/6733-rce-due-to-imagetragick-v22026-10-29 https://bugbountyreports.com/reports/608-rce-due-to-web-console-ip-whitelist-bypass-in-rails-4-0-and2026-10-29 https://bugbountyreports.com/reports/6932-rce-hazard-in-reporting-via-chromium2026-10-29 https://bugbountyreports.com/reports/6836-rce-in-copy-as-node-request-bapp-via-code-injection2026-10-29 https://bugbountyreports.com/reports/9122-rce-in-cve-2021-260842026-10-29 https://bugbountyreports.com/reports/6804-rce-in-subdomain-via-cve-2017-10004862026-10-29 https://bugbountyreports.com/reports/5742-rce-in-airos-6-2-0-devices-with-csrf-bypass2026-10-29 https://bugbountyreports.com/reports/10588-rce-in-aws-amplify-cli-via-prototype-chain-traversal-in2026-10-29 https://bugbountyreports.com/reports/807-rce-in-ci-owncloud-com-ci-owncloud-org2026-10-29 https://bugbountyreports.com/reports/1227-rce-in-profile-picture-upload2026-10-29 https://bugbountyreports.com/reports/9010-rce-of-burp-scanner-crawler-via-clickjacking2026-10-29 https://bugbountyreports.com/reports/4325-rce-on-via-cve-2017-102712026-10-29 https://bugbountyreports.com/reports/9120-rce-on-cve-2021-260842026-10-29 https://bugbountyreports.com/reports/7364-rce-on-17-different-docker-containers-on-your-network2026-10-29 https://bugbountyreports.com/reports/1828-rce-on-a-department-of-defense-website2026-10-29 https://bugbountyreports.com/reports/6580-rce-on-build-server-via-misconfigured-pip-install2026-10-29 https://bugbountyreports.com/reports/6940-rce-on-cs-go-client-using-unsanitized-entity-id-in2026-10-29 https://bugbountyreports.com/reports/4933-rce-on-default-ubuntu-desktop-12-10-quantal2026-10-29 https://bugbountyreports.com/reports/1586-rce-on-facebooksearch-algolia-com2026-10-29 https://bugbountyreports.com/reports/4629-rce-on-https-using-cve-2017-92482026-10-29 https://bugbountyreports.com/reports/9042-rce-on-ingress-nginx-controller-via-ingress-spec-rules-http2026-10-29 https://bugbountyreports.com/reports/9497-rce-on-partner-steampowered-com2026-10-29 https://bugbountyreports.com/reports/4096-rce-on-steam-client-via-buffer-overflow-in-server-info2026-10-29 https://bugbountyreports.com/reports/6824-rce-on-tiktok-ads-portal2026-10-29 https://bugbountyreports.com/reports/9129-rce-on-wordpress-website2026-10-29 https://bugbountyreports.com/reports/9719-rce-on-worker-host-due-to-unsanitized-env-variable-name-in2026-10-29 https://bugbountyreports.com/reports/7789-rce-via-exposed-jmx-server-on-jabber-37signals-com-jabber2026-10-29 https://bugbountyreports.com/reports/9118-rce-via-file-upload-with-a-null-byte-truncated-file2026-10-29 https://bugbountyreports.com/reports/8298-rce-via-github-import2026-10-29 https://bugbountyreports.com/reports/3816-rce-via-local-file-read-php-unserialization-xxe-unpickling2026-10-29 https://bugbountyreports.com/reports/6579-rce-via-npm-misconfig-installing-internal-libraries-from2026-10-29 https://bugbountyreports.com/reports/6653-rce-via-npm-misconfig-installing-internal-libraries-from2026-10-29 https://bugbountyreports.com/reports/3596-rce-via-print-function-simplenote-1-1-3-desktop-app2026-10-29 https://bugbountyreports.com/reports/2866-rce-via-ssh-uris-in-multiple-vcs2026-10-29 https://bugbountyreports.com/reports/8126-rce-via-the-decompressedarchivesizevalidator-and-project2026-10-29 https://bugbountyreports.com/reports/6828-rce-via-unsafe-inline-kramdown-options-when-rendering2026-10-29 https://bugbountyreports.com/reports/7749-rce-via-wikicloth-markdown-rendering-if-the-rubyluabridge2026-10-29 https://bugbountyreports.com/reports/8551-rce-vulnerability-in-apache-airflow-providers-apache-sqoop2026-10-29 https://bugbountyreports.com/reports/8047-rce-vulnerability-in-hyperledger-fabric-sdk-for-java2026-10-29 https://bugbountyreports.com/reports/6902-rce-when-removing-metadata-with-exiftool2026-10-29 https://bugbountyreports.com/reports/4090-rce-which-may-occur-due-to-activesupport-messageverifier-or2026-10-29 https://bugbountyreports.com/reports/3825-rce-dnding-shortcut-files-to-chrome-brave-allows-loading2026-10-29 https://bugbountyreports.com/reports/2734-rce-lfi-on-test-jenkins-instance-due-to-improper2026-10-29 https://bugbountyreports.com/reports/6647-rdr2-game-service-method-allows-adding-any-player-to-a-new2026-10-29 https://bugbountyreports.com/reports/9454-re-emergence-of-security-vulnerability-in-nextcloud-version2026-10-29 https://bugbountyreports.com/reports/10488-re-entrant-nghttp2-session-mem-send-during-nghttp2-session2026-10-29 https://bugbountyreports.com/reports/6064-re-sharing-allows-increase-of-privileges2026-10-29 https://bugbountyreports.com/reports/10492-reachable-assertion-in-node-zlib-sync-api-crashes-the2026-10-29 https://bugbountyreports.com/reports/2086-read-svg-files-by-changing-svg-into-png-extension2026-10-29 https://bugbountyreports.com/reports/3432-read-access-to-all-comments-on-unauthorized-forums2026-10-29 https://bugbountyreports.com/reports/3940-read-access-to-hidden-orders-products-customers-etc-by2026-10-29 https://bugbountyreports.com/reports/1786-read-after-free-in-mrb-vm-exec-with-op-arycat-reading-r-b2026-10-29 https://bugbountyreports.com/reports/7762-read-and-write-beyond-bounds-in-mod-sed2026-10-29 https://bugbountyreports.com/reports/1692-read-application-name-subscribers-count2026-10-29 https://bugbountyreports.com/reports/7975-read-beyond-bounds-in-ap-strcmp-match-zhbug-httpd-47-72026-10-29 https://bugbountyreports.com/reports/7977-read-beyond-bounds-in-mod-isapi-c-zhbug-httpd-412026-10-29 https://bugbountyreports.com/reports/7978-read-beyond-bounds-via-ap-rwrite-zhbug-httpd-47-22026-10-29 https://bugbountyreports.com/reports/1651-read-files-on-application-server-leads-to-rce2026-10-29 https://bugbountyreports.com/reports/7880-read-other-users-reports-through-cloning2026-10-29 https://bugbountyreports.com/reports/2362-read-outside-of-buffer-heap-buffer-overflow-in-s-regmatch2026-10-29 https://bugbountyreports.com/reports/8053-read-only-administrator-can-change-agent-update-settings2026-10-29 https://bugbountyreports.com/reports/6423-read-only-application-can-publish-delete-fleets2026-10-29 https://bugbountyreports.com/reports/6789-read-only-path-traversal-cve-2020-3452-at-https2026-10-29 https://bugbountyreports.com/reports/6785-read-only-path-traversal-cve-2020-3452-at-https-mil2026-10-29 https://bugbountyreports.com/reports/6790-read-only-path-traversal-cve-2020-3452-at-https2026-10-29 https://bugbountyreports.com/reports/1355-read-only-share-recipient-can-restore-old-versions-of-file2026-10-29 https://bugbountyreports.com/reports/5437-read-only-team-members-can-read-all-properties-of-webhooks2026-10-29 https://bugbountyreports.com/reports/5738-read-only-user-can-delete-higher-privileged-members-using2026-10-29 https://bugbountyreports.com/reports/5783-read-only-user-can-delete-users2026-10-29 https://bugbountyreports.com/reports/1404-read-only-user-can-execute-arbitraty-shell-commands-on-airos2026-10-29 https://bugbountyreports.com/reports/1405-read-only-user-can-execute-arbitraty-shell-commands-on-airos2026-10-29 https://bugbountyreports.com/reports/1406-read-only-user-can-execute-arbitraty-shell-commands-on-airos2026-10-29 https://bugbountyreports.com/reports/9381-read-only-users-can-restore-old-versions2026-10-29 https://bugbountyreports.com/reports/8339-read-write-arbitrary-non-httponly-cookies-on-checkout-pages2026-10-29 https://bugbountyreports.com/reports/1538-reading-emails-in-uber-subdomains2026-10-29 https://bugbountyreports.com/reports/2653-reading-redacted-data-via-hackbot-s-answers2026-10-29 https://bugbountyreports.com/reports/6920-readonly-to-root-privilege-escalation-on-edgeswitch2026-10-29 https://bugbountyreports.com/reports/4-real-impersonation2026-10-29 https://bugbountyreports.com/reports/4167-real-time-error-logs-through-debug-information2026-10-29 https://bugbountyreports.com/reports/6394-reauthentication-for-changing-password-bypass2026-10-29 https://bugbountyreports.com/reports/5960-recently-added-country-field-doesn-t-send-email2026-10-29 https://bugbountyreports.com/reports/1981-recursion-causing-uninitialized-memory-reads-leading-to-a2026-10-29 https://bugbountyreports.com/reports/8200-reddit-talk-promotion-offers-don-t-expire-allowing-users-to2026-10-29 https://bugbountyreports.com/reports/355-redirect-filter-bypass-in-report-comment2026-10-29 https://bugbountyreports.com/reports/2523-redirect-in-adding-advance-cash-on-delivery-app2026-10-29 https://bugbountyreports.com/reports/3864-redirect-on-authorization-allows-account-compromise2026-10-29 https://bugbountyreports.com/reports/1388-redirect-url-after-login-is-not-validated2026-10-29 https://bugbountyreports.com/reports/428-redirect-url-in-intent-functionality-is-not-properly-escaped2026-10-29 https://bugbountyreports.com/reports/325-redirect-while-opening-links-in-new-tabs2026-10-29 https://bugbountyreports.com/reports/6880-redirect-to-string-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/7953-redirecting-users-to-malicious-torrent-files-websites-using2026-10-29 https://bugbountyreports.com/reports/8055-redirection-in-repeater-intruder-tab2026-10-29 https://bugbountyreports.com/reports/1199-redirection-page-throwing-error-instead-of-redirecting-to2026-10-29 https://bugbountyreports.com/reports/5082-redirection-through-referer-tag2026-10-29 https://bugbountyreports.com/reports/8365-redos-rails-html-permitscrubber-scrub-attribute2026-10-29 https://bugbountyreports.com/reports/8405-redos-rails-html-permitscrubber-scrub-attribute2026-10-29 https://bugbountyreports.com/reports/6158-redos-at-wiki-cs-money-graphql-endpoint-and-probably-a-kind2026-10-29 https://bugbountyreports.com/reports/9630-redos-due-to-device-detector-parsing-user-agents2026-10-29 https://bugbountyreports.com/reports/9974-redos-in-ipaddr2026-10-29 https://bugbountyreports.com/reports/8127-redos-in-net-http-affects-webhooks-sidekiq-job-stuck-at-1002026-10-29 https://bugbountyreports.com/reports/9973-redos-in-psych2026-10-29 https://bugbountyreports.com/reports/8849-redos-in-rack-multipart2026-10-29 https://bugbountyreports.com/reports/7434-redos-in-syntax-highlighting-due-to-rouge2026-10-29 https://bugbountyreports.com/reports/8711-redos-in-time-rfc28222026-10-29 https://bugbountyreports.com/reports/9661-redos-vulnerability-in-http-accept-headers-parsing2026-10-29 https://bugbountyreports.com/reports/8661-redos-ruby-time2026-10-29 https://bugbountyreports.com/reports/6161-reduced-purmations-on-encryption2026-10-29 https://bugbountyreports.com/reports/8646-reentrancy-attack-in-eth-monero-atomic-swap2026-10-29 https://bugbountyreports.com/reports/1475-refelected-xss-on-https-gmid-gm-com-gmid-jsp2026-10-29 https://bugbountyreports.com/reports/8441-reference-caching-can-leak-data-to-unauthorized-users2026-10-29 https://bugbountyreports.com/reports/8674-reference-fetch-can-saturate-the-server-bandwidth-for-102026-10-29 https://bugbountyreports.com/reports/4745-referer-issue-in-kartpay-com2026-10-29 https://bugbountyreports.com/reports/5711-referer-leakage-vulnerability-in-socialclub-rockstargames2026-10-29 https://bugbountyreports.com/reports/5721-referer-leakge-in-language-changer-may-lead-to-fb-token2026-10-29 https://bugbountyreports.com/reports/5712-referer-referer-header-leakage-in-language-changer-may-lead2026-10-29 https://bugbountyreports.com/reports/6589-reflect-xss-and-csp-bypass-on-https-www-paypal-com2026-10-29 https://bugbountyreports.com/reports/9649-reflected-xss2026-10-29 https://bugbountyreports.com/reports/5112-reflected-stored-xss-https-discussion-evernote-com2026-10-29 https://bugbountyreports.com/reports/1473-reflected-cross-site-script-in-m-chevrolet-com-wpsegment52026-10-29 https://bugbountyreports.com/reports/2436-reflected-cross-site-script-in-www-gmcar-gm-com2026-10-29 https://bugbountyreports.com/reports/9487-reflected-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/9586-reflected-cross-site-scripting-xss-attacks-reflected-xss2026-10-29 https://bugbountyreports.com/reports/4085-reflected-cross-site-scripting-xss-on-www-starbucks-com2026-10-29 https://bugbountyreports.com/reports/7917-reflected-cross-site-scripting-at-coldfusion-debugging2026-10-29 https://bugbountyreports.com/reports/7916-reflected-cross-site-scripting-at-http-www-grouplogic-com2026-10-29 https://bugbountyreports.com/reports/9539-reflected-cross-site-scripting-cisco-asa-on-myvpn2026-10-29 https://bugbountyreports.com/reports/8117-reflected-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/321-reflected-cross-site-scripting-in-login-page2026-10-29 https://bugbountyreports.com/reports/10155-reflected-cross-site-scripting-xss2026-10-29 https://bugbountyreports.com/reports/8744-reflected-cross-site-scripting-xss-at-https-www-tiktok-com2026-10-29 https://bugbountyreports.com/reports/10354-reflected-cross-site-scripting-xss-found-on-ibm-com-domain2026-10-29 https://bugbountyreports.com/reports/10051-reflected-cross-site-scripting-xss-in-revive-adserver-5-5-22026-10-29 https://bugbountyreports.com/reports/1219-reflected-cross-site-scripting-xss-on-api-tiles-mapbox-com2026-10-29 https://bugbountyreports.com/reports/2122-reflected-cross-site-scripting-xss-vulnerability-in-scores2026-10-29 https://bugbountyreports.com/reports/2508-reflected-cross-site-scripting-xss-vulnerability-on-a-dod2026-10-29 https://bugbountyreports.com/reports/7319-reflected-cross-site-scripting-in-mtn-bj2026-10-29 https://bugbountyreports.com/reports/3878-reflected-cross-site-scripting-in-serendipity-serendipity2026-10-29 https://bugbountyreports.com/reports/1267-reflected-cross-site-scripting-in-www-zomato-com-php2026-10-29 https://bugbountyreports.com/reports/4718-reflected-cross-site-scripting-on-multiple-starbucks-assets2026-10-29 https://bugbountyreports.com/reports/9336-reflected-cross-site-scripting-via-search-query-on2026-10-29 https://bugbountyreports.com/reports/2123-reflected-cross-site-scripting-vulnerability-on-a-dod2026-10-29 https://bugbountyreports.com/reports/5497-reflected-cross-site-scripting-vulnerability-on-a-dod2026-10-29 https://bugbountyreports.com/reports/3211-reflected-cross-site-scripting-vulnerability-via-json-error2026-10-29 https://bugbountyreports.com/reports/8782-reflected-cross-site-scripting-cve-2022-327702026-10-29 https://bugbountyreports.com/reports/7508-reflected-cross-site-scripting-html-injection2026-10-29 https://bugbountyreports.com/reports/5651-reflected-dom-xss-on-www-starbucks-co-uk2026-10-29 https://bugbountyreports.com/reports/1115-reflected-file-download2026-10-29 https://bugbountyreports.com/reports/4441-reflected-file-download-rfd-in-download-video2026-10-29 https://bugbountyreports.com/reports/512-reflected-file-download-attack-allows-attacker-to-upload2026-10-29 https://bugbountyreports.com/reports/2358-reflected-file-download-in-community-ubnt-com-restapi2026-10-29 https://bugbountyreports.com/reports/1111-reflected-filename-download2026-10-29 https://bugbountyreports.com/reports/1383-reflected-flash-xss-using-swfupload-swf-with-an-epileptic2026-10-29 https://bugbountyreports.com/reports/10435-reflected-html-injection-in-login-page-via-infotext2026-10-29 https://bugbountyreports.com/reports/9707-reflected-html-injection-via-contact-faq-search-parameter-on2026-10-29 https://bugbountyreports.com/reports/9708-reflected-html-injection-via-contact-faq-search-parameter-on2026-10-29 https://bugbountyreports.com/reports/809-reflected-self-xss-in-slack2026-10-29 https://bugbountyreports.com/reports/1488-reflected-self-xss-vulnerability-in-the-comment-section-of2026-10-29 https://bugbountyreports.com/reports/1480-reflected-self-xss-vulnerability-in-the-comment-section-of2026-10-29 https://bugbountyreports.com/reports/3749-reflected-swf-xss-in-plugins-svn-wordpress-org2026-10-29 https://bugbountyreports.com/reports/5541-reflected-xss2026-10-29 https://bugbountyreports.com/reports/174-reflected-xss2026-10-29 https://bugbountyreports.com/reports/6045-reflected-xss2026-10-29 https://bugbountyreports.com/reports/1936-reflected-xss2026-10-29 https://bugbountyreports.com/reports/3683-reflected-xss2026-10-29 https://bugbountyreports.com/reports/3735-reflected-xss2026-10-29 https://bugbountyreports.com/reports/3925-reflected-xss2026-10-29 https://bugbountyreports.com/reports/4262-reflected-xss2026-10-29 https://bugbountyreports.com/reports/4960-reflected-xss2026-10-29 https://bugbountyreports.com/reports/5042-reflected-xss2026-10-29 https://bugbountyreports.com/reports/5558-reflected-xss2026-10-29 https://bugbountyreports.com/reports/6964-reflected-xss2026-10-29 https://bugbountyreports.com/reports/8427-reflected-xss2026-10-29 https://bugbountyreports.com/reports/2762-reflected-xss-gratipay-com2026-10-29 https://bugbountyreports.com/reports/7118-reflected-xss-https2026-10-29 https://bugbountyreports.com/reports/7680-reflected-xss-in-email-input2026-10-29 https://bugbountyreports.com/reports/5637-reflected-xss-mackeeperapp2-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/7809-reflected-xss2026-10-29 https://bugbountyreports.com/reports/7810-reflected-xss2026-10-29 https://bugbountyreports.com/reports/8130-reflected-xss2026-10-29 https://bugbountyreports.com/reports/9337-reflected-xss-cve-2020-35802026-10-29 https://bugbountyreports.com/reports/3321-reflected-xss-support-mycrypto-com2026-10-29 https://bugbountyreports.com/reports/6712-reflected-xss-www2026-10-29 https://bugbountyreports.com/reports/4466-reflected-xss-markup-injection-in-index-php-svg-core-logo2026-10-29 https://bugbountyreports.com/reports/8307-reflected-xss-https2026-10-29 https://bugbountyreports.com/reports/8306-reflected-xss-https2026-10-29 https://bugbountyreports.com/reports/7594-reflected-xss-and-blind-out-of-band-command-injection-at2026-10-29 https://bugbountyreports.com/reports/5612-reflected-xss-and-html-injectionon-a-dod-website2026-10-29 https://bugbountyreports.com/reports/7551-reflected-xss-and-open-redirect-on-larksuite-com-using-back2026-10-29 https://bugbountyreports.com/reports/6760-reflected-xss-and-possible-ssrf-xxe-on-https-events2026-10-29 https://bugbountyreports.com/reports/5442-reflected-xss-and-sensitive-data-exposure-including-payment2026-10-29 https://bugbountyreports.com/reports/2432-reflected-xss-and-something-more-store-xss-too2026-10-29 https://bugbountyreports.com/reports/7049-reflected-xss-at2026-10-29 https://bugbountyreports.com/reports/6273-reflected-xss-at-category-on-a-atavis-theme2026-10-29 https://bugbountyreports.com/reports/7387-reflected-xss-at-via-parameter2026-10-29 https://bugbountyreports.com/reports/8512-reflected-xss-at2026-10-29 https://bugbountyreports.com/reports/7521-reflected-xss-at-dailydeals-mtn-co-za2026-10-29 https://bugbountyreports.com/reports/7625-reflected-xss-at-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/8989-reflected-xss-at-https2026-10-29 https://bugbountyreports.com/reports/7623-reflected-xss-at-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/7622-reflected-xss-at-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/6754-reflected-xss-at-https2026-10-29 https://bugbountyreports.com/reports/7626-reflected-xss-at-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/7624-reflected-xss-at-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/2647-reflected-xss-at-https-da-wordpress-org-themes-s-via-s2026-10-29 https://bugbountyreports.com/reports/5548-reflected-xss-at-https-www-paypal-com-ppcreditapply-da-us2026-10-29 https://bugbountyreports.com/reports/6961-reflected-xss-at-www-at-via-the-parameter2026-10-29 https://bugbountyreports.com/reports/3939-reflected-xss-avito-ru2026-10-29 https://bugbountyreports.com/reports/1944-reflected-xss-by-exploiting-csrf-vulnerability-on-teavana2026-10-29 https://bugbountyreports.com/reports/7812-reflected-xss-due-to-vulnerable-version-of-sockjs2026-10-29 https://bugbountyreports.com/reports/7358-reflected-xss-https2026-10-29 https://bugbountyreports.com/reports/2363-reflected-xss-in-myshopify-com-through-theme-preview2026-10-29 https://bugbountyreports.com/reports/5907-reflected-xss-in-mendix-com-openid2026-10-29 https://bugbountyreports.com/reports/9977-reflected-xss-in-client-notes-field2026-10-29 https://bugbountyreports.com/reports/9985-reflected-xss-in-cost-tracker-notes-field2026-10-29 https://bugbountyreports.com/reports/9983-reflected-xss-in-create-category-functionality-of-post2026-10-29 https://bugbountyreports.com/reports/9984-reflected-xss-in-manage-tags-notes-field2026-10-29 https://bugbountyreports.com/reports/8118-reflected-xss-in2026-10-29 https://bugbountyreports.com/reports/8651-reflected-xss-in-www-equifax-com2026-10-29 https://bugbountyreports.com/reports/8652-reflected-xss-in-www-equifax-com2026-10-29 https://bugbountyreports.com/reports/4089-reflected-xss-in-myshopify-com-account-register2026-10-29 https://bugbountyreports.com/reports/10073-reflected-xss-in-admin-banner-zone-php-v6-0-02026-10-29 https://bugbountyreports.com/reports/2877-reflected-xss-in-videos-via-calling-a-callback-http-www2026-10-29 https://bugbountyreports.com/reports/10164-reflected-xss-in-telerik-reportviewer-axd-with-f5-big-ip2026-10-29 https://bugbountyreports.com/reports/8580-reflected-xss-in2026-10-29 https://bugbountyreports.com/reports/8575-reflected-xss-in2026-10-29 https://bugbountyreports.com/reports/8577-reflected-xss-in2026-10-29 https://bugbountyreports.com/reports/8640-reflected-xss-in2026-10-29 https://bugbountyreports.com/reports/2450-reflected-xss-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/1814-reflected-xss-in-a-navy-website2026-10-29 https://bugbountyreports.com/reports/10066-reflected-xss-in-account-preferences-plugin-php2026-10-29 https://bugbountyreports.com/reports/10187-reflected-xss-in-afr-php2026-10-29 https://bugbountyreports.com/reports/10359-reflected-xss-in-ai-chat-bot-greetings-at-help-shopify-com2026-10-29 https://bugbountyreports.com/reports/1744-reflected-xss-in-airmax-nanostation-loco-m22026-10-29 https://bugbountyreports.com/reports/1230-reflected-xss-in-backend-search2026-10-29 https://bugbountyreports.com/reports/10188-reflected-xss-in-banner-acl-php-and-channel-acl-php-via2026-10-29 https://bugbountyreports.com/reports/877-reflected-xss-in-cart-at-hardware-shopify-com2026-10-29 https://bugbountyreports.com/reports/683-reflected-xss-in-chat2026-10-29 https://bugbountyreports.com/reports/711-reflected-xss-in-chat2026-10-29 https://bugbountyreports.com/reports/8310-reflected-xss-in-chatbot2026-10-29 https://bugbountyreports.com/reports/1269-reflected-xss-in-domain-www-veris-in2026-10-29 https://bugbountyreports.com/reports/2261-reflected-xss-in-error-pages-nc-sa-2017-0082026-10-29 https://bugbountyreports.com/reports/1725-reflected-xss-in-gallery-app2026-10-29 https://bugbountyreports.com/reports/6583-reflected-xss-in-https2026-10-29 https://bugbountyreports.com/reports/7562-reflected-xss-in-https-via-hidden-parameter2026-10-29 https://bugbountyreports.com/reports/6185-reflected-xss-in-https-via-search-parameter2026-10-29 https://bugbountyreports.com/reports/6791-reflected-xss-in-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/5328-reflected-xss-in-https-blocked-myndr-net2026-10-29 https://bugbountyreports.com/reports/3894-reflected-xss-in-https-eng-uberinternal-com-and-https2026-10-29 https://bugbountyreports.com/reports/5045-reflected-xss-in-https-lite-pubg-com2026-10-29 https://bugbountyreports.com/reports/9627-reflected-xss-in-https-nin-mtn-ng-nin-success-message-lol2026-10-29 https://bugbountyreports.com/reports/7825-reflected-xss-in-https-sh-reddit-com2026-10-29 https://bugbountyreports.com/reports/9065-reflected-xss-in-https-wordpress-com-start-account-user2026-10-29 https://bugbountyreports.com/reports/6076-reflected-xss-in-https-www2026-10-29 https://bugbountyreports.com/reports/6077-reflected-xss-in-https-www2026-10-29 https://bugbountyreports.com/reports/9697-reflected-xss-in-https-www-acronis-com-products-cyber2026-10-29 https://bugbountyreports.com/reports/6556-reflected-xss-in-https-www-intensedebate-com-js2026-10-29 https://bugbountyreports.com/reports/4251-reflected-xss-in-https-www-starbucks-co-jp-store-search2026-10-29 https://bugbountyreports.com/reports/4947-reflected-xss-in-https-www-starbucks-com-account-create2026-10-29 https://bugbountyreports.com/reports/7073-reflected-xss-in-https-www-topcoder-com-blog-category2026-10-29 https://bugbountyreports.com/reports/10407-reflected-xss-in-legacy-cgi-script-cgi-bin-pl-on-via2026-10-29 https://bugbountyreports.com/reports/3967-reflected-xss-in-lert-uber-com2026-10-29 https://bugbountyreports.com/reports/2912-reflected-xss-in-m-imgur-com2026-10-29 https://bugbountyreports.com/reports/9856-reflected-xss-in-marketing-reports-page-on-myshopify-com2026-10-29 https://bugbountyreports.com/reports/5584-reflected-xss-in-nanostation-loco-m2-airos-ver-6-1-72026-10-29 https://bugbountyreports.com/reports/8987-reflected-xss-in-oauth-complete-endpoints2026-10-29 https://bugbountyreports.com/reports/5414-reflected-xss-in-oauth2-login-flow2026-10-29 https://bugbountyreports.com/reports/8994-reflected-xss-in-oauth2-login-flow-https-access-line-me2026-10-29 https://bugbountyreports.com/reports/2646-reflected-xss-in-openapi-starbucks-com-searchasyoutype-v12026-10-29 https://bugbountyreports.com/reports/1054-reflected-xss-in-owncloud-com2026-10-29 https://bugbountyreports.com/reports/216-reflected-xss-in-pastebin-view2026-10-29 https://bugbountyreports.com/reports/7473-reflected-xss-in-photogallery-component-on-https-market-av2026-10-29 https://bugbountyreports.com/reports/5044-reflected-xss-in-pubg-com2026-10-29 https://bugbountyreports.com/reports/2876-reflected-xss-in-reddeadredemption-site-located-at-www2026-10-29 https://bugbountyreports.com/reports/1418-reflected-xss-in-scores-ubnt-com2026-10-29 https://bugbountyreports.com/reports/3881-reflected-xss-in-serendipity-s-index-php2026-10-29 https://bugbountyreports.com/reports/10395-reflected-xss-in-stats-video-php-via-improperly-encoded-url2026-10-29 https://bugbountyreports.com/reports/2671-reflected-xss-in-step-2-of-the-installation2026-10-29 https://bugbountyreports.com/reports/4052-reflected-xss-in-the-npm-module-express-cart2026-10-29 https://bugbountyreports.com/reports/7772-reflected-xss-in-the-shared-note-view-on-https-evernote-com2026-10-29 https://bugbountyreports.com/reports/7379-reflected-xss-in-tiktok-endpoints2026-10-29 https://bugbountyreports.com/reports/5241-reflected-xss-in-twitterflightschool-com2026-10-29 https://bugbountyreports.com/reports/2069-reflected-xss-in-u2f-plugin-by-shipping-the-example2026-10-29 https://bugbountyreports.com/reports/441-reflected-xss-in-user-name-thru-cookie2026-10-29 https://bugbountyreports.com/reports/8459-reflected-xss-in-www-gov2026-10-29 https://bugbountyreports.com/reports/3433-reflected-xss-in-www-dota2-com2026-10-29 https://bugbountyreports.com/reports/2520-reflected-xss-in-zomato-mobile-category-parameter2026-10-29 https://bugbountyreports.com/reports/9422-reflected-xss-of-media-indrive-com2026-10-29 https://bugbountyreports.com/reports/1749-reflected-xss-on2026-10-29 https://bugbountyreports.com/reports/7743-reflected-xss-on2026-10-29 https://bugbountyreports.com/reports/9149-reflected-xss-on-https-www-useast1a-tiktok-com-ug-incentive2026-10-29 https://bugbountyreports.com/reports/6731-reflected-xss-on-admin-campaign-zone-zones-php2026-10-29 https://bugbountyreports.com/reports/6553-reflected-xss-on-admin-stats-php2026-10-29 https://bugbountyreports.com/reports/6732-reflected-xss-on-admin-stats-php2026-10-29 https://bugbountyreports.com/reports/6957-reflected-xss-on-admin-stats-php2026-10-29 https://bugbountyreports.com/reports/6552-reflected-xss-on-admin-userlog-index-php2026-10-29 https://bugbountyreports.com/reports/6524-reflected-xss-on-www-delivery-afr-php-bypass-of-report2026-10-29 https://bugbountyreports.com/reports/6784-reflected-xss-on2026-10-29 https://bugbountyreports.com/reports/8072-reflected-xss-on-via-jobid-parameter2026-10-29 https://bugbountyreports.com/reports/7961-reflected-xss-on-loc2026-10-29 https://bugbountyreports.com/reports/8460-reflected-xss-on-mil2026-10-29 https://bugbountyreports.com/reports/5993-reflected-xss-on2026-10-29 https://bugbountyreports.com/reports/6792-reflected-xss-on2026-10-29 https://bugbountyreports.com/reports/5848-reflected-xss-on-page2026-10-29 https://bugbountyreports.com/reports/9410-reflected-xss-on2026-10-29 https://bugbountyreports.com/reports/6793-reflected-xss-on2026-10-29 https://bugbountyreports.com/reports/3885-reflected-xss-on-any-myshopify-com-admin2026-10-29 https://bugbountyreports.com/reports/5217-reflected-xss-on-8x8-com-subdomain2026-10-29 https://bugbountyreports.com/reports/5130-reflected-xss-on-8x8-vc2026-10-29 https://bugbountyreports.com/reports/6274-reflected-xss-on-a-atavist-theme2026-10-29 https://bugbountyreports.com/reports/6272-reflected-xss-on-a-atavist-theme-at-external-import-php2026-10-29 https://bugbountyreports.com/reports/1840-reflected-xss-on-a-department-of-defense-website2026-10-29 https://bugbountyreports.com/reports/1841-reflected-xss-on-a-department-of-defense-website2026-10-29 https://bugbountyreports.com/reports/1955-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2197-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2378-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2386-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2389-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2390-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2391-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2464-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2465-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2701-reflected-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/1827-reflected-xss-on-a-navy-website2026-10-29 https://bugbountyreports.com/reports/7599-reflected-xss-on-ads-tiktok-com-using-from-parameter2026-10-29 https://bugbountyreports.com/reports/1838-reflected-xss-on-an-army-website2026-10-29 https://bugbountyreports.com/reports/7453-reflected-xss-on-av-ru-via-q-parameter-at-https-av-ru2026-10-29 https://bugbountyreports.com/reports/2005-reflected-xss-on-blockchain-info2026-10-29 https://bugbountyreports.com/reports/2487-reflected-xss-on-business-blog-zomato-com-part-22026-10-29 https://bugbountyreports.com/reports/2486-reflected-xss-on-business-blog-zomato-com-part-i2026-10-29 https://bugbountyreports.com/reports/5056-reflected-xss-on-card-starbucks-com-sg-unsub-php-via-the-ct2026-10-29 https://bugbountyreports.com/reports/5057-reflected-xss-on-card-starbucks-com-sg-unsubrevert-php-via2026-10-29 https://bugbountyreports.com/reports/7018-reflected-xss-on-cz-acronis-com-dekujeme-za-odber-novinek2026-10-29 https://bugbountyreports.com/reports/7522-reflected-xss-on-dailydeals-mtn-co-za2026-10-29 https://bugbountyreports.com/reports/7189-reflected-xss-on-delivery-glovoapp-com2026-10-29 https://bugbountyreports.com/reports/1065-reflected-xss-on-developer-uber-com-via-angular-template2026-10-29 https://bugbountyreports.com/reports/3774-reflected-xss-on-developers-zomato-com2026-10-29 https://bugbountyreports.com/reports/9335-reflected-xss-on-error-message-on-login-page2026-10-29 https://bugbountyreports.com/reports/5477-reflected-xss-on-error-page-on-https-apps-topcoder-com-wiki2026-10-29 https://bugbountyreports.com/reports/9692-reflected-xss-on-formaction-parameter2026-10-29 https://bugbountyreports.com/reports/6925-reflected-xss-on-gamesclub-mtn-com-g2026-10-29 https://bugbountyreports.com/reports/9177-reflected-xss-on-help-shopify-com2026-10-29 https://bugbountyreports.com/reports/4001-reflected-xss-on-help-steampowered-com2026-10-29 https://bugbountyreports.com/reports/5601-reflected-xss-on-http-axa-dxi-eu2026-10-29 https://bugbountyreports.com/reports/6817-reflected-xss-on-http-www-grouplogic-com-files-glidownload2026-10-29 https://bugbountyreports.com/reports/7563-reflected-xss-on-https-via-hidden-parameter2026-10-29 https://bugbountyreports.com/reports/6309-reflected-xss-on-https-bypass-of-10029772026-10-29 https://bugbountyreports.com/reports/6708-reflected-xss-on-https2026-10-29 https://bugbountyreports.com/reports/6959-reflected-xss-on-https2026-10-29 https://bugbountyreports.com/reports/5847-reflected-xss-on-https2026-10-29 https://bugbountyreports.com/reports/8743-reflected-xss-on-https2026-10-29 https://bugbountyreports.com/reports/6559-reflected-xss-on-https2026-10-29 https://bugbountyreports.com/reports/6545-reflected-xss-on-https-html-url2026-10-29 https://bugbountyreports.com/reports/5481-reflected-xss-on-https-apps-topcoder-com-wiki2026-10-29 https://bugbountyreports.com/reports/5482-reflected-xss-on-https-apps-topcoder-com-wiki-page2026-10-29 https://bugbountyreports.com/reports/5480-reflected-xss-on-https-apps-topcoder-com-wiki-pages2026-10-29 https://bugbountyreports.com/reports/5478-reflected-xss-on-https-apps-topcoder-com-wiki-plugins2026-10-29 https://bugbountyreports.com/reports/4411-reflected-xss-on-https-inventory-upserve-com-affects-ie2026-10-29 https://bugbountyreports.com/reports/4446-reflected-xss-on-https-make-wordpress-org-via-channel2026-10-29 https://bugbountyreports.com/reports/4454-reflected-xss-on-https-merchant-kartpay-com-payment2026-10-29 https://bugbountyreports.com/reports/9159-reflected-xss-on-https-travel-line-me2026-10-29 https://bugbountyreports.com/reports/7586-reflected-xss-on-https-vk-com-search2026-10-29 https://bugbountyreports.com/reports/5380-reflected-xss-on-https-www-semrush-com-my-reports2026-10-29 https://bugbountyreports.com/reports/5650-reflected-xss-on-https-www-starbucks-co-uk-shop2026-10-29 https://bugbountyreports.com/reports/6650-reflected-xss-on-https-www-uber-com2026-10-29 https://bugbountyreports.com/reports/6727-reflected-xss-on-https-www-uber-com2026-10-29 https://bugbountyreports.com/reports/3334-reflected-xss-on-https-www-zomato-com2026-10-29 https://bugbountyreports.com/reports/6742-reflected-xss-on-lark-suite2026-10-29 https://bugbountyreports.com/reports/5540-reflected-xss-on-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/6924-reflected-xss-on-mtnhottseat-mtn-com-gh2026-10-29 https://bugbountyreports.com/reports/3895-reflected-xss-on-multiple-uberinternal-com-domains2026-10-29 https://bugbountyreports.com/reports/7020-reflected-xss-on-my-acronis-com2026-10-29 https://bugbountyreports.com/reports/9304-reflected-xss-on-pangle-endpoint2026-10-29 https://bugbountyreports.com/reports/8019-reflected-xss-on-panther-com2026-10-29 https://bugbountyreports.com/reports/3694-reflected-xss-on-partners-subdomain2026-10-29 https://bugbountyreports.com/reports/7177-reflected-xss-on-play-mtn-co-za2026-10-29 https://bugbountyreports.com/reports/5520-reflected-xss-on-stage-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/2429-reflected-xss-on-teavana-com-locale-change2026-10-29 https://bugbountyreports.com/reports/2840-reflected-xss-on-the-data-gov-waf-bypass-chrome-xss-auditor2026-10-29 https://bugbountyreports.com/reports/7481-reflected-xss-on-the-path-m-tiktok-com2026-10-29 https://bugbountyreports.com/reports/3756-reflected-xss-on-theacademy-upserve-com2026-10-29 https://bugbountyreports.com/reports/7760-reflected-xss-on-tiktok-website2026-10-29 https://bugbountyreports.com/reports/6768-reflected-xss-on-transact-playstation-com-using-postmessage2026-10-29 https://bugbountyreports.com/reports/1072-reflected-xss-on-uber-com-careers2026-10-29 https://bugbountyreports.com/reports/8184-reflected-xss-on-videostore-mtnonline-com2026-10-29 https://bugbountyreports.com/reports/2789-reflected-xss-on-vimeo-com-musicstore2026-10-29 https://bugbountyreports.com/reports/1592-reflected-xss-on-websummit-net2026-10-29 https://bugbountyreports.com/reports/9568-reflected-xss-on-www-acronis-com-de-de-my-subscriptions2026-10-29 https://bugbountyreports.com/reports/2790-reflected-xss-on-www-bookfresh-com-index-html-view-upload2026-10-29 https://bugbountyreports.com/reports/6818-reflected-xss-on-www-grouplogic-com-video-asp2026-10-29 https://bugbountyreports.com/reports/5449-reflected-xss-on-www-hackerone-com-and-resources-hackerone2026-10-29 https://bugbountyreports.com/reports/6059-reflected-xss-on-www-hackerone-com-via-wistia-embed-code2026-10-29 https://bugbountyreports.com/reports/5135-reflected-xss-on-www-delivery-afr-php2026-10-29 https://bugbountyreports.com/reports/1205-reflected-xss-on-zomato-api2026-10-29 https://bugbountyreports.com/reports/2670-reflected-xss-on-zones-invocation-code2026-10-29 https://bugbountyreports.com/reports/7569-reflected-xss-online-store-git-shopifycloud-com2026-10-29 https://bugbountyreports.com/reports/4025-reflected-xss-post-method-at-partners-uber-com2026-10-29 https://bugbountyreports.com/reports/6989-reflected-xss-through-clickjacking2026-10-29 https://bugbountyreports.com/reports/6960-reflected-xss-through-clickjacking-at-https2026-10-29 https://bugbountyreports.com/reports/5340-reflected-xss-through-multiple-inputs-in-the-issue2026-10-29 https://bugbountyreports.com/reports/3172-reflected-xss-using-header-injection2026-10-29 https://bugbountyreports.com/reports/1963-reflected-xss-vector2026-10-29 https://bugbountyreports.com/reports/7090-reflected-xss-via-error-parameter-on-https-admin-acronis2026-10-29 https://bugbountyreports.com/reports/2048-reflected-xss-via-tags-while-using-a-callback-in-newswire2026-10-29 https://bugbountyreports.com/reports/7945-reflected-xss-via-parameter2026-10-29 https://bugbountyreports.com/reports/10336-reflected-xss-via-clientid-parameter-in-zone-include-php2026-10-29 https://bugbountyreports.com/reports/2795-reflected-xss-via-double-encoding2026-10-29 https://bugbountyreports.com/reports/9338-reflected-xss-via-keycloak-on-cve-2021-203232026-10-29 https://bugbountyreports.com/reports/1167-reflected-xss-via-livefyre-media-wall-in-newsroom-uber-com2026-10-29 https://bugbountyreports.com/reports/9334-reflected-xss-via-moodle-on-cve-2022-356532026-10-29 https://bugbountyreports.com/reports/8683-reflected-xss-via-origcity-parameter-upper-case-waf2026-10-29 https://bugbountyreports.com/reports/10400-reflected-xss-via-unsanitised-refresh-parameter-in-zone2026-10-29 https://bugbountyreports.com/reports/1165-reflected-xss-via-unvalidated-open-redirect-in-uber-com2026-10-29 https://bugbountyreports.com/reports/10178-reflected-xss-via-user-parameter-in-ssl-vpn-getconfig-esp2026-10-29 https://bugbountyreports.com/reports/10150-reflected-xss-via-user-parameter-on-getconfig-esp-endpoint2026-10-29 https://bugbountyreports.com/reports/10177-reflected-xss-via-user-parameter-on-getconfig-esp-endpoint2026-10-29 https://bugbountyreports.com/reports/5409-reflected-xss-via-xml-namespace-uri-on-https-go-mapbox-com2026-10-29 https://bugbountyreports.com/reports/2191-reflected-xss-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/3174-reflected-xss-vulnerability-in-database-name-field-on2026-10-29 https://bugbountyreports.com/reports/10179-reflected-xss-vulnerability-in-ssl-vpn-endpoint-cve-20252026-10-29 https://bugbountyreports.com/reports/9858-reflected-xss-vulnerability-in-svg-file-at-area-resources2026-10-29 https://bugbountyreports.com/reports/2034-reflected-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2468-reflected-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2471-reflected-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2500-reflected-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2565-reflected-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/8701-reflected-xss-vulnerability-with-full-csp-bypass-in2026-10-29 https://bugbountyreports.com/reports/6677-reflected-xss-when-renaming-a-file-with-a-vulnerable-name2026-10-29 https://bugbountyreports.com/reports/6550-reflected-xss-www-search-form2026-10-29 https://bugbountyreports.com/reports/3476-reflected-xss-al-audio-php2026-10-29 https://bugbountyreports.com/reports/6355-reflected-xss-video2026-10-29 https://bugbountyreports.com/reports/7405-reflected-xss-m-vk-com2026-10-29 https://bugbountyreports.com/reports/7406-reflected-xss-m-vk-com-chatjoin2026-10-29 https://bugbountyreports.com/reports/7412-reflected-xss-m-vk-com-chatjoin2026-10-29 https://bugbountyreports.com/reports/4459-reflected-xss-taxonomy-converter-via-tax-parameter2026-10-29 https://bugbountyreports.com/reports/6000-reflected-xss-on-https-www-topcoder-com-tc-via-pt-parameter2026-10-29 https://bugbountyreports.com/reports/6815-reflected-stored-xss-on-duckduckgo-com2026-10-29 https://bugbountyreports.com/reports/9277-reflective-cross-site-scripting-xss-on-pages2026-10-29 https://bugbountyreports.com/reports/4636-reflective-cross-site-scripting-via-newsletter-form2026-10-29 https://bugbountyreports.com/reports/2893-reflective-xss2026-10-29 https://bugbountyreports.com/reports/2980-reflective-xss2026-10-29 https://bugbountyreports.com/reports/466-reflective-xss-can-be-triggered-in-ie2026-10-29 https://bugbountyreports.com/reports/876-reflective-xss-on-wholesale-shopify-com2026-10-29 https://bugbountyreports.com/reports/732-reflective-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/2506-reflective-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/980-regarding-cve-2016-0752-possible-information-leak2026-10-29 https://bugbountyreports.com/reports/8162-regex-account-takeover2026-10-29 https://bugbountyreports.com/reports/7695-regexes-with-large-repetitions-on-empty-sub-expressions2026-10-29 https://bugbountyreports.com/reports/8854-register-create-a-ticket-as-somebody-else-on-hackerone2026-10-29 https://bugbountyreports.com/reports/6587-register-with-non-accepted-email-types-on-https2026-10-29 https://bugbountyreports.com/reports/1402-registeration-link-jacking-redirecting2026-10-29 https://bugbountyreports.com/reports/3206-registered-users-can-change-app-password-permissions-for2026-10-29 https://bugbountyreports.com/reports/7895-registered-users-contact-information-disclosure-on2026-10-29 https://bugbountyreports.com/reports/5934-registering-with-email-70-chars-lead-to-disclose-some2026-10-29 https://bugbountyreports.com/reports/1512-registration-bypass-using-oauth-logical-bug2026-10-29 https://bugbountyreports.com/reports/9521-registration-bypass-with-leaked-invite-token2026-10-29 https://bugbountyreports.com/reports/2273-registration-captcha-bypass2026-10-29 https://bugbountyreports.com/reports/3256-registration-enabled-on-grab-com2026-10-29 https://bugbountyreports.com/reports/3422-registry-nodejs-org-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/8746-regression-on-dest-parameter-sanitization-doesn-t-check2026-10-29 https://bugbountyreports.com/reports/4125-regular-expression-denial-of-service-redos2026-10-29 https://bugbountyreports.com/reports/8959-regular-expression-denial-of-service-redos-vulnerability2026-10-29 https://bugbountyreports.com/reports/6590-regular-expression-denial-of-service-in-activerecord-s2026-10-29 https://bugbountyreports.com/reports/8554-regular-expression-denial-of-service-in-headers2026-10-29 https://bugbountyreports.com/reports/393-relateiq-sslv3-deprecated-protocol-vulnerability2026-10-29 https://bugbountyreports.com/reports/5375-relative-path-vulnerability-results-in-arbitrary-command2026-10-29 https://bugbountyreports.com/reports/7920-remote-0click-exfiltration-of-safari-user-s-ip-address2026-10-29 https://bugbountyreports.com/reports/3237-remote-access-to-localhost-daemon-can-issue-jsonrpc-commands2026-10-29 https://bugbountyreports.com/reports/4034-remote-attacker-can-impersonate-social-users-via2026-10-29 https://bugbountyreports.com/reports/1801-remote-client-memory-corruption-in-ssl-add-clienthello2026-10-29 https://bugbountyreports.com/reports/4124-remote-code-executio-in-npm-package-getcookies2026-10-29 https://bugbountyreports.com/reports/5470-remote-code-execution-unauthenticated-remote-command2026-10-29 https://bugbountyreports.com/reports/2143-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2377-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2383-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2448-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/3360-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4573-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4604-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4605-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4606-remote-code-execution-rce-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4018-remote-code-execution-rce-in-a-sony-pictures-websystem2026-10-29 https://bugbountyreports.com/reports/4019-remote-code-execution-rce-in-a-sony-websystem2026-10-29 https://bugbountyreports.com/reports/3361-remote-code-execution-rce-in-dod-websites2026-10-29 https://bugbountyreports.com/reports/2578-remote-code-execution-rce-in-multiple-dod-websites2026-10-29 https://bugbountyreports.com/reports/2702-remote-code-execution-rce-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2570-remote-code-execution-rce-vulnerability-in-multiple-dod2026-10-29 https://bugbountyreports.com/reports/5801-remote-code-execution-reverse-shell-file-manager2026-10-29 https://bugbountyreports.com/reports/1464-remote-code-execution-upload2026-10-29 https://bugbountyreports.com/reports/9634-remote-code-execution-cve-2023-368452026-10-29 https://bugbountyreports.com/reports/9738-remote-code-execution-and-aws-iam-credentials-exfiltration2026-10-29 https://bugbountyreports.com/reports/9168-remote-code-execution-and-exfiltration-of-secret-tokens-by2026-10-29 https://bugbountyreports.com/reports/3084-remote-code-execution-at-http-tw-corp-ubnt-com2026-10-29 https://bugbountyreports.com/reports/7394-remote-code-execution-at-https-169-38-86-185-edst-ibm-com2026-10-29 https://bugbountyreports.com/reports/3655-remote-code-execution-by-hijacking-an-unclaimed-s3-bucket2026-10-29 https://bugbountyreports.com/reports/8085-remote-code-execution-due-to-unvalidated-file-upload2026-10-29 https://bugbountyreports.com/reports/10103-remote-code-execution-identified-on-ibm-endpoint2026-10-29 https://bugbountyreports.com/reports/5463-remote-code-execution-in2026-10-29 https://bugbountyreports.com/reports/6285-remote-code-execution-in-basecamp-windows-electron-app2026-10-29 https://bugbountyreports.com/reports/6826-remote-code-execution-in-coming-kibana-7-7-02026-10-29 https://bugbountyreports.com/reports/3702-remote-code-execution-in-rocket-chat-desktop2026-10-29 https://bugbountyreports.com/reports/6204-remote-code-execution-in-rocket-chat-desktop2026-10-29 https://bugbountyreports.com/reports/5980-remote-code-execution-in-slack-desktop-apps-bonus2026-10-29 https://bugbountyreports.com/reports/3327-remote-code-execution-in-the-import-channel-function2026-10-29 https://bugbountyreports.com/reports/3347-remote-code-execution-in-wordpress-desktop2026-10-29 https://bugbountyreports.com/reports/7593-remote-code-execution-on-8x8-com-via-net-vstate2026-10-29 https://bugbountyreports.com/reports/5997-remote-code-execution-on2026-10-29 https://bugbountyreports.com/reports/1842-remote-code-execution-on-an-army-website2026-10-29 https://bugbountyreports.com/reports/6319-remote-code-execution-on-basecamp-com2026-10-29 https://bugbountyreports.com/reports/5836-remote-code-execution-on-cloud-via-latest-kibana-7-6-22026-10-29 https://bugbountyreports.com/reports/2159-remote-code-execution-on-git-imgur-dev-com2026-10-29 https://bugbountyreports.com/reports/8630-remote-code-execution-on-owncloud-instances-with2026-10-29 https://bugbountyreports.com/reports/3029-remote-code-execution-on-rubygems-org2026-10-29 https://bugbountyreports.com/reports/4311-remote-code-execution-on-www-semrush-com-my-reports-on-logo2026-10-29 https://bugbountyreports.com/reports/7013-remote-code-execution-through-files-antivirus-plugin2026-10-29 https://bugbountyreports.com/reports/5570-remote-code-execution-through-dnn-cookie-deserialization2026-10-29 https://bugbountyreports.com/reports/5759-remote-code-execution-through-extension-bypass-on-log2026-10-29 https://bugbountyreports.com/reports/979-remote-code-execution-using-render-inline2026-10-29 https://bugbountyreports.com/reports/9130-remote-code-execution-via-crafted-pentaho-report-uploaded2026-10-29 https://bugbountyreports.com/reports/5893-remote-code-execution-via-cve-2019-189352026-10-29 https://bugbountyreports.com/reports/4266-remote-code-execution-via-extract-app-plugin2026-10-29 https://bugbountyreports.com/reports/5456-remote-code-execution-via-insecure-deserialization-in2026-10-29 https://bugbountyreports.com/reports/6962-remote-code-execution-via-insecure-deserialization-in2026-10-29 https://bugbountyreports.com/reports/5293-remote-code-execution-via-path-traversal-in-zip-extraction2026-10-29 https://bugbountyreports.com/reports/9929-remote-code-execution-via-unsafe-usage-of-reply-view-raw-in2026-10-29 https://bugbountyreports.com/reports/2499-remote-code-execution-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2504-remote-code-execution-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2558-remote-code-execution-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/9546-remote-code-injection-in-log4j-on-http-mtn1app-mtncameroon2026-10-29 https://bugbountyreports.com/reports/9547-remote-code-injection-in-log4j-on-https-mymtn-mtncongo-net2026-10-29 https://bugbountyreports.com/reports/2042-remote-command-execution-rce-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/3823-remote-command-execution-in-a-internal-server-to-get-the2026-10-29 https://bugbountyreports.com/reports/8207-remote-command-execution-via-github-import2026-10-29 https://bugbountyreports.com/reports/3521-remote-command-execution-vulnerability-in-pullit2026-10-29 https://bugbountyreports.com/reports/4329-remote-daemon-rpc-attack2026-10-29 https://bugbountyreports.com/reports/7967-remote-denial-of-service-in-hyperledger-fabric2026-10-29 https://bugbountyreports.com/reports/8084-remote-denial-of-service-in-hyperledger-fabric2026-10-29 https://bugbountyreports.com/reports/2193-remote-file-inclusion-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4979-remote-file-inclusion-malicious-file-hosting-and-cross-site2026-10-29 https://bugbountyreports.com/reports/990-remote-file-upload-vulnerability-in-business-blog-zomato-com2026-10-29 https://bugbountyreports.com/reports/6616-remote-hacker-can-download-all-the-files-of-master-branch2026-10-29 https://bugbountyreports.com/reports/7836-remote-kernel-heap-overflow2026-10-29 https://bugbountyreports.com/reports/9861-remote-memory-exhaustion-in-epee-rpc-stack-under-zero2026-10-29 https://bugbountyreports.com/reports/10404-remote-node-dos2026-10-29 https://bugbountyreports.com/reports/4591-remote-os-command-execution-in-the-3-more-oracle-weblogic2026-10-29 https://bugbountyreports.com/reports/6844-remote-os-command-execution-on-oracle-weblogic-server-via2026-10-29 https://bugbountyreports.com/reports/6843-remote-os-command-execution-on-oracle-weblogic-server-via2026-10-29 https://bugbountyreports.com/reports/4330-remote-p2p-dos2026-10-29 https://bugbountyreports.com/reports/1970-remote-unrestricted-file-creation-deletion-and-possible-rce2026-10-29 https://bugbountyreports.com/reports/9321-remote-vulnerabilities-in-spp2026-10-29 https://bugbountyreports.com/reports/8254-remotely-accessible-container-advisor-exposed-performance2026-10-29 https://bugbountyreports.com/reports/5201-remotely-trigger-an-assertion-on-a-tls-server-with-a2026-10-29 https://bugbountyreports.com/reports/1224-remove-anyone-s-pic-gravtar2026-10-29 https://bugbountyreports.com/reports/8337-remove-every-user-admin-and-owner-out-of-their-teams-on2026-10-29 https://bugbountyreports.com/reports/9623-remove-obsolete-domain-from-handbook-subdomain2026-10-29 https://bugbountyreports.com/reports/4782-removed-staff-members-who-had-manage-shops-permission-can2026-10-29 https://bugbountyreports.com/reports/8248-removed-user-can-still-view-comments-on-the-file-documents2026-10-29 https://bugbountyreports.com/reports/4148-removing-a-user-from-a-private-group-doesn-t-remove-him2026-10-29 https://bugbountyreports.com/reports/7062-removing-parts-of-url-from-jquery-request-exposes-links-for2026-10-29 https://bugbountyreports.com/reports/7785-renderers-can-obtain-access-to-random-bluetooth-device2026-10-29 https://bugbountyreports.com/reports/592-reopen-disable-accounts-hidden-access-after-disable2026-10-29 https://bugbountyreports.com/reports/4165-repeated-mediation-requests-and-multiple-emails-possible-on2026-10-29 https://bugbountyreports.com/reports/3411-replace-other-user-files-in-inbox-messages2026-10-29 https://bugbountyreports.com/reports/9963-replacing-ica-active-channel-during-the-upgrade-and-a-bit2026-10-29 https://bugbountyreports.com/reports/7043-report-bulk-endpoint-agree-on-going-public-action-may2026-10-29 https://bugbountyreports.com/reports/3106-report-design-critical-stored-dom-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/7030-report-duplicate-detector-can-match-deleted-and-draft2026-10-29 https://bugbountyreports.com/reports/2338-report-invitation-links-not-restricted-to-any-existing-user2026-10-29 https://bugbountyreports.com/reports/2967-report-private-links-leaks-to-google-analytics-via-query2026-10-29 https://bugbountyreports.com/reports/1968-report-redaction-doesn-t-apply-to-report-title-update2026-10-29 https://bugbountyreports.com/reports/589-report-title-autocompletion2026-10-29 https://bugbountyreports.com/reports/10264-reported-denial-of-service2026-10-29 https://bugbountyreports.com/reports/10263-reported-rpc-overflow2026-10-29 https://bugbountyreports.com/reports/4743-reporter-external-users-collaborators-can-mark-sent-swag2026-10-29 https://bugbountyreports.com/reports/7353-reporters-can-upload-design-to-issues-using-the-move-to2026-10-29 https://bugbountyreports.com/reports/1268-reporting-bugs2026-10-29 https://bugbountyreports.com/reports/604-reporting-user-s-profile-by-using-another-people-s-id2026-10-29 https://bugbountyreports.com/reports/4559-reports-modal-in-app-mopub-com-disclose-by-any-user2026-10-29 https://bugbountyreports.com/reports/3302-reports-breadcrumb-com-is-vulnerable-for-arbitrary-file2026-10-29 https://bugbountyreports.com/reports/6084-repositories-of-datanucleus-are-fetched-over-insecure2026-10-29 https://bugbountyreports.com/reports/8276-repositorypipeline-allows-importing-of-local-git-repos2026-10-29 https://bugbountyreports.com/reports/1486-request-accepts-without-x-csrftoken-header-cookie2026-10-29 https://bugbountyreports.com/reports/6900-request-access-for-uber-device-returns-management-platform2026-10-29 https://bugbountyreports.com/reports/562-request-hijacking-vulnerability-in-rubygems-2-4-6-and2026-10-29 https://bugbountyreports.com/reports/2778-request-hijacking-vulnerability-in-rubygems-2-6-11-and2026-10-29 https://bugbountyreports.com/reports/7396-request-line-injection-via-http-2-in-apache-mod-proxy2026-10-29 https://bugbountyreports.com/reports/9205-request-smuggling-in-apache-tomcat-important-cve-2023-456482026-10-29 https://bugbountyreports.com/reports/4595-request-smuggling-on2026-10-29 https://bugbountyreports.com/reports/5546-request-smuggling-on-admin-official-line-me-could-lead-to2026-10-29 https://bugbountyreports.com/reports/1370-requested-and-received-edit-access-to-google-form2026-10-29 https://bugbountyreports.com/reports/1435-requesting-mediation-possible-on-reports-that-are-too-old2026-10-29 https://bugbountyreports.com/reports/1636-requesting-show-checkin-alert-for-non-friend-user2026-10-29 https://bugbountyreports.com/reports/966-requesting-unknown-file-type-returns-ruby-object-w-address2026-10-29 https://bugbountyreports.com/reports/1685-researcher-gets-email-updates-on-a-private-program-after-he2026-10-29 https://bugbountyreports.com/reports/6772-reset-any-password2026-10-29 https://bugbountyreports.com/reports/6110-reset-password-cookie-leads-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/8691-reset-password-link-sent-over-unsecured-http-protocol2026-10-29 https://bugbountyreports.com/reports/2750-reset-password-more-than-once-with-a-reset-link2026-10-29 https://bugbountyreports.com/reports/2910-reset-password-more-than-once-with-a-reset-link-22026-10-29 https://bugbountyreports.com/reports/6539-reset-password-policy-isn-t-consistent-with-registration2026-10-29 https://bugbountyreports.com/reports/5349-reset-password-without-knowing-current-password2026-10-29 https://bugbountyreports.com/reports/3559-resetreportedcount-updatetags-doesn-t-verify-appid-param2026-10-29 https://bugbountyreports.com/reports/10277-residual-malicious-payloads-on-hackerone-after2026-10-29 https://bugbountyreports.com/reports/2921-resolved-bugs-in-a-program-are-public-despite-the-program2026-10-29 https://bugbountyreports.com/reports/4405-resource-consumption-dos-on-edgemax-v1-10-62026-10-29 https://bugbountyreports.com/reports/9279-resource-injection2026-10-29 https://bugbountyreports.com/reports/1433-response-header-injection-using-redirect-uri-together-with2026-10-29 https://bugbountyreports.com/reports/8922-response-manipulation-lead-to-bypass-verification-code2026-10-29 https://bugbountyreports.com/reports/8124-response-manipulation-leads-to-admin-panel-login-bypass-at2026-10-29 https://bugbountyreports.com/reports/8764-response-manipulation-leads-to-bypass-in-register-at2026-10-29 https://bugbountyreports.com/reports/3995-response-program-can-create-bounty-table2026-10-29 https://bugbountyreports.com/reports/4031-response-program-can-display-eligible-for-bounty-in-scope2026-10-29 https://bugbountyreports.com/reports/3406-response-splitting-vulnerability-in-webrick2026-10-29 https://bugbountyreports.com/reports/10062-responsible-disclosure-public-s3-bucket-exposing-json2026-10-29 https://bugbountyreports.com/reports/9030-responsive-server-side-request-forgery-ssrf2026-10-29 https://bugbountyreports.com/reports/8168-rest-api-gets-query-as-parameter-and-executes-it2026-10-29 https://bugbountyreports.com/reports/2759-restaurant-payment-information-leakage2026-10-29 https://bugbountyreports.com/reports/476-restrict-any-user-from-logging-into-his-account2026-10-29 https://bugbountyreports.com/reports/9472-restrict-any-user-from-login-to-their-account2026-10-29 https://bugbountyreports.com/reports/10431-restricted-rpc-leaks-alternative-block-hashes-via-get-alt2026-10-29 https://bugbountyreports.com/reports/10469-restricted-rpc-policy-bypass-on-zmq-json-rpc-allows2026-10-29 https://bugbountyreports.com/reports/10547-restricted-zmq-rpc-bypasses-http-restricted-mode-resource2026-10-29 https://bugbountyreports.com/reports/327-resubmitted-with-poc-18685-password-reset-csrf2026-10-29 https://bugbountyreports.com/reports/8660-retrospective-change-of-message-timestamp-and-order2026-10-29 https://bugbountyreports.com/reports/10616-retry-independent-time-condition-http-2-uaf2026-10-29 https://bugbountyreports.com/reports/9938-returnurl-allow-attacker-to-redirect-users-to-the-another2026-10-29 https://bugbountyreports.com/reports/1585-reverb-twitter-com-redirects-to-vulnerable-reverb-guru2026-10-29 https://bugbountyreports.com/reports/4092-reverse-proxy-misroute-leading-to-steal-x-shopify-access2026-10-29 https://bugbountyreports.com/reports/2372-reverse-tab-nabbing-at-www-instacart-com-store-partner2026-10-29 https://bugbountyreports.com/reports/1960-review-remote-code-execution-in-swiftmailer2026-10-29 https://bugbountyreports.com/reports/9165-revocation-api-token-by-bypassing-the-xsrf-token2026-10-29 https://bugbountyreports.com/reports/6729-revoked-user-can-still-view-the-merge-request-created-by2026-10-29 https://bugbountyreports.com/reports/3929-revoking-user-session-in-https-hackerone-com-settings2026-10-29 https://bugbountyreports.com/reports/8649-richtext-parser-vulnerability-in-scheduled-posts-allows-xss2026-10-29 https://bugbountyreports.com/reports/8804-rider-can-forcefully-get-passenger-s-order-accepted2026-10-29 https://bugbountyreports.com/reports/4188-ringct-malformed-tx-prevents-target-from-being-able-to2026-10-29 https://bugbountyreports.com/reports/984-risk-of-having-secure-false-in-a-crossdomain-xml2026-10-29 https://bugbountyreports.com/reports/9438-rocket-chat-desktop-client-fails-to-open-browser-on-3rd2026-10-29 https://bugbountyreports.com/reports/8532-rocket-chat-server-rce2026-10-29 https://bugbountyreports.com/reports/8175-rocket-chat-user-info-security-issue2026-10-29 https://bugbountyreports.com/reports/9092-rogue-collaborators-and-ambiguous-branch-names-in-github2026-10-29 https://bugbountyreports.com/reports/4564-root-remote-code-execution-on-https2026-10-29 https://bugbountyreports.com/reports/4396-root-user-disclosure-in-data-gov-domain-though-x-amz-meta2026-10-29 https://bugbountyreports.com/reports/6822-round-trip-instability-in-rexml2026-10-29 https://bugbountyreports.com/reports/4931-roundcube-virtualmin-privilege-escalation-cve-2017-81142026-10-29 https://bugbountyreports.com/reports/10190-roundcube-webmail-style-sanitizer-can-be-bypassed-using-css2026-10-29 https://bugbountyreports.com/reports/5532-rounding-errors-on-rewarding-a-bounty-leads-to-bypassing2026-10-29 https://bugbountyreports.com/reports/6518-route53-subdomain-takeover-on-test-cncf-aws-canary-k8s-io2026-10-29 https://bugbountyreports.com/reports/8066-rpc-call-crashes-node2026-10-29 https://bugbountyreports.com/reports/6582-rpc-implementation-allows-unauthenticated-remote-calls2026-10-29 https://bugbountyreports.com/reports/9909-rpc-service-dos2026-10-29 https://bugbountyreports.com/reports/4694-rpcbind-rpcbomb-cve-2017-8779-cve-2017-88042026-10-29 https://bugbountyreports.com/reports/382-rsync-hash-collisions-may-allow-an-attacker-to-corrupt-or2026-10-29 https://bugbountyreports.com/reports/575-rtl-override-symbol-not-stripped-from-file-names2026-10-29 https://bugbountyreports.com/reports/1985-rtlo-char-allowed-in-chat2026-10-29 https://bugbountyreports.com/reports/7452-ruby-regular-expression-denial-of-service-vulnerability-of2026-10-29 https://bugbountyreports.com/reports/2963-ruby-2-3-x-and-2-2-x-still-bundle-dos-vulnerable-verision2026-10-29 https://bugbountyreports.com/reports/7592-ruby-cve-2021-41819-cookie-prefix-spoofing-in-cgi-cookie2026-10-29 https://bugbountyreports.com/reports/1853-ruby-dos-https-www-mruby-science2026-10-29 https://bugbountyreports.com/reports/4562-ruby-is-shipping-a-vulnerable-jquery2026-10-29 https://bugbountyreports.com/reports/6692-ruby-openssl-library-iv-reuse-in-gcm-mode2026-10-29 https://bugbountyreports.com/reports/2-ruby-heap-overflow-in-floating-point-parsing2026-10-29 https://bugbountyreports.com/reports/8615-ruby-s-cgi-library-has-http-response-splitting-http-header2026-10-29 https://bugbountyreports.com/reports/7994-rubygems-org-batching-attack-to-confirmation-token-by2026-10-29 https://bugbountyreports.com/reports/8314-ruby-cgi-http-http2026-10-29 https://bugbountyreports.com/reports/2312-running-2-accounts-with-a-single-email2026-10-29 https://bugbountyreports.com/reports/2911-running-2-accounts-with-a-single-email-part-22026-10-29 https://bugbountyreports.com/reports/3649-running-2-accounts-with-a-single-email-32026-10-29 https://bugbountyreports.com/reports/7355-rxss2026-10-29 https://bugbountyreports.com/reports/7497-rxss-http-macademy-mtnonline-com2026-10-29 https://bugbountyreports.com/reports/6707-rxss-https2026-10-29 https://bugbountyreports.com/reports/7356-rxss-https2026-10-29 https://bugbountyreports.com/reports/5643-rxss-at-https-mackeeper-com-page-not-found-via-rid-parameter2026-10-29 https://bugbountyreports.com/reports/9965-rxss-at-https-proze-yelp-com-tmsubscribe-net-vidsn-aspx2026-10-29 https://bugbountyreports.com/reports/8875-rxss-at-image-hackerone-live-via-the-url-parameter2026-10-29 https://bugbountyreports.com/reports/9695-rxss-in-via-s-parameter2026-10-29 https://bugbountyreports.com/reports/9319-rxss-in-hidden-parameter2026-10-29 https://bugbountyreports.com/reports/5354-rxss-in-http-procurement-businesscatalog-informatica-com2026-10-29 https://bugbountyreports.com/reports/10100-rxss-in-https-jp-mcafee-com-apps-mdm-jp-3-0-asp2026-10-29 https://bugbountyreports.com/reports/5636-rxss-on-landings-123-1-index-php-mackeeperapp-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/9710-rxss-on-via-configurl-parameter2026-10-29 https://bugbountyreports.com/reports/9700-rxss-on-via-q-parameter2026-10-29 https://bugbountyreports.com/reports/9990-rxss-on-via-customerid-parameter2026-10-29 https://bugbountyreports.com/reports/8112-rxss-on2026-10-29 https://bugbountyreports.com/reports/7907-rxss-on2026-10-29 https://bugbountyreports.com/reports/8116-rxss-on2026-10-29 https://bugbountyreports.com/reports/7516-rxss-on-via-logout-service-javascript-alert-12026-10-29 https://bugbountyreports.com/reports/7618-rxss-on-https2026-10-29 https://bugbountyreports.com/reports/7662-rxss-on-https-equifax-gr8people-com-on-password-reset-page2026-10-29 https://bugbountyreports.com/reports/7042-rxss-on-https-mackeeperapp-mackeeper-com-landings-download2026-10-29 https://bugbountyreports.com/reports/8539-rxss-on-https-travel-state-gov-content-travel-en-search-html2026-10-29 https://bugbountyreports.com/reports/5639-rxss-on-landings-land-3-ron-clean-17-app3-alerts-index-php2026-10-29 https://bugbountyreports.com/reports/10013-rxss-on-stores-on-visitorregistration-pml-via-destination2026-10-29 https://bugbountyreports.com/reports/5635-rxss-on-thankyou-pixels-php-yapi-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/9145-rxss-on-tiktok-endpoints2026-10-29 https://bugbountyreports.com/reports/5638-rxss-on-unsubscribe-feature-affiliates-kromtech-com2026-10-29 https://bugbountyreports.com/reports/5110-rxss-to-stored-xss-forums-pubg-com-url-parameter2026-10-29 https://bugbountyreports.com/reports/9144-rxss-via-region-parameter2026-10-29 https://bugbountyreports.com/reports/7357-rxss-via-uri-path-https2026-10-29 https://bugbountyreports.com/reports/922-s2-owncloud-com-ssl-session-cookie-without-secure-flag-set2026-10-29 https://bugbountyreports.com/reports/934-s2-owncloud-com-web-server-http-trace-track-method-support2026-10-29 https://bugbountyreports.com/reports/5868-s3-bucket-data-at-http-rockset-support-s3-us-west-22026-10-29 https://bugbountyreports.com/reports/7196-s3-bucket-listing-download2026-10-29 https://bugbountyreports.com/reports/8665-s3-bucket-takeover-brave-apt2026-10-29 https://bugbountyreports.com/reports/8666-s3-bucket-takeover-brave-browser-rpm-staging-release-test2026-10-29 https://bugbountyreports.com/reports/8399-s3-bucket-takeover-learn2-khanacademy-org2026-10-29 https://bugbountyreports.com/reports/9405-s3-bucket-takeover-on-apptio-endpoint2026-10-29 https://bugbountyreports.com/reports/7371-s3-bucket-takeover-presented-in-https-github-com-reddit2026-10-29 https://bugbountyreports.com/reports/4201-s3-bucket-unnecessarily-discloses-permissions2026-10-29 https://bugbountyreports.com/reports/968-s3-buckets-open-to-the-world-thanks-to-authenticated-users2026-10-29 https://bugbountyreports.com/reports/4111-saas-admin-can-modify-delete-get-user-information2026-10-29 https://bugbountyreports.com/reports/6015-safe-redirect-bypass2026-10-29 https://bugbountyreports.com/reports/6183-safeparamshelper-safe-params-is-not-so-safe2026-10-29 https://bugbountyreports.com/reports/9831-sale-cancellations-from-other-sellers-without-restrictions2026-10-29 https://bugbountyreports.com/reports/25-same-origin-security-bypass-vulnerability2026-10-29 https://bugbountyreports.com/reports/5124-same-site-scripting2026-10-29 https://bugbountyreports.com/reports/7777-same-the-url2026-10-29 https://bugbountyreports.com/reports/251-same-user-name-and-uuid-for-multiple-user-names2026-10-29 https://bugbountyreports.com/reports/1152-same-origin-policy-bypass-22026-10-29 https://bugbountyreports.com/reports/1153-same-origin-policy-bypass-on-main-domain-ok-ru2026-10-29 https://bugbountyreports.com/reports/10044-samesite-restrictions-are-lifted-and-samesite-strict-cookie2026-10-29 https://bugbountyreports.com/reports/5685-saml-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/2801-saml-authentication-bypass-on-uchat-uberinternal-com2026-10-29 https://bugbountyreports.com/reports/6437-saml-authentication-bypass-through-unauthenticated2026-10-29 https://bugbountyreports.com/reports/5820-saml-response-reuse-on-hackerone-com-users-saml-auth2026-10-29 https://bugbountyreports.com/reports/9637-saml-signature-verification-bypass-allows-logging-into-any2026-10-29 https://bugbountyreports.com/reports/3827-samlify-is-vulnerable-to-signature-wrapping2026-10-29 https://bugbountyreports.com/reports/9996-sample-report-denial-of-service2026-10-29 https://bugbountyreports.com/reports/10441-sandbox-user-can-inject-rogue-ca-certificate-into-os-trust2026-10-29 https://bugbountyreports.com/reports/496-sandboxed-iframes-don-t-show-confirmation-screen2026-10-29 https://bugbountyreports.com/reports/1989-sap-server-default-credentials-enabled2026-10-29 https://bugbountyreports.com/reports/2600-sauce-access-key-and-user-name-leaked-in-travis-ci-build2026-10-29 https://bugbountyreports.com/reports/7587-saving-christmas-from-grinchy-gods2026-10-29 https://bugbountyreports.com/reports/3005-saying-goodbye-to-hackerone-and-gratipay2026-10-29 https://bugbountyreports.com/reports/8543-scope-information-is-leaked-when-visiting-policy-scopes-tab2026-10-29 https://bugbountyreports.com/reports/7083-scoped-apptokens-can-be-changed-by-that-very-apptoken2026-10-29 https://bugbountyreports.com/reports/6602-screenshot-service-leaks-x-abs-app-token2026-10-29 https://bugbountyreports.com/reports/5964-script-editor-preview-token-still-working-with-uninstalled2026-10-29 https://bugbountyreports.com/reports/5327-scripts-loader-denial-of-service-vulnerability2026-10-29 https://bugbountyreports.com/reports/5261-scripts-loader-dos-vulnerability2026-10-29 https://bugbountyreports.com/reports/2944-scrollbar-width-permits-detecting-browser-platform2026-10-29 https://bugbountyreports.com/reports/5252-sdrc-starbucks-com-information-disclosure-via-unsecured2026-10-29 https://bugbountyreports.com/reports/2998-search-query-text-including-from-potentially-undisclosed2026-10-29 https://bugbountyreports.com/reports/4787-searching-from-hacktivity-returns-hits-for-words-in-limited2026-10-29 https://bugbountyreports.com/reports/6627-second-order-xss-via2026-10-29 https://bugbountyreports.com/reports/7011-second-order-soql-injection-through-email-and-campaign-name2026-10-29 https://bugbountyreports.com/reports/10098-second-order-xss-via-javascript-protocol-in-mcp-server2026-10-29 https://bugbountyreports.com/reports/10123-secret-access-key-of-aws-firehose-disclosure2026-10-29 https://bugbountyreports.com/reports/8387-secret-api-key-is-logged-in-cleartext2026-10-29 https://bugbountyreports.com/reports/300-secret-app-for-ios-and-android-is-sending-some-info-over2026-10-29 https://bugbountyreports.com/reports/6325-secret-leaks-in-vsphere-cloud-controller-manager-log2026-10-29 https://bugbountyreports.com/reports/9083-secrets-can-be-unmasked-in-the-rendered-template2026-10-29 https://bugbountyreports.com/reports/9744-secrets-not-masked-in-ui-when-sensitive-variables-are-set2026-10-29 https://bugbountyreports.com/reports/8601-secure-view-trivial-to-bypass2026-10-29 https://bugbountyreports.com/reports/1881-securing-reset-password-pages-from-bots2026-10-29 https://bugbountyreports.com/reports/110-securing-sensitive-pages-from-searchbots2026-10-29 https://bugbountyreports.com/reports/9047-security-bug-https-bugzilla-mozilla-org-oauth-authorize2026-10-29 https://bugbountyreports.com/reports/47-security-bypass-could-lead-to-information-disclosure2026-10-29 https://bugbountyreports.com/reports/4219-security-check-failure-or-stack-buffer-overrun-crash2026-10-29 https://bugbountyreports.com/reports/4113-security-headers-missed-on-https-acme-validation-jamieweb2026-10-29 https://bugbountyreports.com/reports/1391-security-issue-csrf-token-design-flaw2026-10-29 https://bugbountyreports.com/reports/8439-security-issue-into-wallet-lock-protection2026-10-29 https://bugbountyreports.com/reports/7854-security-misconfiguration2026-10-29 https://bugbountyreports.com/reports/8769-security-token-and-handler-name-leak-from-window2026-10-29 https://bugbountyreports.com/reports/8616-security-unfavorable-specifications-and-implementations-in2026-10-29 https://bugbountyreports.com/reports/1250-security-vulnerability-smtp-protection-not-used2026-10-29 https://bugbountyreports.com/reports/2443-security-vulnerability-smtp-protection-not-used2026-10-29 https://bugbountyreports.com/reports/3066-security-publicly-accessible-x-509-public-and-private-key2026-10-29 https://bugbountyreports.com/reports/1130-security-referencing-previous-reports-attachment-ids-on-new2026-10-29 https://bugbountyreports.com/reports/6256-security-email-forwarding-and-embedded-submission-drafts2026-10-29 https://bugbountyreports.com/reports/4178-securitytemplate-site-domain-hijack2026-10-29 https://bugbountyreports.com/reports/9386-see-card-comments-after-remove-shared-board2026-10-29 https://bugbountyreports.com/reports/3213-see-details-of-a-unpublished-word-by-guessing-the-word-id2026-10-29 https://bugbountyreports.com/reports/7528-see-drafts-and-post-articles-if-the-account-owner-hasn-t2026-10-29 https://bugbountyreports.com/reports/1675-seemingly-sensitive-information-at-api-v2-zones2026-10-29 https://bugbountyreports.com/reports/1986-segafult-in-mruby-s-sprintf-mrb-str-format2026-10-29 https://bugbountyreports.com/reports/1758-segfault-and-or-potential-unwanted-byte-code-execution-with2026-10-29 https://bugbountyreports.com/reports/1759-segfault-in-mruby-mruby-engine-and-the-parent-mri-ruby-due2026-10-29 https://bugbountyreports.com/reports/1785-segfault-when-passing-invalid-values-to-values-at2026-10-29 https://bugbountyreports.com/reports/2013-segmentation-fault-mrb-gc-mark2026-10-29 https://bugbountyreports.com/reports/1778-segmentation-fault-due-to-bad-memory-access-in-kh-get-mt2026-10-29 https://bugbountyreports.com/reports/472-segmentation-fault-for-invalid-pss-parameters2026-10-29 https://bugbountyreports.com/reports/1891-segmentation-fault-on-program-counter2026-10-29 https://bugbountyreports.com/reports/2144-segmentation-fault-when-a-ruby-method-is-invoked-by-a-c2026-10-29 https://bugbountyreports.com/reports/2023-segmentation-fault-while-printing-backtrace2026-10-29 https://bugbountyreports.com/reports/1975-segmentfault-at-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/3170-segv-on-ary-concat2026-10-29 https://bugbountyreports.com/reports/4675-seh-buffer-overflow-msgfmt-format-message2026-10-29 https://bugbountyreports.com/reports/10425-select-into-outfile-does-not-enforce-the-file-write2026-10-29 https://bugbountyreports.com/reports/4753-select-colors-write-out-of-bounds2026-10-29 https://bugbountyreports.com/reports/3873-self-dom-based-xss-in-www-hackerone-com2026-10-29 https://bugbountyreports.com/reports/7048-self-stored-xss-login-csrf2026-10-29 https://bugbountyreports.com/reports/5386-self-xss2026-10-29 https://bugbountyreports.com/reports/6040-self-xss2026-10-29 https://bugbountyreports.com/reports/9465-self-xss2026-10-29 https://bugbountyreports.com/reports/6749-self-xss-csrf-leads-to-reflected-xss-in-https2026-10-29 https://bugbountyreports.com/reports/2299-self-xss-at-translation-page-through-editor-link-at-demo2026-10-29 https://bugbountyreports.com/reports/5572-self-xss-combine-csrf-at-https-index-php2026-10-29 https://bugbountyreports.com/reports/7887-self-xss-in-attachments-name2026-10-29 https://bugbountyreports.com/reports/7638-self-xss-in-create-new-workspace-screen2026-10-29 https://bugbountyreports.com/reports/8217-self-xss-in-https-linkpop-com-dashboard-admin2026-10-29 https://bugbountyreports.com/reports/6288-self-xss-in-product-reviews2026-10-29 https://bugbountyreports.com/reports/9311-self-xss-in-tag-name-pattern-field-settings-tag-protection2026-10-29 https://bugbountyreports.com/reports/5963-self-xss-in-timeline2026-10-29 https://bugbountyreports.com/reports/7035-self-xss-on-acronis-cyber-cloud2026-10-29 https://bugbountyreports.com/reports/652-self-xss-on-file-replace2026-10-29 https://bugbountyreports.com/reports/727-self-xss-protection-not-used-i-can-trick-users-to-insert2026-10-29 https://bugbountyreports.com/reports/9111-self-xss-when-pasting-html-into-text-app-with-ctrl-shift-v2026-10-29 https://bugbountyreports.com/reports/9160-self-xss-when-sending-html-as-a-comment-in-the-deck-app2026-10-29 https://bugbountyreports.com/reports/4335-self-stored-xss-chained-with-login-logout-csrf2026-10-29 https://bugbountyreports.com/reports/3143-self-xss-ads-easy-promote-vk-com2026-10-29 https://bugbountyreports.com/reports/2395-self-xss-can-be-achieved-in-the-editor-link-using-filter2026-10-29 https://bugbountyreports.com/reports/8467-self-xss-due-to-image-url-can-be-eploited-via-xssjacking2026-10-29 https://bugbountyreports.com/reports/937-self-xss-in-mails-sent-by-hello-owncloud-com2026-10-29 https://bugbountyreports.com/reports/3039-self-xss-in-password-reset-functionality2026-10-29 https://bugbountyreports.com/reports/811-self-xss-in-posts-by-formatting-text-as-code2026-10-29 https://bugbountyreports.com/reports/3028-self-xss-in-wordpress-editor-link-modal2026-10-29 https://bugbountyreports.com/reports/6262-self-xss-with-clickjacking-can-leads-to-account-takeover-in2026-10-29 https://bugbountyreports.com/reports/824-send-ajax-request-to-external-domain2026-10-29 https://bugbountyreports.com/reports/5828-send-arbitrary-put-requests-when-user-clicks-on-a-link2026-10-29 https://bugbountyreports.com/reports/2055-send-email-asynchronously2026-10-29 https://bugbountyreports.com/reports/6108-send-empty-csrf-leads-to-log-out-user-on-https-hosted2026-10-29 https://bugbountyreports.com/reports/5869-send-phishing-spam-email-from-support-sameroom-io-to-any2026-10-29 https://bugbountyreports.com/reports/3701-sending-arbitrary-ipc-messages-via-overriding-function2026-10-29 https://bugbountyreports.com/reports/7606-sending-arbitrary-requests-through-jupyter-notebooks-on2026-10-29 https://bugbountyreports.com/reports/1032-sending-emails-via-hackerone-impersonating-other-users2026-10-29 https://bugbountyreports.com/reports/1103-sending-payments-via-qr-code-does-not-require-confirmation2026-10-29 https://bugbountyreports.com/reports/6805-sending-trusted-and-emails-through-public-api-endpoint-in2026-10-29 https://bugbountyreports.com/reports/587-sendmail-remote-code-execution-vulnerability-in-concrete52026-10-29 https://bugbountyreports.com/reports/8039-sensei-lms-idor-to-send-message2026-10-29 https://bugbountyreports.com/reports/7422-senseitive-data-related-to-shopify-host-https-shopify2026-10-29 https://bugbountyreports.com/reports/5603-sensitive-data-disclosure-via-exposed-phpunit-file2026-10-29 https://bugbountyreports.com/reports/8515-sensitive-data-exposure-at-https2026-10-29 https://bugbountyreports.com/reports/9735-sensitive-data-exposure-via-secure-endpoint-on2026-10-29 https://bugbountyreports.com/reports/7807-sensitive-data-exposure-via-secure-querycomponent-default2026-10-29 https://bugbountyreports.com/reports/6495-sensitive-data-exposure-via-https-secure-querycomponent2026-10-29 https://bugbountyreports.com/reports/7276-sensitive-data-exposure-via-https-jira-secure2026-10-29 https://bugbountyreports.com/reports/6496-sensitive-data-exposure-via-https-secure-querycomponent2026-10-29 https://bugbountyreports.com/reports/6125-sensitive-data-exposure-via-https-mil-secure-querycomponent2026-10-29 https://bugbountyreports.com/reports/8705-sensitive-data-exposure-via-wp-config-php-file2026-10-29 https://bugbountyreports.com/reports/9734-sensitive-data-exposure-candidate-resumes-cvs-available-to2026-10-29 https://bugbountyreports.com/reports/9694-sensitive-data-creds-for-database-private-key2026-10-29 https://bugbountyreports.com/reports/4995-sensitive-email-disclosure-due-to-insecure-reactivate2026-10-29 https://bugbountyreports.com/reports/92-sensitive-file2026-10-29 https://bugbountyreports.com/reports/7865-sensitive-files-data-exists-post-deletion-of-user-account2026-10-29 https://bugbountyreports.com/reports/10153-sensitive-images-files-exposed-through-directory-listing2026-10-29 https://bugbountyreports.com/reports/6146-sensitive-info-leak-an-attacker-can-retrieve-all-the-users2026-10-29 https://bugbountyreports.com/reports/6043-sensitive-information-about-a2026-10-29 https://bugbountyreports.com/reports/5219-sensitive-information-disclosure2026-10-29 https://bugbountyreports.com/reports/5938-sensitive-information-disclosure2026-10-29 https://bugbountyreports.com/reports/8636-sensitive-information-disclosure2026-10-29 https://bugbountyreports.com/reports/8510-sensitive-information-disclosure-htus2026-10-29 https://bugbountyreports.com/reports/2894-sensitive-information-disclosure-https-cards-dev-twitter-com2026-10-29 https://bugbountyreports.com/reports/9242-sensitive-information-disclosure-on-grafana2026-10-29 https://bugbountyreports.com/reports/8088-sensitive-information-disclosure-through-config-file2026-10-29 https://bugbountyreports.com/reports/6535-sensitive-information-disclosure-to-shared-access-user-via2026-10-29 https://bugbountyreports.com/reports/9842-sensitive-information-disclosure-via-back-button-post2026-10-29 https://bugbountyreports.com/reports/10222-sensitive-information-exposed-at-via-export-panelists-to2026-10-29 https://bugbountyreports.com/reports/9189-sensitive-information-exposed-at2026-10-29 https://bugbountyreports.com/reports/8625-sensitive-information-for-phpinfo-php-at-https-products-ean2026-10-29 https://bugbountyreports.com/reports/2991-sensitive-information-is-publicly-available2026-10-29 https://bugbountyreports.com/reports/5510-sensitive-information-leaking-through-darpa-website2026-10-29 https://bugbountyreports.com/reports/6561-sensitive-information-leaking-through-dod-owned-website2026-10-29 https://bugbountyreports.com/reports/5464-sensitive-information-leaking-through-dod-owned-website2026-10-29 https://bugbountyreports.com/reports/5511-sensitive-information-leaking-through-navy-website2026-10-29 https://bugbountyreports.com/reports/6691-sensitive-information-of-helpdesk-is-being-leaked2026-10-29 https://bugbountyreports.com/reports/7218-sensitive-information-on2026-10-29 https://bugbountyreports.com/reports/7219-sensitive-information-on2026-10-29 https://bugbountyreports.com/reports/4308-sensitive-information-action-is-stored-done-is-done-using-a2026-10-29 https://bugbountyreports.com/reports/4494-sensitive-user-information-disclosure-at-bonjour-uber-com2026-10-29 https://bugbountyreports.com/reports/9647-sentry-auth-token-exposed-publicly-in-docker-hub-image2026-10-29 https://bugbountyreports.com/reports/1155-server-and-php-version-disclosed-in-response-header2026-10-29 https://bugbountyreports.com/reports/10581-server-crash-stack-overflow-dos-via-unbounded-recursion-in2026-10-29 https://bugbountyreports.com/reports/173-server-header-information-disclosure2026-10-29 https://bugbountyreports.com/reports/3972-server-header-disclose-the-os-and-web-server-version2026-10-29 https://bugbountyreports.com/reports/836-server-responds-with-the-server-error-logs-on-account2026-10-29 https://bugbountyreports.com/reports/2385-server-side-information-disclosure-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4563-server-side-javascript-code-injection2026-10-29 https://bugbountyreports.com/reports/6741-server-side-request-forgery2026-10-29 https://bugbountyreports.com/reports/6761-server-side-request-forgery2026-10-29 https://bugbountyreports.com/reports/9187-server-side-request-forgery-ssrf-in-webhook-functionality2026-10-29 https://bugbountyreports.com/reports/9101-server-side-request-forgery-ssrf-via-analytics-reports2026-10-29 https://bugbountyreports.com/reports/2706-server-side-request-forgery-ssrf-vulnerability-in-a-dod2026-10-29 https://bugbountyreports.com/reports/6386-server-side-request-forgery-in-jabber-settings-in-admin2026-10-29 https://bugbountyreports.com/reports/5291-server-side-request-forgery-in-uppy-npm-module2026-10-29 https://bugbountyreports.com/reports/5411-server-side-request-forgery-mitigation-bypass2026-10-29 https://bugbountyreports.com/reports/1609-server-side-request-forgery-on-image-upload-for-lists2026-10-29 https://bugbountyreports.com/reports/3104-server-side-request-forgery-on-json-feed2026-10-29 https://bugbountyreports.com/reports/7981-server-side-template-injection-on-name-parameter-during2026-10-29 https://bugbountyreports.com/reports/1804-server-version-disclosure2026-10-29 https://bugbountyreports.com/reports/1750-server-version-dislosure2026-10-29 https://bugbountyreports.com/reports/1284-server-version-is-disclosure-in-http-leasewebnoc-com2026-10-29 https://bugbountyreports.com/reports/3068-server-side-cache-poisoning-leads-to-the-http-my-dev-owox2026-10-29 https://bugbountyreports.com/reports/2556-server-side-include-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/8820-server-side-rce-through-directory-traversal-based-arbitrary2026-10-29 https://bugbountyreports.com/reports/10251-server-side-redos-via-user-controlled-regex-in-oidc-access2026-10-29 https://bugbountyreports.com/reports/5010-server-side-request-forgery-ssrf2026-10-29 https://bugbountyreports.com/reports/5297-server-side-request-forgery-ssrf-in-ghost-cms2026-10-29 https://bugbountyreports.com/reports/9936-server-side-request-forgery-ssrf-via-game-export-api2026-10-29 https://bugbountyreports.com/reports/5876-server-side-request-forgery-in-icons-bitwarden-net2026-10-29 https://bugbountyreports.com/reports/5051-server-side-request-forgery-in-new-subscription-feature-of2026-10-29 https://bugbountyreports.com/reports/4112-server-side-request-forgery-on-saml-application-import-via2026-10-29 https://bugbountyreports.com/reports/6328-server-side-request-forgery-using-javascript-allows-to2026-10-29 https://bugbountyreports.com/reports/6619-server-side-template-injection-at-ujs-test-server2026-10-29 https://bugbountyreports.com/reports/6991-serverinfo-endpoints-are-not-bruteforce-protected-nor-are2026-10-29 https://bugbountyreports.com/reports/162-session-cookie-can-be-leaked-over-an-unencrypted-http2026-10-29 https://bugbountyreports.com/reports/10243-session-cookie-leakage-via-static-header-field-in2026-10-29 https://bugbountyreports.com/reports/3418-session-cookie-missing-secureflag-on-git-edoverflow-com2026-10-29 https://bugbountyreports.com/reports/9249-session-doesn-t-expire-after-2fa-and-also-other-session-can2026-10-29 https://bugbountyreports.com/reports/1291-session-fixation2026-10-29 https://bugbountyreports.com/reports/109-session-fixation-found2026-10-29 https://bugbountyreports.com/reports/3834-session-fixation-in-password-protected-public-download2026-10-29 https://bugbountyreports.com/reports/6992-session-fixation-on-public-talk-links2026-10-29 https://bugbountyreports.com/reports/7293-session-fixiation-allow-attacker-to-create-new-evil2026-10-29 https://bugbountyreports.com/reports/6520-session-hijack-via-self-xss2026-10-29 https://bugbountyreports.com/reports/7028-session-hijacking-leads-to-full-control-of-account-by2026-10-29 https://bugbountyreports.com/reports/3762-session-id-is-accessible-via-xss2026-10-29 https://bugbountyreports.com/reports/2297-session-id-missing-secure-flag-hosted-website2026-10-29 https://bugbountyreports.com/reports/10333-session-id-reuse-allowing-xml-rpc-api-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/4785-session-is-not-expire-after-logout2026-10-29 https://bugbountyreports.com/reports/967-session-issue-maybe-can-lead-to-huge-loss-critical2026-10-29 https://bugbountyreports.com/reports/102-session-management2026-10-29 https://bugbountyreports.com/reports/6252-session-misconfiguration-on-change-password-feature-at2026-10-29 https://bugbountyreports.com/reports/6253-session-misconfiguration-on-forget-password-feature-at2026-10-29 https://bugbountyreports.com/reports/8618-session-mismatch-leading-to-potential-account-takeover2026-10-29 https://bugbountyreports.com/reports/101-session-not-expired-on-logout2026-10-29 https://bugbountyreports.com/reports/204-session-not-invalidated-after-password-reset2026-10-29 https://bugbountyreports.com/reports/5905-session-not-invalidated-after-password-reset2026-10-29 https://bugbountyreports.com/reports/2490-session-replay-vulnerability-in-www-urbandictionary-com2026-10-29 https://bugbountyreports.com/reports/7249-session-takeover-via-open-protocol-redirection-on2026-10-29 https://bugbountyreports.com/reports/142-session-token-is-not-verified-while-changing-account2026-10-29 https://bugbountyreports.com/reports/207-session-token-is-not-verified-while-changing-account2026-10-29 https://bugbountyreports.com/reports/4646-session-wddx-packet-deserialization-type-confusion2026-10-29 https://bugbountyreports.com/reports/5357-session-works-after-logout-from-shopify-account2026-10-29 https://bugbountyreports.com/reports/5431-session-works-after-logout-from-shopify-account-and2026-10-29 https://bugbountyreports.com/reports/2313-setting-a-password-with-a-single-character2026-10-29 https://bugbountyreports.com/reports/2756-setting-arbitrary-cookie-at-kitcrm-com2026-10-29 https://bugbountyreports.com/reports/9268-setuid-does-not-drop-all-privileges-due-to-io-uring2026-10-29 https://bugbountyreports.com/reports/6917-several-domains-on-kaspersky-com-are-vulnerable-to-web2026-10-29 https://bugbountyreports.com/reports/7205-several-protocol-parsers-in-before-4-9-2-could-cause-a2026-10-29 https://bugbountyreports.com/reports/5248-several-simple-remote-code-execution-in-pdf-image2026-10-29 https://bugbountyreports.com/reports/1398-several-xss-affecting-zomato-com-and-developers-zomato-com2026-10-29 https://bugbountyreports.com/reports/6883-sha512-incorrect-on-most-many-releases2026-10-29 https://bugbountyreports.com/reports/9688-share-information-of-tables-app-is-not-limited-to-affected2026-10-29 https://bugbountyreports.com/reports/1747-share-owner-has-no-possibility-to-list-all-existing-derived2026-10-29 https://bugbountyreports.com/reports/5170-share-recipient-can-modify-a-share-s-expiration-date2026-10-29 https://bugbountyreports.com/reports/2416-share-tokens-for-public-calendars-disclosed-nc-sa-2017-0112026-10-29 https://bugbountyreports.com/reports/746-share-your-channel-to-any-user-on-vimeo-without-following2026-10-29 https://bugbountyreports.com/reports/3736-shared-file-link-password-protection-bypass-under-certain2026-10-29 https://bugbountyreports.com/reports/10544-shared-smart-albums-in-the-photos-app-can-expose-files2026-10-29 https://bugbountyreports.com/reports/3388-shared-channel-beta-persists-integration-after-unshare2026-10-29 https://bugbountyreports.com/reports/5002-sharepoint-exposed-web-services2026-10-29 https://bugbountyreports.com/reports/5003-sharepoint-exposed-web-services2026-10-29 https://bugbountyreports.com/reports/5538-sharepoint-exposed-web-services-in-a-subdomain2026-10-29 https://bugbountyreports.com/reports/6312-sharepoint-web-services-exposed-to-anonymous-access2026-10-29 https://bugbountyreports.com/reports/6313-sharepoint-web-services-exposed-to-anonymous-access2026-10-29 https://bugbountyreports.com/reports/5787-sharepoint-web-services-exposed-to-anonymous-access-users2026-10-29 https://bugbountyreports.com/reports/6842-sharing-products-with-mail-allows-phishing-attacks-due-to2026-10-29 https://bugbountyreports.com/reports/9503-shell-command-injection-in-https-partner-steamgames-com2026-10-29 https://bugbountyreports.com/reports/9501-shell-command-injection-in-https-partner-steamgames-com2026-10-29 https://bugbountyreports.com/reports/9502-shell-command-injection-in-https-partner-steamgames-com2026-10-29 https://bugbountyreports.com/reports/1618-shell-injection-via-web-management-console-dl-fw-cgi2026-10-29 https://bugbountyreports.com/reports/8131-shop-reflected-xss-with-clickjacking-leads-to-steal-user-s2026-10-29 https://bugbountyreports.com/reports/753-shop-admin-can-change-external-login-services2026-10-29 https://bugbountyreports.com/reports/8530-shop-app-attacker-is-able-to-intercept-authorization-code2026-10-29 https://bugbountyreports.com/reports/2890-shopify-admin-authentication-bypass-using-partners-shopify2026-10-29 https://bugbountyreports.com/reports/635-shopify-android-client-all-api-request-s-response-leakage2026-10-29 https://bugbountyreports.com/reports/2427-shopify-github-login-and-password-exposed-all-private2026-10-29 https://bugbountyreports.com/reports/9907-shopify-partners-invitation-process-allows-privilege2026-10-29 https://bugbountyreports.com/reports/5049-shopify-stocky-app-oauth-misconfiguration2026-10-29 https://bugbountyreports.com/reports/7370-shopify-com-web-cache-deception-vulnerability-leads-to2026-10-29 https://bugbountyreports.com/reports/4777-shopify-s-sf-and-la-offices-dashboard-information-disclosed2026-10-29 https://bugbountyreports.com/reports/2510-shopifyapi-is-vulnerable-to-timing-attacks2026-10-29 https://bugbountyreports.com/reports/867-shopifyapps-com-xss-on-sales-channels-via-currency2026-10-29 https://bugbountyreports.com/reports/1550-shopper-login-code-s-can-be-brute-forced2026-10-29 https://bugbountyreports.com/reports/7460-sidekiq-dashboard-exposed-at-notary-shopifycloud-com2026-10-29 https://bugbountyreports.com/reports/3831-sidekiq-web-ui-ruby-background-processing-accessible2026-10-29 https://bugbountyreports.com/reports/2249-sigabrt-in-free2026-10-29 https://bugbountyreports.com/reports/2095-sigabrt-method-missing-mark-context-stack2026-10-29 https://bugbountyreports.com/reports/2255-sigabrt-mirb-double-free2026-10-29 https://bugbountyreports.com/reports/2256-sigabrt-mirb-and-mruby2026-10-29 https://bugbountyreports.com/reports/1892-sigabrt-mrb-default-allocf2026-10-29 https://bugbountyreports.com/reports/2093-sigabrt-mrb-realloc-simple-gc-c-line-2012026-10-29 https://bugbountyreports.com/reports/2252-sigabrt-in-mrb-debug-info-append-file2026-10-29 https://bugbountyreports.com/reports/2203-sigabrt-in-only-mirb2026-10-29 https://bugbountyreports.com/reports/2216-sigabrt-in-sym-validate-len-symbol-c-442026-10-29 https://bugbountyreports.com/reports/1995-sigabrt-sigsegv-mspace-free-and-mrb-default-allocf2026-10-29 https://bugbountyreports.com/reports/7942-sign-in-with-apple-generates-long-life-jwts-seemingly2026-10-29 https://bugbountyreports.com/reports/7941-sign-in-with-apple-works-on-existing-accounts-bypasses-2fa2026-10-29 https://bugbountyreports.com/reports/154-sign-up-csrf2026-10-29 https://bugbountyreports.com/reports/197-sign-up-csrf2026-10-29 https://bugbountyreports.com/reports/10548-sign-multisig-crashes-monero-wallet-rpc-on-a-malformed-but2026-10-29 https://bugbountyreports.com/reports/84-sign-up-form-csrf2026-10-29 https://bugbountyreports.com/reports/1112-signals-get-affected-once-reports-closed-as-self2026-10-29 https://bugbountyreports.com/reports/6939-signedness-issue-in-classinfo-message-handler-leads-to-rce2026-10-29 https://bugbountyreports.com/reports/8123-signup-with-any-email-and-enable-2-fa-without-verifying2026-10-29 https://bugbountyreports.com/reports/5423-signup-with-any-email-and-enable-2fa-without-verifying-email2026-10-29 https://bugbountyreports.com/reports/2204-sigsegv-kh-get-n2s-in-src-symbol-c-372026-10-29 https://bugbountyreports.com/reports/2014-sigsegv-kh-resize-iv-null-deref2026-10-29 https://bugbountyreports.com/reports/2257-sigsegv-mark-context-stack2026-10-29 https://bugbountyreports.com/reports/1997-sigsegv-mrb-check-intern-str-nullpointer2026-10-29 https://bugbountyreports.com/reports/2015-sigsegv-mrb-obj-extend-line-4132026-10-29 https://bugbountyreports.com/reports/2165-sigsegv-mrb-obj-value2026-10-29 https://bugbountyreports.com/reports/2092-sigsegv-mrb-vm-exec-line-13122026-10-29 https://bugbountyreports.com/reports/2010-sigsegv-mrb-vm-exec-line-16812026-10-29 https://bugbountyreports.com/reports/2009-sigsegv-mrb-vm-exec-vm-c-in-line-12722026-10-29 https://bugbountyreports.com/reports/2147-sigsegv-mrb-yield-with-class2026-10-29 https://bugbountyreports.com/reports/2096-sigsegv-vm-c-line-12142026-10-29 https://bugbountyreports.com/reports/2149-sigsegv-in-array-copy-array-c-712026-10-29 https://bugbountyreports.com/reports/2253-sigsegv-in-mrb-class2026-10-29 https://bugbountyreports.com/reports/2248-sigsegv-in-mrb-str-inum2026-10-29 https://bugbountyreports.com/reports/1993-sigsegv-in-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/2247-sigsegv-in-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/2254-sigsegv-in-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/2202-sigsegv-in-str-buf-cat2026-10-29 https://bugbountyreports.com/reports/1933-sigsegv-mrb-obj-freeze-manipulating-register-rax-and-rsi2026-10-29 https://bugbountyreports.com/reports/1934-sigsegv-null-pointer-mrb-str-concat2026-10-29 https://bugbountyreports.com/reports/1996-sigsegv-on-mrb-vm-exec-null-deref2026-10-29 https://bugbountyreports.com/reports/1932-sigsegv-on-mruby-mrb-get-args2026-10-29 https://bugbountyreports.com/reports/1771-sigsegv-on-mruby-mrb-str-modify-invalid-memory-access2026-10-29 https://bugbountyreports.com/reports/1770-sigsegv-on-mruby-s-mark-tbl-invalid-memory-access2026-10-29 https://bugbountyreports.com/reports/1773-sigsegv-when-invalid-argument-on-remove-method2026-10-29 https://bugbountyreports.com/reports/1772-sigsev-on-mrb-ary-splice2026-10-29 https://bugbountyreports.com/reports/4544-silent-omission-of-certificate-hostname-verification-in2026-10-29 https://bugbountyreports.com/reports/2943-simple-css-line-height-identifies-platform2026-10-29 https://bugbountyreports.com/reports/164-simplenote-silverlight-cross-domain-policy-misconfiguration2026-10-29 https://bugbountyreports.com/reports/5835-singapore-account-takeover-via-idor2026-10-29 https://bugbountyreports.com/reports/5325-singapore-idor-in-campaign-starbucks-com-sg2026-10-29 https://bugbountyreports.com/reports/5807-singapore-unrestricted-file-upload-leads-to-xss-on-campaign2026-10-29 https://bugbountyreports.com/reports/5806-singapore-xxe-at-https-www-starbucks-com-sg-restapi-soap112026-10-29 https://bugbountyreports.com/reports/3233-single-sing-on-clickjacking2026-10-29 https://bugbountyreports.com/reports/473-singup-page-html-injection-vulnerability2026-10-29 https://bugbountyreports.com/reports/2084-site-configured-improperly-at-subdomain-of-lyst-co-uk2026-10-29 https://bugbountyreports.com/reports/7855-site-information-s-display-name-section-vulnerable-for-xss2026-10-29 https://bugbountyreports.com/reports/6268-site-wide-csrf-at-atavist2026-10-29 https://bugbountyreports.com/reports/3965-site-wide-csrf-on-eats-uber-com2026-10-29 https://bugbountyreports.com/reports/6157-site-wide-csrf-on-safari-due-to-cors-misconfiguration-not2026-10-29 https://bugbountyreports.com/reports/8157-size-t-to-int-vulnerability-in-exfat-leads-to-memory2026-10-29 https://bugbountyreports.com/reports/5306-slack-dtls-uses-a-private-key-that-is-in-the-public-domain2026-10-29 https://bugbountyreports.com/reports/7057-slack-integration-setup-lacks-csrf-protection2026-10-29 https://bugbountyreports.com/reports/189-slack-oauth2-redirect-uri-bypass2026-10-29 https://bugbountyreports.com/reports/6264-slack-server-disclose-h1-private-issue-report2026-10-29 https://bugbountyreports.com/reports/4353-slack-token-exposed-over-internet-github2026-10-29 https://bugbountyreports.com/reports/6351-slack-corp-heroku-application-disclosing-limited-info-about2026-10-29 https://bugbountyreports.com/reports/1594-slow-http-attack-on-nextcloud-dos2026-10-29 https://bugbountyreports.com/reports/6130-slowloris-body-parsing2026-10-29 https://bugbountyreports.com/reports/7826-slowvote-and-countdown-can-cause-denial-of-service-due-to2026-10-29 https://bugbountyreports.com/reports/6936-smap-bypass2026-10-29 https://bugbountyreports.com/reports/2938-smartlist-add-smartlist-insert-may-cause-heap-corruption-as2026-10-29 https://bugbountyreports.com/reports/3165-smb-ssrf-in-emblem-editor-exposes-taketwo-domain2026-10-29 https://bugbountyreports.com/reports/1699-smb-user-authentication-bypass-and-persistence2026-10-29 https://bugbountyreports.com/reports/10280-smil-values-and-by-attributes-bypass-remote-image-blocking2026-10-29 https://bugbountyreports.com/reports/688-smpt-protection-not-used-i-can-hijack-your-email-server2026-10-29 https://bugbountyreports.com/reports/2068-sms-invite-form-abuse2026-10-29 https://bugbountyreports.com/reports/3966-sms-url-verification-link-does-not-expire-on-phone-number2026-10-29 https://bugbountyreports.com/reports/3890-sms-call-spamming-due-to-truncated-phone-number2026-10-29 https://bugbountyreports.com/reports/1309-smtp-command-injection2026-10-29 https://bugbountyreports.com/reports/8396-smtp-command-injection-in-appointment-emails-via-newlines2026-10-29 https://bugbountyreports.com/reports/7960-smtp-command-injection-in-icalendar-attachments-to-emails2026-10-29 https://bugbountyreports.com/reports/4455-smtp-failure-leads-to-chain-of-internal-system-failure2026-10-29 https://bugbountyreports.com/reports/10624-smtp-header-injection-via-c-escape-r-in-the-recipient2026-10-29 https://bugbountyreports.com/reports/6195-smtp-interaction-theft-via-mitm2026-10-29 https://bugbountyreports.com/reports/601-smtp-protection-not-used2026-10-29 https://bugbountyreports.com/reports/4231-smtp-service-vulnerable-to-poodle-sslv32026-10-29 https://bugbountyreports.com/reports/3828-smuggle-socialclub-s-facebook-oauth-code-via-referer-leakage2026-10-29 https://bugbountyreports.com/reports/8860-smuggling-content-in-pr-with-refs-replace-in-github2026-10-29 https://bugbountyreports.com/reports/4077-snippet-js-template-allows-attacker-to-read-a-user-s2026-10-29 https://bugbountyreports.com/reports/6921-snmp-community-string-disclosure-to-readonly-users-on2026-10-29 https://bugbountyreports.com/reports/1539-snooping-into-messages-via-email-service2026-10-29 https://bugbountyreports.com/reports/8548-snowflake-server-leak-of-tls-packets-from-other-clients2026-10-29 https://bugbountyreports.com/reports/710-soap-serialize-function-call-type-confusion-rce2026-10-29 https://bugbountyreports.com/reports/4010-soap-wsdl-parser-sql-code-execution2026-10-29 https://bugbountyreports.com/reports/438-soapclient-s-call-type-confusion-through-unserialize2026-10-29 https://bugbountyreports.com/reports/6260-social-app-does-not-validate-server-certificates-for2026-10-29 https://bugbountyreports.com/reports/7444-social-club-account-takeover-via-rgl-and-steam-epic-linked2026-10-29 https://bugbountyreports.com/reports/9665-social-media-account-takeover2026-10-29 https://bugbountyreports.com/reports/6833-social-media-link-hijack-of-team-member-linkedin-at-https2026-10-29 https://bugbountyreports.com/reports/6780-socialclub-account-take-over-through-import-friends-feature2026-10-29 https://bugbountyreports.com/reports/3377-socialclub-s-facebook-oauth-theft-through-warehouse-xss2026-10-29 https://bugbountyreports.com/reports/6488-sock-raw-sockets-reachable-from-webkit-process-allows2026-10-29 https://bugbountyreports.com/reports/5880-solr-injection-in-user-id-parameter-at-v2-leaderboard-v22026-10-29 https://bugbountyreports.com/reports/8115-solr-log4j-http2026-10-29 https://bugbountyreports.com/reports/3821-solution-for-h15411-s-ctf-challenge2026-10-29 https://bugbountyreports.com/reports/6489-solution-for-hackyholiday2026-10-29 https://bugbountyreports.com/reports/6343-some-build-dependencies-are-downloaded-over-an-insecure2026-10-29 https://bugbountyreports.com/reports/4386-some-html-tags-are-getting-executed-in-com-nextcloud-client2026-10-29 https://bugbountyreports.com/reports/9167-some-limited-confidential-information-can-still-be-accessed2026-10-29 https://bugbountyreports.com/reports/789-some-s3-buckets-are-world-readable-and-one-is-world2026-10-29 https://bugbountyreports.com/reports/5914-some-store-settings-data-are-accessible-to-no-access2026-10-29 https://bugbountyreports.com/reports/9537-source-code-and-data-exfiltration-via-github-copilot2026-10-29 https://bugbountyreports.com/reports/2052-source-code-disclosure-cgi2026-10-29 https://bugbountyreports.com/reports/5694-source-code-disclosure-at2026-10-29 https://bugbountyreports.com/reports/1286-source-code-disclosure-on-https-107-23-69-1802026-10-29 https://bugbountyreports.com/reports/1429-source-code-leakage-through-git-web-access-at-host-52-912026-10-29 https://bugbountyreports.com/reports/5458-sourcemaps-and-unminified-source-code-exposed-on-pages2026-10-29 https://bugbountyreports.com/reports/10198-spam-clearance-checks-disabled-with-existing-referenced2026-10-29 https://bugbountyreports.com/reports/1688-spam-some-one-using-user-saveinvite-system2026-10-29 https://bugbountyreports.com/reports/2294-spamming-any-user-from-reset-password-function2026-10-29 https://bugbountyreports.com/reports/9860-spamming-highly-nested-json-rpc-requests-cause-node-to2026-10-29 https://bugbountyreports.com/reports/29-spdy-heap-buffer-overflow2026-10-29 https://bugbountyreports.com/reports/28-spdy-memory-corruption2026-10-29 https://bugbountyreports.com/reports/3937-specially-constructed-multi-part-requests-cause-multi2026-10-29 https://bugbountyreports.com/reports/6869-specially-crafted-closed-captions-file-can-lead-to-remote2026-10-29 https://bugbountyreports.com/reports/7667-specially-crafted-message-request-crashes-the-webapp-for2026-10-29 https://bugbountyreports.com/reports/2284-specify-maximal-length-in-new-comment2026-10-29 https://bugbountyreports.com/reports/2279-specify-maximal-length-in-translation2026-10-29 https://bugbountyreports.com/reports/8592-speedtest-8x8-com-enabled-directory-listing2026-10-29 https://bugbountyreports.com/reports/10459-spendproofv1-txid-substitution-get-spend-proof-check-spend2026-10-29 https://bugbountyreports.com/reports/1015-spf-dns-record2026-10-29 https://bugbountyreports.com/reports/1568-spf-issue2026-10-29 https://bugbountyreports.com/reports/3018-spf-misconfiguration2026-10-29 https://bugbountyreports.com/reports/3962-spf-records-smtp-protection-not-used2026-10-29 https://bugbountyreports.com/reports/771-spf-records-not-found2026-10-29 https://bugbountyreports.com/reports/588-spf-whitelist-of-mandrill-leads-to-email-forgery2026-10-29 https://bugbountyreports.com/reports/1035-spf-dkim-dmarc-for-aspen-io2026-10-29 https://bugbountyreports.com/reports/963-spf-dkim-dmarc-for-grtp-co2026-10-29 https://bugbountyreports.com/reports/219-spl-arrayobject-splobjectstorage-unserialization-type2026-10-29 https://bugbountyreports.com/reports/10216-splatoon-3-anticheat-seed-randomization-weakness2026-10-29 https://bugbountyreports.com/reports/10414-splatoon-3-in-match-integrity-bypass-via-consensus2026-10-29 https://bugbountyreports.com/reports/8485-splunk-sensitive-information-disclosure2026-10-29 https://bugbountyreports.com/reports/1665-spoof-email-with-hyperlink-injection-via-invites2026-10-29 https://bugbountyreports.com/reports/5870-spring-actuator-endpoints-publicly-available-and-broken2026-10-29 https://bugbountyreports.com/reports/5863-spring-actuator-endpoints-publicly-available-leading-to2026-10-29 https://bugbountyreports.com/reports/3608-spring-security-configuration-allows-agent-sessions-to-be2026-10-29 https://bugbountyreports.com/reports/8133-springboot-actuator-is-leaking-internals-at2026-10-29 https://bugbountyreports.com/reports/2867-sprintf-combined-format-string-attack2026-10-29 https://bugbountyreports.com/reports/2027-sprintf-gem-format-string-combined-attack2026-10-29 https://bugbountyreports.com/reports/5167-sql-exception-in-json-format2026-10-29 https://bugbountyreports.com/reports/2597-sql-exception-thrown-during-product-import2026-10-29 https://bugbountyreports.com/reports/3359-sql-injection2026-10-29 https://bugbountyreports.com/reports/367-sql-injection2026-10-29 https://bugbountyreports.com/reports/9655-sql-injection2026-10-29 https://bugbountyreports.com/reports/10125-sql-injection-data-account-id-parameter2026-10-29 https://bugbountyreports.com/reports/10136-sql-injection-entryid-parameter-in-formbuilderv22026-10-29 https://bugbountyreports.com/reports/5495-sql-injection-https-msi-portal2026-10-29 https://bugbountyreports.com/reports/10129-sql-injection-json-name-parameter2026-10-29 https://bugbountyreports.com/reports/5840-sql-injection-stacked-queries-in-the-export-to-excel2026-10-29 https://bugbountyreports.com/reports/7271-sql-injection-futexpert-mtngbissau-com2026-10-29 https://bugbountyreports.com/reports/8506-sql-injection-insecure-deserialization-leads-to-remote-code2026-10-29 https://bugbountyreports.com/reports/7552-sql-injection-and-plaintext-passwords-via-user-search2026-10-29 https://bugbountyreports.com/reports/858-sql-injection-and-xss2026-10-29 https://bugbountyreports.com/reports/8142-sql-injection-at-htus2026-10-29 https://bugbountyreports.com/reports/8141-sql-injection-at-https-htus2026-10-29 https://bugbountyreports.com/reports/7590-sql-injection-at-admin-php-cp-members-create2026-10-29 https://bugbountyreports.com/reports/9175-sql-injection-at2026-10-29 https://bugbountyreports.com/reports/8416-sql-injection-at2026-10-29 https://bugbountyreports.com/reports/8653-sql-injection-at-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/8413-sql-injection-at-https-asp-selmajcom-htus2026-10-29 https://bugbountyreports.com/reports/7726-sql-injection-at-https-files-palantir-com-due-to-cve-20212026-10-29 https://bugbountyreports.com/reports/4409-sql-injection-extracts-starbucks-enterprise-accounting2026-10-29 https://bugbountyreports.com/reports/4382-sql-injection-found-in-nextcloud-android-app-content2026-10-29 https://bugbountyreports.com/reports/4981-sql-injection-found-in-us-navy-website-http2026-10-29 https://bugbountyreports.com/reports/10586-sql-injection-found-on-ibm-com-subdomain2026-10-29 https://bugbountyreports.com/reports/10116-sql-injection-identified-on-ibm-endpoint2026-10-29 https://bugbountyreports.com/reports/9500-sql-injection-in-errors-viewbuild2026-10-29 https://bugbountyreports.com/reports/4433-sql-injection-in2026-10-29 https://bugbountyreports.com/reports/4434-sql-injection-in2026-10-29 https://bugbountyreports.com/reports/7736-sql-injection-in2026-10-29 https://bugbountyreports.com/reports/2067-sql-injection-in-3rd-party-software-anomali2026-10-29 https://bugbountyreports.com/reports/7180-sql-injection-in-agent-manager2026-10-29 https://bugbountyreports.com/reports/10313-sql-injection-in-column-type-parameter-allows-arbitrary-sql2026-10-29 https://bugbountyreports.com/reports/1122-sql-injection-in-conc-index-php-ccm-system-search-users2026-10-29 https://bugbountyreports.com/reports/8537-sql-injection-in-cve-discovery-search2026-10-29 https://bugbountyreports.com/reports/10057-sql-injection-in-django-orm-via-unvalidated-connector-in-q2026-10-29 https://bugbountyreports.com/reports/3922-sql-injection-in-graphql-endpoint-through-embedded2026-10-29 https://bugbountyreports.com/reports/7803-sql-injection-in-https2026-10-29 https://bugbountyreports.com/reports/9577-sql-injection-in-https-demor-adr-acronis-com-via-the2026-10-29 https://bugbountyreports.com/reports/4104-sql-injection-in-https-labs-data-gov-dashboard-datagov-csv2026-10-29 https://bugbountyreports.com/reports/6980-sql-injection-in-https-www-acronis-cz-via-the-log-parameter2026-10-29 https://bugbountyreports.com/reports/7361-sql-injection-in-ibm-access-control-panel-broken-access-in2026-10-29 https://bugbountyreports.com/reports/10023-sql-injection-in-jsonfield-keytransform2026-10-29 https://bugbountyreports.com/reports/5489-sql-injection-in-login-page-https-login-php2026-10-29 https://bugbountyreports.com/reports/3399-sql-injection-in-milestonefinder-order-method2026-10-29 https://bugbountyreports.com/reports/3178-sql-injection-in-partner-id-field-on-https-www-teavana-com2026-10-29 https://bugbountyreports.com/reports/3602-sql-injection-in-report-xml-php-through-countryfilter2026-10-29 https://bugbountyreports.com/reports/3877-sql-injection-in-serendipity-serendipity-fetchcomments2026-10-29 https://bugbountyreports.com/reports/10199-sql-injection-in-structure-plugin2026-10-29 https://bugbountyreports.com/reports/5728-sql-injection-in-the-move-papers-php-on-the-https2026-10-29 https://bugbountyreports.com/reports/4570-sql-injection-in-the-get-publications-php-on-the-https2026-10-29 https://bugbountyreports.com/reports/10127-sql-injection-in-uri-path-leading-to-full-database2026-10-29 https://bugbountyreports.com/reports/9749-sql-injection-in-url-path-leads-to-database-access2026-10-29 https://bugbountyreports.com/reports/7823-sql-injection-in-url-path-processing-on-www-ibm-com2026-10-29 https://bugbountyreports.com/reports/8884-sql-injection-in-version-1-4-3-and-below2026-10-29 https://bugbountyreports.com/reports/1264-sql-injection-in-wordpress-plugin-huge-it-video-gallery-at2026-10-29 https://bugbountyreports.com/reports/6503-sql-injection-in-www2026-10-29 https://bugbountyreports.com/reports/6641-sql-injection-in-www-hyperpure-com2026-10-29 https://bugbountyreports.com/reports/6449-sql-injection-intensedebate-com2026-10-29 https://bugbountyreports.com/reports/7278-sql-injection-located-in-in-post-param2026-10-29 https://bugbountyreports.com/reports/7124-sql-injection-my-method-1-or-3-2-1-6-and-000159-0001592026-10-29 https://bugbountyreports.com/reports/8354-sql-injection-on2026-10-29 https://bugbountyreports.com/reports/4601-sql-injection-on-messagecenter-messagingcenter-at-https-www2026-10-29 https://bugbountyreports.com/reports/7838-sql-injection-on2026-10-29 https://bugbountyreports.com/reports/4610-sql-injection-on-due-to-tech-cfm2026-10-29 https://bugbountyreports.com/reports/9333-sql-injection-on-via-where-parameter2026-10-29 https://bugbountyreports.com/reports/7021-sql-injection-on-admin-acronis-host-development-web-service2026-10-29 https://bugbountyreports.com/reports/5446-sql-injection-on-cookie-parameter2026-10-29 https://bugbountyreports.com/reports/6350-sql-injection-on-docs-atavist-com2026-10-29 https://bugbountyreports.com/reports/4989-sql-injection-on-https2026-10-29 https://bugbountyreports.com/reports/7839-sql-injection-on-https2026-10-29 https://bugbountyreports.com/reports/7791-sql-injection-on-https-soa-accp-glbx-tva-gov-via-api-path2026-10-29 https://bugbountyreports.com/reports/9188-sql-injection-on-prod-oidc-proxy-prod-webservices-mozgcp2026-10-29 https://bugbountyreports.com/reports/1367-sql-injection-on-sctrack-email-uber-com-cn2026-10-29 https://bugbountyreports.com/reports/7110-sql-injection-on-the-administrator-panel2026-10-29 https://bugbountyreports.com/reports/4571-sql-injection-on-the-https2026-10-29 https://bugbountyreports.com/reports/4599-sql-injection-on-www-on-countid-parameter2026-10-29 https://bugbountyreports.com/reports/5819-sql-injection-or-denial-of-service-due-to-a-prototype2026-10-29 https://bugbountyreports.com/reports/8206-sql-injection-through-include-findusers-php2026-10-29 https://bugbountyreports.com/reports/6416-sql-injection-union-based2026-10-29 https://bugbountyreports.com/reports/7925-sql-injection-via-https-setup-p2p-ihost-com2026-10-29 https://bugbountyreports.com/reports/10126-sql-injection-via-url2026-10-29 https://bugbountyreports.com/reports/10239-sql-injection-vulnerability-found-on-ibm-com-endpoint2026-10-29 https://bugbountyreports.com/reports/10622-sql-injection-vulnerability-found-on-ibm-com-subdomain2026-10-29 https://bugbountyreports.com/reports/2505-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2502-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2503-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2566-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2568-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2704-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2705-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2710-sql-injection-vulnerability-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/603-sql-injection-vulnerability-in-concrete5-version-5-7-3-12026-10-29 https://bugbountyreports.com/reports/4424-sql-injection-vulnerability-located-at2026-10-29 https://bugbountyreports.com/reports/1958-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2033-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2196-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2379-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2469-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2564-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/1830-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/6514-sql-injection-when-configuring-a-database2026-10-29 https://bugbountyreports.com/reports/10026-sql-injection-when-using-filteredrelation2026-10-29 https://bugbountyreports.com/reports/2624-sql-injection-exploitable-in-boolean-mode2026-10-29 https://bugbountyreports.com/reports/292-sql-injection-tile-id2026-10-29 https://bugbountyreports.com/reports/257-sql-injection-time-zoom-script-tile-id2026-10-29 https://bugbountyreports.com/reports/4572-sql-injections2026-10-29 https://bugbountyreports.com/reports/7833-sql-injextion-via-vulnerable-doctrine-dbal-version2026-10-29 https://bugbountyreports.com/reports/2101-sqli2026-10-29 https://bugbountyreports.com/reports/9829-sqli-in-url-paths2026-10-29 https://bugbountyreports.com/reports/4395-sqli-allow-query-restriction-bypass-on-exposed2026-10-29 https://bugbountyreports.com/reports/10220-sqli-at-via-theme-name2026-10-29 https://bugbountyreports.com/reports/10219-sqli-at-parameter2026-10-29 https://bugbountyreports.com/reports/10133-sqli-in-lasco-cme-query2026-10-29 https://bugbountyreports.com/reports/6072-sqli-in-login-form-of2026-10-29 https://bugbountyreports.com/reports/1116-sqli-in-love-uber-com2026-10-29 https://bugbountyreports.com/reports/9411-sqli-on-search-functionality2026-10-29 https://bugbountyreports.com/reports/7112-sqli-on2026-10-29 https://bugbountyreports.com/reports/9413-sqli-on-search-functionality2026-10-29 https://bugbountyreports.com/reports/6765-sqli-on-desafio5estrelas-com2026-10-29 https://bugbountyreports.com/reports/6728-sqli-on-uberpartner-eu-leads-to-exposure-of-sensitive-user2026-10-29 https://bugbountyreports.com/reports/8935-sqlinject-at2026-10-29 https://bugbountyreports.com/reports/7222-squid-as-reverse-proxy-rce-and-data-leak2026-10-29 https://bugbountyreports.com/reports/7228-squid-leaks-previous-content-from-reusable-buffer2026-10-29 https://bugbountyreports.com/reports/3069-ssh-backdated-version-open-port2026-10-29 https://bugbountyreports.com/reports/3262-ssh-server-compatible-with-several-vulnerable-cryptographic2026-10-29 https://bugbountyreports.com/reports/6954-ssl-certificate-not-validated-when-registering-with-a2026-10-29 https://bugbountyreports.com/reports/657-ssl-cookie-without-secure-flag-set2026-10-29 https://bugbountyreports.com/reports/6340-ssl-expired-subdomain-leads-to-api-swap-with-main-and2026-10-29 https://bugbountyreports.com/reports/1567-ssl-issue-on-legalrobot-com2026-10-29 https://bugbountyreports.com/reports/504-ssl-issues2026-10-29 https://bugbountyreports.com/reports/27-ssl-not-enforced2026-10-29 https://bugbountyreports.com/reports/3158-ssl-peek-hang-on-empty-record-cve-2016-63052026-10-29 https://bugbountyreports.com/reports/2258-ssl-tls-beast-attack-vulnerability2026-10-29 https://bugbountyreports.com/reports/1562-sslv2-doesn-t-block-disabled-ciphers-cve-2015-31972026-10-29 https://bugbountyreports.com/reports/3909-sslv3-poodle-vulnerability2026-10-29 https://bugbountyreports.com/reports/2130-sslv3-poodle-vulnerability2026-10-29 https://bugbountyreports.com/reports/5615-ssn-is-exposed-on-slides-previous-critical-report-was-not2026-10-29 https://bugbountyreports.com/reports/5517-ssn-leak-due-to-editable-slides2026-10-29 https://bugbountyreports.com/reports/5949-sso-bypass-in-zendesk-using-trint-organization-able-to-leak2026-10-29 https://bugbountyreports.com/reports/5094-sso-through-odnoklassniki-uses-http-rather-than-https2026-10-29 https://bugbountyreports.com/reports/8319-ssrf-pivoting-in-the-private-lan2026-10-29 https://bugbountyreports.com/reports/1927-ssrf-open-via-get-request2026-10-29 https://bugbountyreports.com/reports/272-ssrf-portscan-via-register-function-custom-server2026-10-29 https://bugbountyreports.com/reports/1013-ssrf-local-file-enumeration-dos-due-to-improper-handling-of2026-10-29 https://bugbountyreports.com/reports/7557-ssrf-blind-xss-in-gravatar-email2026-10-29 https://bugbountyreports.com/reports/5236-ssrf-unrestricted-file-upload-on-https-my-stripo-email2026-10-29 https://bugbountyreports.com/reports/8136-ssrf-access-aws-metadata2026-10-29 https://bugbountyreports.com/reports/6656-ssrf-allows-reading-aws-ec2-metadata-using-readapi-variable2026-10-29 https://bugbountyreports.com/reports/5440-ssrf-and-lfi-in-site-audit-tool2026-10-29 https://bugbountyreports.com/reports/2656-ssrf-and-local-file-disclosure-in-https-wordpress-com-media2026-10-29 https://bugbountyreports.com/reports/1090-ssrf-and-local-file-read-in-video-to-gif-converter2026-10-29 https://bugbountyreports.com/reports/9605-ssrf-and-secret-key-disclosure-found-on-turbonomic-endpoint2026-10-29 https://bugbountyreports.com/reports/9606-ssrf-and-secret-key-disclosure-found-on-turbonomic-endpoint2026-10-29 https://bugbountyreports.com/reports/4134-ssrf-at-ideas-starbucks-com2026-10-29 https://bugbountyreports.com/reports/2931-ssrf-at-iris-lystit-com2026-10-29 https://bugbountyreports.com/reports/6933-ssrf-by-adding-a-custom-integration-on-console-helium-com2026-10-29 https://bugbountyreports.com/reports/7329-ssrf-bypass2026-10-29 https://bugbountyreports.com/reports/6767-ssrf-chained-to-hit-internal-host-leading-to-another-ssrf2026-10-29 https://bugbountyreports.com/reports/6751-ssrf-due-to-cve-2021-26855-on2026-10-29 https://bugbountyreports.com/reports/7806-ssrf-due-to-cve-2021-27905-in-www2026-10-29 https://bugbountyreports.com/reports/6360-ssrf-external-interaction2026-10-29 https://bugbountyreports.com/reports/10262-ssrf-filter-bypass-via-unblocked-nat64-local-use-ipv62026-10-29 https://bugbountyreports.com/reports/7336-ssrf-for-kube-apiserver-cloudprovider-scene2026-10-29 https://bugbountyreports.com/reports/5080-ssrf-in-cabinet-stripeapi-v1-siteinfolookup-url-xxx2026-10-29 https://bugbountyreports.com/reports/4988-ssrf-in2026-10-29 https://bugbountyreports.com/reports/4062-ssrf-in-api-slack-com-using-slash-commands-and-bypassing2026-10-29 https://bugbountyreports.com/reports/9844-ssrf-in-autodesk-rendering-leading-to-account-takeover2026-10-29 https://bugbountyreports.com/reports/4176-ssrf-in-ci-after-first-run2026-10-29 https://bugbountyreports.com/reports/3480-ssrf-in-exchange-leads-to-root-access-in-all-instances2026-10-29 https://bugbountyreports.com/reports/5394-ssrf-in-export-template-to-activecampaign2026-10-29 https://bugbountyreports.com/reports/8140-ssrf-in-functional-administrative-support-tool-pdf2026-10-29 https://bugbountyreports.com/reports/4431-ssrf-in-get-video-contents2026-10-29 https://bugbountyreports.com/reports/8838-ssrf-in-graphql-query-pwapi-ex2b-com2026-10-29 https://bugbountyreports.com/reports/4136-ssrf-in-hatchful-shopify-com2026-10-29 https://bugbountyreports.com/reports/2120-ssrf-in-https-cards-dev-twitter-com-validator2026-10-29 https://bugbountyreports.com/reports/9153-ssrf-in-https-couriers-indrive-com-api-file-storage2026-10-29 https://bugbountyreports.com/reports/1002-ssrf-in-https-imgur-com-vidgif-url2026-10-29 https://bugbountyreports.com/reports/3257-ssrf-in-https-www-zomato-com-allows-reading-local-files-and2026-10-29 https://bugbountyreports.com/reports/5579-ssrf-in-img-lemlist-com-that-leads-to-localhost-port2026-10-29 https://bugbountyreports.com/reports/5890-ssrf-in-imgur-video-gif-conversion2026-10-29 https://bugbountyreports.com/reports/6494-ssrf-in-login-page-using-fetch-api-exposes-victims-ip2026-10-29 https://bugbountyreports.com/reports/5740-ssrf-in-my-stripo-email2026-10-29 https://bugbountyreports.com/reports/5528-ssrf-in-notifications-server-configuration2026-10-29 https://bugbountyreports.com/reports/5904-ssrf-in-plantuml-on-plantuml-pre-gitlab-com2026-10-29 https://bugbountyreports.com/reports/3635-ssrf-in-proxy-duckduckgo-com-via-the-image-host-parameter2026-10-29 https://bugbountyreports.com/reports/4449-ssrf-in-search-gov-via-url-parameter2026-10-29 https://bugbountyreports.com/reports/1533-ssrf-in-the-connector-designer-rest-and-elastic-search2026-10-29 https://bugbountyreports.com/reports/5334-ssrf-in-the-custom-integration-webhook-discloses-aws2026-10-29 https://bugbountyreports.com/reports/2488-ssrf-in-upload-img-through-url2026-10-29 https://bugbountyreports.com/reports/4320-ssrf-in-webhooks-leads-to-aws-private-keys-disclosure2026-10-29 https://bugbountyreports.com/reports/6005-ssrf-into-shared-runner-by-replacing-dockerd-with-malicious2026-10-29 https://bugbountyreports.com/reports/2059-ssrf-issue2026-10-29 https://bugbountyreports.com/reports/9615-ssrf-keycloak-before-13-0-0-cve-2020-10770-on-https2026-10-29 https://bugbountyreports.com/reports/5338-ssrf-leads-to-internal-port-scan2026-10-29 https://bugbountyreports.com/reports/5069-ssrf-leaking-internal-google-cloud-data-through-upload2026-10-29 https://bugbountyreports.com/reports/8320-ssrf-mitigation-bypass-using-dns-rebind-attack2026-10-29 https://bugbountyreports.com/reports/7768-ssrf-occurrence-in-website-preview-used-by-line-official2026-10-29 https://bugbountyreports.com/reports/4598-ssrf-on2026-10-29 https://bugbountyreports.com/reports/4607-ssrf-on-allowing-internal-server-data-access2026-10-29 https://bugbountyreports.com/reports/3685-ssrf-on-duckduckgo-com-iu2026-10-29 https://bugbountyreports.com/reports/8204-ssrf-on-http-www-crossdomain-php-via-url-parameter2026-10-29 https://bugbountyreports.com/reports/391-ssrf-on-https-whitehataudit-slack-com-account-photo2026-10-29 https://bugbountyreports.com/reports/6470-ssrf-on-image-renderer2026-10-29 https://bugbountyreports.com/reports/3637-ssrf-on-infawiki-informatica-com-and-infawikitest2026-10-29 https://bugbountyreports.com/reports/3790-ssrf-on-jira-mariadb-org2026-10-29 https://bugbountyreports.com/reports/5264-ssrf-on-local-storage-of-ios-mobile2026-10-29 https://bugbountyreports.com/reports/5346-ssrf-on-music-line-me-through-getxml-php2026-10-29 https://bugbountyreports.com/reports/10666-ssrf-on-nextcloud-whiteboard-application-via-recordings-to2026-10-29 https://bugbountyreports.com/reports/5594-ssrf-on-project-import-via-the-remote-attachment-url-on-a2026-10-29 https://bugbountyreports.com/reports/1540-ssrf-on-testing-endpoint2026-10-29 https://bugbountyreports.com/reports/5318-ssrf-protection-bypass2026-10-29 https://bugbountyreports.com/reports/7765-ssrf-restricted-to-http-html-on-line-social-plugins-https2026-10-29 https://bugbountyreports.com/reports/3152-ssrf-thru-file-replace2026-10-29 https://bugbountyreports.com/reports/7294-ssrf-to-aws-file-read2026-10-29 https://bugbountyreports.com/reports/8228-ssrf-to-read-aws-metadata-at-https-htus2026-10-29 https://bugbountyreports.com/reports/658-ssrf-via-add-image-from-url-feature2026-10-29 https://bugbountyreports.com/reports/692-ssrf-via-insert-image-feature-of-products-collections2026-10-29 https://bugbountyreports.com/reports/5361-ssrf-via-3d-cs-money-pastelinktoimage2026-10-29 https://bugbountyreports.com/reports/5785-ssrf-via-export-service-in-activecampaign2026-10-29 https://bugbountyreports.com/reports/8480-ssrf-via-filter-bypass-due-to-lax-checking-on-ips2026-10-29 https://bugbountyreports.com/reports/9625-ssrf-via-host-header-let-access-localhost-via-https-go2026-10-29 https://bugbountyreports.com/reports/10347-ssrf-via-improper-redirect-validation-in-rocket-chat-oembed2026-10-29 https://bugbountyreports.com/reports/10346-ssrf-via-improper-validation-after-dns-name-resolution-in2026-10-29 https://bugbountyreports.com/reports/7963-ssrf-via-office-file-thumbnails2026-10-29 https://bugbountyreports.com/reports/8150-ssrf-via-potential-filter-bypass-with-too-lax-local-domain2026-10-29 https://bugbountyreports.com/reports/10501-ssrf-via-url-parser-differential-in-normalize-request-url2026-10-29 https://bugbountyreports.com/reports/10558-ssrf-via-user-controlled-push-proxyserver-in-notifications2026-10-29 https://bugbountyreports.com/reports/2618-ssrf-via-webhook2026-10-29 https://bugbountyreports.com/reports/481-ssrf-vulnerability-access-to-metadata-server-on-ec2-and2026-10-29 https://bugbountyreports.com/reports/8357-ssrf-vulnerability-can-be-exploited-when-a-hijacked2026-10-29 https://bugbountyreports.com/reports/3030-ssrf-vulnerability-in-gitlab-com-via-project-import2026-10-29 https://bugbountyreports.com/reports/3409-ssrf-vulnerability-in-gitlab-com-webhook2026-10-29 https://bugbountyreports.com/reports/5004-ssrf-vulnerability-on-leaks-internal-ip-and-various2026-10-29 https://bugbountyreports.com/reports/3844-ssrf-vulnerability-on-proxy-duckduckgo-com-access-to2026-10-29 https://bugbountyreports.com/reports/8951-ssrf-vulnerability-through-connection-test-feature2026-10-29 https://bugbountyreports.com/reports/3490-ssrf-when-importing-a-project-from-a-git-repo-by-url2026-10-29 https://bugbountyreports.com/reports/10549-ssrf-with-bypass-leads-to-client-side-hosting2026-10-29 https://bugbountyreports.com/reports/6847-ssrf-with-information-disclosure2026-10-29 https://bugbountyreports.com/reports/2181-ssrf-share2026-10-29 https://bugbountyreports.com/reports/5450-ssrf-xspa-in-labs-data-gov-dashboard-validate2026-10-29 https://bugbountyreports.com/reports/959-ssrf-xspa-url2026-10-29 https://bugbountyreports.com/reports/3358-ssrf-xss2026-10-29 https://bugbountyreports.com/reports/4839-stack-buffer-overflow-in-gd-dynamicgetbuf2026-10-29 https://bugbountyreports.com/reports/10587-stack-buffer-overflow-in-mariadb-connect-storage-engine2026-10-29 https://bugbountyreports.com/reports/10525-stack-buffer-overflow-in-mariadb-dump-quote-name-allows2026-10-29 https://bugbountyreports.com/reports/7966-stack-buffer-overflow-via-gmp-sprintf-in-blssignature-and2026-10-29 https://bugbountyreports.com/reports/10533-stack-buffer-overflow-via-crafted-keyseg-start-keyseg2026-10-29 https://bugbountyreports.com/reports/4800-stack-buffer-overflows-in-the-curses-module2026-10-29 https://bugbountyreports.com/reports/10535-stack-buffer-overflow-in-mariadb-charset-collation-map-st2026-10-29 https://bugbountyreports.com/reports/2946-stack-overflow-2-in-libsass2026-10-29 https://bugbountyreports.com/reports/2947-stack-overflow-3-in-libsass2026-10-29 https://bugbountyreports.com/reports/2948-stack-overflow-4-in-libsass2026-10-29 https://bugbountyreports.com/reports/2949-stack-overflow-5-in-libsass2026-10-29 https://bugbountyreports.com/reports/2950-stack-overflow-6-in-libsass2026-10-29 https://bugbountyreports.com/reports/4445-stack-overflow-affecting-ext-field-on-stylers-xml2026-10-29 https://bugbountyreports.com/reports/10511-stack-overflow-dos-in-st-geomfromgeojson-allows-any2026-10-29 https://bugbountyreports.com/reports/3757-stack-overflow-in-json-rpc-server2026-10-29 https://bugbountyreports.com/reports/2945-stack-overflow-in-libsass2026-10-29 https://bugbountyreports.com/reports/4444-stack-overflow-in-xml-parsing2026-10-29 https://bugbountyreports.com/reports/4893-stack-overflow-when-decompressing-tar-archives2026-10-29 https://bugbountyreports.com/reports/4875-stack-based-buffer-overflow-vulnerability-in-php-stream-zip2026-10-29 https://bugbountyreports.com/reports/4874-stack-based-buffer-overflow-vulnerability-in-virtual-file-ex2026-10-29 https://bugbountyreports.com/reports/4676-stack-buffer-overflow-through-resourcebundle-methods2026-10-29 https://bugbountyreports.com/reports/5954-staff-no-permissions-on-the-store-can-retrieve-the-details2026-10-29 https://bugbountyreports.com/reports/8913-staff-and-triage-can-modify-the-initial-post-of-a-report2026-10-29 https://bugbountyreports.com/reports/6032-staff-can-able-to-extend-shopify-trial-period-without-admin2026-10-29 https://bugbountyreports.com/reports/8216-staff-can-create-workflows-in-shopify-admin-without-apps2026-10-29 https://bugbountyreports.com/reports/7482-staff-can-use-bulk-operations-finish-webhook-topic-using2026-10-29 https://bugbountyreports.com/reports/1414-staff-member-can-delete-private-apps2026-10-29 https://bugbountyreports.com/reports/6286-staff-member-can-get-pos-access-without-user-interaction2026-10-29 https://bugbountyreports.com/reports/4295-staff-member-with-no-explicit-permissions-can-view2026-10-29 https://bugbountyreports.com/reports/6029-staff-member-with-no-permission-can-delete-pos-staff-from2026-10-29 https://bugbountyreports.com/reports/1320-staff-members-with-no-permission-can-access-to-the-files2026-10-29 https://bugbountyreports.com/reports/798-staff-members-with-no-permission-to-access-domains-can2026-10-29 https://bugbountyreports.com/reports/1156-staff-memeber-can-install-apps-even-if-have-limitied-access2026-10-29 https://bugbountyreports.com/reports/7457-staff-who-only-have-apps-and-channels-permission-can-do-a2026-10-29 https://bugbountyreports.com/reports/6284-staff-with-no-permissions-can-listen-to-shopify-ping2026-10-29 https://bugbountyreports.com/reports/6801-staff-with-no-permissions-could-possibly-list-and-accept2026-10-29 https://bugbountyreports.com/reports/10002-staff-with-restricted-permissions-could-access-customer2026-10-29 https://bugbountyreports.com/reports/9173-staff-without-manage-themes-permissions-can-update-themes2026-10-29 https://bugbountyreports.com/reports/7601-staffordernotificationsubscriptioncreate-is-not-blocked2026-10-29 https://bugbountyreports.com/reports/7602-staffordernotificationsubscriptiondelete-could-be-used-by2026-10-29 https://bugbountyreports.com/reports/4550-starbucks-china-android-app-cloud-storage-service-leaks-a2026-10-29 https://bugbountyreports.com/reports/1733-state-filter-in-issuablefinder-allows-attacker-to-delete2026-10-29 https://bugbountyreports.com/reports/42-state-parameter-missing-on-google-oauth2026-10-29 https://bugbountyreports.com/reports/7519-static-files-on-hackerone-com-can-be-made-inaccessible2026-10-29 https://bugbountyreports.com/reports/1343-stats-nextcloud-com-content-injection2026-10-29 https://bugbountyreports.com/reports/1616-status-bar-obfuscation2026-10-29 https://bugbountyreports.com/reports/4556-steal-all-collateral-during-liquidation-by-exploiting-lack2026-10-29 https://bugbountyreports.com/reports/4540-steal-all-mkr-from-flap-during-liquidation-by-exploiting2026-10-29 https://bugbountyreports.com/reports/7395-steal-any-users-access-token-via-open-redirect-in-https2026-10-29 https://bugbountyreports.com/reports/4496-steal-collateral-during-end-process-by-earning-dsr-interest2026-10-29 https://bugbountyreports.com/reports/7900-steal-private-objects-of-other-projects-via-project-import2026-10-29 https://bugbountyreports.com/reports/6671-stealing-app-credentials-by-reflected-xss-on-lark-suite2026-10-29 https://bugbountyreports.com/reports/2772-stealing-contact-form-data-on-www-hackerone-com-using2026-10-29 https://bugbountyreports.com/reports/5968-stealing-data-from-customers-gitlab-com-without-user2026-10-29 https://bugbountyreports.com/reports/4083-stealing-facebook-oauth-code-through-screenshot-viewer2026-10-29 https://bugbountyreports.com/reports/1350-stealing-livechat-token-and-using-it-to-chat-as-the-user2026-10-29 https://bugbountyreports.com/reports/3670-stealing-private-information-in-vk-android-app-through2026-10-29 https://bugbountyreports.com/reports/7128-stealing-sso-login-tokens-snappublisher-snapchat-com2026-10-29 https://bugbountyreports.com/reports/1888-stealing-user-emails-by-clickjacking-cards-twitter-com-xxx2026-10-29 https://bugbountyreports.com/reports/8563-stealing-users-oauth-authorization-code-via-redirect-uri2026-10-29 https://bugbountyreports.com/reports/4557-stealing-users-oauth-tokens-through-redirect-uri-parameter2026-10-29 https://bugbountyreports.com/reports/3691-stealing-users-oauth-tokens-via-redirect-uri2026-10-29 https://bugbountyreports.com/reports/1581-stealing-users-password-limited-scenario2026-10-29 https://bugbountyreports.com/reports/2030-stealing-users-facebook-access-tokens-kitcrm-com2026-10-29 https://bugbountyreports.com/reports/1987-stealing-xoxs-tokens-using-weak-postmessage-call-popup2026-10-29 https://bugbountyreports.com/reports/5777-stealing-zomato-x-access-token-in-bulk-using-http-request2026-10-29 https://bugbountyreports.com/reports/5235-steam-chat-trade-offer-presentation-vulnerability2026-10-29 https://bugbountyreports.com/reports/1907-still-heap-overflow-in-mrb-ary-splice2026-10-29 https://bugbountyreports.com/reports/5956-stocky-app-administrator-can-create-a-backdoor-admin2026-10-29 https://bugbountyreports.com/reports/1341-stop-serving-grtp-co-over-http2026-10-29 https://bugbountyreports.com/reports/6451-stopping-grinch-to-ruin-xmas2026-10-29 https://bugbountyreports.com/reports/7837-storage-of-old-passwords-in-plain-text-format2026-10-29 https://bugbountyreports.com/reports/7897-store-admin-page-accessible-without-authentication-at-http2026-10-29 https://bugbountyreports.com/reports/7369-store-deletion-or-sell-without-authentication2026-10-29 https://bugbountyreports.com/reports/5058-store-development-resource-center-was-vulnerable-to-a2026-10-29 https://bugbountyreports.com/reports/8147-store-internal-email-disclosed-through-shopify-data-exporter2026-10-29 https://bugbountyreports.com/reports/1806-store-xss2026-10-29 https://bugbountyreports.com/reports/2819-store-xss-on-informatica-university-via-transcript2026-10-29 https://bugbountyreports.com/reports/6332-store-xss-in-error-message-of-build-dependencies2026-10-29 https://bugbountyreports.com/reports/4261-stored-xss2026-10-29 https://bugbountyreports.com/reports/2355-stored-but-self-xss-in-mercantile-wordpress-org2026-10-29 https://bugbountyreports.com/reports/4497-stored-credentials-instantly-autofilled-within-sandboxed2026-10-29 https://bugbountyreports.com/reports/3569-stored-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/2509-stored-cross-site-scripting-xss-vulnerability-on-a-dod2026-10-29 https://bugbountyreports.com/reports/7896-stored-cross-site-scripting-at-http-www-grouplogic-com2026-10-29 https://bugbountyreports.com/reports/2053-stored-cross-site-scripting-in-customer-name2026-10-29 https://bugbountyreports.com/reports/8421-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8423-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8425-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8426-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8418-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8419-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8940-stored-cross-site-scripting-in-https-edu2026-10-29 https://bugbountyreports.com/reports/8422-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8417-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/8420-stored-cross-site-scripting-in-https2026-10-29 https://bugbountyreports.com/reports/5804-stored-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/9982-stored-cross-site-scripting-xss-in-add-contact-name-field2026-10-29 https://bugbountyreports.com/reports/2045-stored-cross-site-scripting-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/9840-stored-cross-site-scripting-found-in-custom-integration-app2026-10-29 https://bugbountyreports.com/reports/8383-stored-cross-site-scripting-in-dataset-owner2026-10-29 https://bugbountyreports.com/reports/1093-stored-cross-site-scripting-in-map-share-page2026-10-29 https://bugbountyreports.com/reports/9839-stored-cross-site-scripting-in-mercadopago-com-ar2026-10-29 https://bugbountyreports.com/reports/3101-stored-cross-site-scripting-in-the-infographics-using-data2026-10-29 https://bugbountyreports.com/reports/3100-stored-cross-site-scripting-in-the-infographics-using-links2026-10-29 https://bugbountyreports.com/reports/7597-stored-cross-site-scripting-on-devicelock-com-forum2026-10-29 https://bugbountyreports.com/reports/374-stored-cross-site-scripting-vulnerability-in-admin-php-cp2026-10-29 https://bugbountyreports.com/reports/6740-stored-cross-site-scripting-vulnerability-in-example-custom2026-10-29 https://bugbountyreports.com/reports/1310-stored-cross-site-scripting-in-cms-airship-s-authors2026-10-29 https://bugbountyreports.com/reports/3315-stored-css-injection2026-10-29 https://bugbountyreports.com/reports/7075-stored-dom-xss-via-mermaid-chart2026-10-29 https://bugbountyreports.com/reports/10471-stored-html-injection-cwe-79-via-livechat-visitor-name2026-10-29 https://bugbountyreports.com/reports/6863-stored-open-redirect-in-about-page2026-10-29 https://bugbountyreports.com/reports/2079-stored-passive-xss-at-scheduled-posts-kitcrm-com2026-10-29 https://bugbountyreports.com/reports/4732-stored-self-xss-on-https-app-crowdsignal-com-in-photo2026-10-29 https://bugbountyreports.com/reports/1321-stored-self-xss-at-m-uber-com2026-10-29 https://bugbountyreports.com/reports/2604-stored-self-xss-in-mercantile-wordpress-org-checkout2026-10-29 https://bugbountyreports.com/reports/7351-stored-unauth-xss-in-calendar-event-via-csrf2026-10-29 https://bugbountyreports.com/reports/337-stored-xss2026-10-29 https://bugbountyreports.com/reports/1400-stored-xss2026-10-29 https://bugbountyreports.com/reports/1518-stored-xss2026-10-29 https://bugbountyreports.com/reports/3870-stored-xss2026-10-29 https://bugbountyreports.com/reports/43-stored-xss2026-10-29 https://bugbountyreports.com/reports/108-stored-xss2026-10-29 https://bugbountyreports.com/reports/1242-stored-xss2026-10-29 https://bugbountyreports.com/reports/1520-stored-xss2026-10-29 https://bugbountyreports.com/reports/3862-stored-xss-angular-injection-in-support-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/5121-stored-xss-hexo-admin-plugin2026-10-29 https://bugbountyreports.com/reports/56-stored-xss-dangerous-https-www-khanacademy-org-coach-roster2026-10-29 https://bugbountyreports.com/reports/4326-stored-xss-engage2026-10-29 https://bugbountyreports.com/reports/2889-stored-xss-bypassing-htaccess-protection-in-http-nodebb2026-10-29 https://bugbountyreports.com/reports/6571-stored-xss-ssrf-in-lark-docs2026-10-29 https://bugbountyreports.com/reports/8923-stored-xss-csrf-in-apellido-value2026-10-29 https://bugbountyreports.com/reports/3153-stored-xss-community-ubnt-com2026-10-29 https://bugbountyreports.com/reports/5137-stored-xss-api-mapbox-com-ie-11-styles-name2026-10-29 https://bugbountyreports.com/reports/5605-stored-xss-agent-status2026-10-29 https://bugbountyreports.com/reports/1760-stored-xss-at-buy-button-page2026-10-29 https://bugbountyreports.com/reports/6397-stored-xss-at-conditions-through-my-custom-rule-field-at2026-10-29 https://bugbountyreports.com/reports/5816-stored-xss-at-in-linkedin-url-field2026-10-29 https://bugbountyreports.com/reports/5771-stored-xss-at-userprofile-aspx2026-10-29 https://bugbountyreports.com/reports/9050-stored-xss-at-https-8x8-com-api-id2026-10-29 https://bugbountyreports.com/reports/8113-stored-xss-at-https2026-10-29 https://bugbountyreports.com/reports/5748-stored-xss-at-https-app-smtp2go-com-settings-users2026-10-29 https://bugbountyreports.com/reports/1938-stored-xss-at-https-finance-owox-com-customer-accountlist2026-10-29 https://bugbountyreports.com/reports/7567-stored-xss-at-https-linkpop-com2026-10-29 https://bugbountyreports.com/reports/6560-stored-xss-at-https-www-mil2026-10-29 https://bugbountyreports.com/reports/6816-stored-xss-at-module-name2026-10-29 https://bugbountyreports.com/reports/2720-stored-xss-at-moneybird2026-10-29 https://bugbountyreports.com/reports/6396-stored-xss-at-template-editor-in-section-name-field-of2026-10-29 https://bugbountyreports.com/reports/2817-stored-xss-deleting-menu-links-in-the-shopify-admin2026-10-29 https://bugbountyreports.com/reports/9366-stored-xss-filter-bypass-on-discussion-forum2026-10-29 https://bugbountyreports.com/reports/9367-stored-xss-filter-bypass-on-discussion-forum-url-tag2026-10-29 https://bugbountyreports.com/reports/7998-stored-xss-for-grafana-dashboard-url2026-10-29 https://bugbountyreports.com/reports/192-stored-xss-found2026-10-29 https://bugbountyreports.com/reports/1159-stored-xss-found2026-10-29 https://bugbountyreports.com/reports/1517-stored-xss-from-display-settings-triggered-on-save-and2026-10-29 https://bugbountyreports.com/reports/1307-stored-xss-from-ticket-messages-in-admin-table-in2026-10-29 https://bugbountyreports.com/reports/3942-stored-xss-in-section-and-waf-bypass2026-10-29 https://bugbountyreports.com/reports/5971-stored-xss-in-create-groups2026-10-29 https://bugbountyreports.com/reports/3570-stored-xss-in-post-last-edited-option2026-10-29 https://bugbountyreports.com/reports/7790-stored-xss-in-product-type-field-executed-via-product2026-10-29 https://bugbountyreports.com/reports/6402-stored-xss-in-https-streamlabs-com-dashboard-goal-pages2026-10-29 https://bugbountyreports.com/reports/2080-stored-xss-in-shop-myshopify-com-admin-orders-id2026-10-29 https://bugbountyreports.com/reports/2521-stored-xss-in-myshopify-com2026-10-29 https://bugbountyreports.com/reports/955-stored-xss-in-admin-orders2026-10-29 https://bugbountyreports.com/reports/8341-stored-xss-in-admin-product-and-admin-collections2026-10-29 https://bugbountyreports.com/reports/8144-stored-xss-in-nlc-login-aspx-via-edit-get-parameter-through2026-10-29 https://bugbountyreports.com/reports/1154-stored-xss-in-access-rules2026-10-29 https://bugbountyreports.com/reports/6976-stored-xss-in-acronis-cyber-protect-console2026-10-29 https://bugbountyreports.com/reports/1121-stored-xss-in-adding-fileset2026-10-29 https://bugbountyreports.com/reports/4255-stored-xss-in-address-field-in-billing-activity-at-https2026-10-29 https://bugbountyreports.com/reports/2376-stored-xss-in-adress-book-starbucks-com-account-profile2026-10-29 https://bugbountyreports.com/reports/1877-stored-xss-in-album-description2026-10-29 https://bugbountyreports.com/reports/1855-stored-xss-in-albums-on-http-m-imgur-com2026-10-29 https://bugbountyreports.com/reports/144-stored-xss-in-all-fields-in-basic-google-maps-placemarks2026-10-29 https://bugbountyreports.com/reports/6755-stored-xss-in-any-message-leads-to-priv-esc-for-all-users2026-10-29 https://bugbountyreports.com/reports/489-stored-xss-in-api-key-of-operator-wallet2026-10-29 https://bugbountyreports.com/reports/5802-stored-xss-in-app-lemlist-com2026-10-29 https://bugbountyreports.com/reports/5808-stored-xss-in-app-lemlist-com2026-10-29 https://bugbountyreports.com/reports/6254-stored-xss-in-application-menu-via-home-page-url2026-10-29 https://bugbountyreports.com/reports/1166-stored-xss-in-archive-uber-com-due-to-injection-of2026-10-29 https://bugbountyreports.com/reports/10008-stored-xss-in-area-tutorials2026-10-29 https://bugbountyreports.com/reports/10279-stored-xss-in-attachment-display-exploitable-through2026-10-29 https://bugbountyreports.com/reports/7034-stored-xss-in-backup-scanning-plan-name2026-10-29 https://bugbountyreports.com/reports/650-stored-xss-in-bio-quote2026-10-29 https://bugbountyreports.com/reports/5864-stored-xss-in-blob-viewer2026-10-29 https://bugbountyreports.com/reports/2031-stored-xss-in-blog-comments-through-shopify-api2026-10-29 https://bugbountyreports.com/reports/181-stored-xss-in-channel-chat2026-10-29 https://bugbountyreports.com/reports/6042-stored-xss-in-collabora-via-user-name2026-10-29 https://bugbountyreports.com/reports/1311-stored-xss-in-comments2026-10-29 https://bugbountyreports.com/reports/3087-stored-xss-in-comments-driver-exam2026-10-29 https://bugbountyreports.com/reports/2524-stored-xss-in-comments-on-https-www-starbucks-co-uk-blog2026-10-29 https://bugbountyreports.com/reports/2209-stored-xss-in-community-ubnt-com2026-10-29 https://bugbountyreports.com/reports/647-stored-xss-in-company-url2026-10-29 https://bugbountyreports.com/reports/459-stored-xss-in-concrete5-5-7-0-42026-10-29 https://bugbountyreports.com/reports/1120-stored-xss-in-concrete5-5-7-2-12026-10-29 https://bugbountyreports.com/reports/639-stored-xss-in-contact-form2026-10-29 https://bugbountyreports.com/reports/10105-stored-xss-in-contacts-app-via-organisation-and-title-field2026-10-29 https://bugbountyreports.com/reports/3024-stored-xss-in-content-when-graph-is-created-via-api2026-10-29 https://bugbountyreports.com/reports/7330-stored-xss-in-conversations-both-client-and-admin-when2026-10-29 https://bugbountyreports.com/reports/10069-stored-xss-in-conversion-statistics-via-tracker-name2026-10-29 https://bugbountyreports.com/reports/7089-stored-xss-in-custom-emoji2026-10-29 https://bugbountyreports.com/reports/3140-stored-xss-in-dev-ucrm-billing-demo-ubnt-com-in-client2026-10-29 https://bugbountyreports.com/reports/1304-stored-xss-in-developer-uber-com2026-10-29 https://bugbountyreports.com/reports/440-stored-xss-in-direct-debit-name2026-10-29 https://bugbountyreports.com/reports/4319-stored-xss-in-discounts-section2026-10-29 https://bugbountyreports.com/reports/7321-stored-xss-in-document-title2026-10-29 https://bugbountyreports.com/reports/8328-stored-xss-in-dovetale-by-application-of-creator2026-10-29 https://bugbountyreports.com/reports/1178-stored-xss-in-drive-uber-com-wordpress-admin-panel2026-10-29 https://bugbountyreports.com/reports/2726-stored-xss-in-editor2026-10-29 https://bugbountyreports.com/reports/5832-stored-xss-in-elastic-app-search2026-10-29 https://bugbountyreports.com/reports/10031-stored-xss-in-email-notifcation2026-10-29 https://bugbountyreports.com/reports/7447-stored-xss-in-email-templates-via-link2026-10-29 https://bugbountyreports.com/reports/2309-stored-xss-in-express-objects-concrete5-v8-1-02026-10-29 https://bugbountyreports.com/reports/643-stored-xss-in-feature-paragraph2026-10-29 https://bugbountyreports.com/reports/642-stored-xss-in-feature-tile2026-10-29 https://bugbountyreports.com/reports/9886-stored-xss-in-file-upload-leads-to-privilege-escalation-and2026-10-29 https://bugbountyreports.com/reports/7476-stored-xss-in-files-slack-com2026-10-29 https://bugbountyreports.com/reports/1668-stored-xss-in-filters2026-10-29 https://bugbountyreports.com/reports/1254-stored-xss-in-financial-account-executing-in-bank-tab2026-10-29 https://bugbountyreports.com/reports/2417-stored-xss-in-gallery-application-nc-sa-2017-0102026-10-29 https://bugbountyreports.com/reports/6298-stored-xss-in-group-issue-list2026-10-29 https://bugbountyreports.com/reports/2603-stored-xss-in-headline-textcontrol-element-in-express-forms2026-10-29 https://bugbountyreports.com/reports/6177-stored-xss-in-hey-com-message-content2026-10-29 https://bugbountyreports.com/reports/5078-stored-xss-in-https-app-mopub-com2026-10-29 https://bugbountyreports.com/reports/1017-stored-xss-in-https-checkout-shopify-com2026-10-29 https://bugbountyreports.com/reports/4784-stored-xss-in-https-productreviews-shopifyapps-com-proxy-v42026-10-29 https://bugbountyreports.com/reports/4922-stored-xss-in-https-www-smule-com2026-10-29 https://bugbountyreports.com/reports/7032-stored-xss-in-ie11-on-hackerone-com-via-custom-fields2026-10-29 https://bugbountyreports.com/reports/649-stored-xss-in-image-alt-text2026-10-29 https://bugbountyreports.com/reports/4300-stored-xss-in-infogram-com-via-language2026-10-29 https://bugbountyreports.com/reports/6614-stored-xss-in-intense-debate-comment-system2026-10-29 https://bugbountyreports.com/reports/8272-stored-xss-in-intensedebate-com-via-the-comments-rss2026-10-29 https://bugbountyreports.com/reports/3011-stored-xss-in-invited-team-member-via-email-parameter2026-10-29 https://bugbountyreports.com/reports/5089-stored-xss-in-jetpack-s-simple-payment-module-by2026-10-29 https://bugbountyreports.com/reports/6639-stored-xss-in-larksuite-internal-helpdesk-and-other-user-s2026-10-29 https://bugbountyreports.com/reports/3374-stored-xss-in-learnboost-com-via-the-lesson-goals-parameter2026-10-29 https://bugbountyreports.com/reports/4529-stored-xss-in-localhost-via-integrated-torrent-downloader2026-10-29 https://bugbountyreports.com/reports/7290-stored-xss-in-main-page-of-a-project-caused-by-arbitrary2026-10-29 https://bugbountyreports.com/reports/10398-stored-xss-in-maintenance-tools-via-unescaped-entity-names2026-10-29 https://bugbountyreports.com/reports/6638-stored-xss-in-markdown-file-with-nextcloud-talk-using2026-10-29 https://bugbountyreports.com/reports/7352-stored-xss-in-markdown-via-the-designreferencefilter2026-10-29 https://bugbountyreports.com/reports/6014-stored-xss-in-markdown-when-redacting-references2026-10-29 https://bugbountyreports.com/reports/1172-stored-xss-in-member-book2026-10-29 https://bugbountyreports.com/reports/7718-stored-xss-in-merge-request-creation-page-through-payload2026-10-29 https://bugbountyreports.com/reports/3933-stored-xss-in-merge-request-pages2026-10-29 https://bugbountyreports.com/reports/8733-stored-xss-in-merge-request-pages2026-10-29 https://bugbountyreports.com/reports/7354-stored-xss-in-mermaid-when-viewing-markdown-files2026-10-29 https://bugbountyreports.com/reports/648-stored-xss-in-message-to-display-when-no-pages-listed2026-10-29 https://bugbountyreports.com/reports/9312-stored-xss-in-messages2026-10-29 https://bugbountyreports.com/reports/5841-stored-xss-in-my-staff-name-fired-in-another-your-internal2026-10-29 https://bugbountyreports.com/reports/2728-stored-xss-in-name-field-in-user-groups-group-details-form2026-10-29 https://bugbountyreports.com/reports/1274-stored-xss-in-name-selection2026-10-29 https://bugbountyreports.com/reports/10451-stored-xss-in-nameserver-field-on-account-settings-page2026-10-29 https://bugbountyreports.com/reports/3581-stored-xss-in-node-red2026-10-29 https://bugbountyreports.com/reports/7878-stored-xss-in-notes-with-csp-bypass-for-gitlab-com2026-10-29 https://bugbountyreports.com/reports/4232-stored-xss-in-oauth-redirect-uri2026-10-29 https://bugbountyreports.com/reports/2655-stored-xss-in-pages-seo-dialog-name-field-concrete5-8-1-02026-10-29 https://bugbountyreports.com/reports/3364-stored-xss-in-partners-dashboard2026-10-29 https://bugbountyreports.com/reports/7872-stored-xss-in-photos-user-map-gne2026-10-29 https://bugbountyreports.com/reports/9007-stored-xss-in-plan-name-field-acronis-cyber-protect2026-10-29 https://bugbountyreports.com/reports/5909-stored-xss-in-post-preview-as-contributor2026-10-29 https://bugbountyreports.com/reports/5988-stored-xss-in-post-title-poc2026-10-29 https://bugbountyreports.com/reports/1863-stored-xss-in-posts-because-of-absence-of-oembed-variables2026-10-29 https://bugbountyreports.com/reports/4780-stored-xss-in-private-message2026-10-29 https://bugbountyreports.com/reports/4088-stored-xss-in-private-message-component-buddypress2026-10-29 https://bugbountyreports.com/reports/2727-stored-xss-in-private-messages-reply-allows-to-execute2026-10-29 https://bugbountyreports.com/reports/2770-stored-xss-in-profile-activity-feed-messages2026-10-29 https://bugbountyreports.com/reports/7431-stored-xss-in-profile-page2026-10-29 https://bugbountyreports.com/reports/8465-stored-xss-in-public-profile-reviews2026-10-29 https://bugbountyreports.com/reports/7714-stored-xss-in-question-edit-for-product-name-bypass-14166722026-10-29 https://bugbountyreports.com/reports/7716-stored-xss-in-question-edit-from-product-name2026-10-29 https://bugbountyreports.com/reports/9589-stored-xss-in-reclamos2026-10-29 https://bugbountyreports.com/reports/7863-stored-xss-in-repository-file-viewer2026-10-29 https://bugbountyreports.com/reports/10430-stored-xss-in-rocket-chat-html-file-export-unauthenticated2026-10-29 https://bugbountyreports.com/reports/2308-stored-xss-in-rss-feeds-title-concrete5-v8-1-02026-10-29 https://bugbountyreports.com/reports/6643-stored-xss-in-satisfaction-surveys-via-ask-reason-for2026-10-29 https://bugbountyreports.com/reports/3764-stored-xss-in-shop-name-lp-reverb-com2026-10-29 https://bugbountyreports.com/reports/5098-stored-xss-in-shopify-chat2026-10-29 https://bugbountyreports.com/reports/810-stored-xss-in-slack-weird-trial-and-error2026-10-29 https://bugbountyreports.com/reports/451-stored-xss-in-slack-com2026-10-29 https://bugbountyreports.com/reports/188-stored-xss-in-slack-com-integrations2026-10-29 https://bugbountyreports.com/reports/149-stored-xss-in-slackbot-direct-messages2026-10-29 https://bugbountyreports.com/reports/3368-stored-xss-in-snapmatic-r-editor-comments2026-10-29 https://bugbountyreports.com/reports/2807-stored-xss-in-snapmatic-comments2026-10-29 https://bugbountyreports.com/reports/1308-stored-xss-in-supportflow-ticket-subject2026-10-29 https://bugbountyreports.com/reports/8464-stored-xss-in-svg-file-as-data-url2026-10-29 https://bugbountyreports.com/reports/5161-stored-xss-in-template-comments2026-10-29 https://bugbountyreports.com/reports/2473-stored-xss-in-templates-enahance-social-badges2026-10-29 https://bugbountyreports.com/reports/645-stored-xss-in-testimonial-company2026-10-29 https://bugbountyreports.com/reports/644-stored-xss-in-testimonial-name2026-10-29 https://bugbountyreports.com/reports/646-stored-xss-in-testimonial-position2026-10-29 https://bugbountyreports.com/reports/6697-stored-xss-in-the-banner-block-description2026-10-29 https://bugbountyreports.com/reports/3067-stored-xss-in-the-custom-logo-link-non-basic-plan-required2026-10-29 https://bugbountyreports.com/reports/5758-stored-xss-in-the-file-search-filter2026-10-29 https://bugbountyreports.com/reports/3998-stored-xss-in-the-guide-s-gameplayversion-www-dota2-com2026-10-29 https://bugbountyreports.com/reports/582-stored-xss-in-the-shopify-discussion-forums2026-10-29 https://bugbountyreports.com/reports/8210-stored-xss-in-the-ticketing-system2026-10-29 https://bugbountyreports.com/reports/641-stored-xss-in-title-of-date-navigation2026-10-29 https://bugbountyreports.com/reports/640-stored-xss-in-title-of-the-topic-list2026-10-29 https://bugbountyreports.com/reports/1865-stored-xss-in-topics-because-of-whitelisted-generic-engine2026-10-29 https://bugbountyreports.com/reports/490-stored-xss-in-transaction2026-10-29 https://bugbountyreports.com/reports/5833-stored-xss-in-tsvb-visualizations-markdown-panel2026-10-29 https://bugbountyreports.com/reports/1700-stored-xss-in-unifi-ubnt-com2026-10-29 https://bugbountyreports.com/reports/442-stored-xss-in-user-name-2-affected-another-user2026-10-29 https://bugbountyreports.com/reports/289-stored-xss-in-username-slack-com2026-10-29 https://bugbountyreports.com/reports/4475-stored-xss-in-wiki-pages2026-10-29 https://bugbountyreports.com/reports/1620-stored-xss-in-wis-pr2026-10-29 https://bugbountyreports.com/reports/5233-stored-xss-in-wordpress-com2026-10-29 https://bugbountyreports.com/reports/6620-stored-xss-in-wordpress-com2026-10-29 https://bugbountyreports.com/reports/3373-stored-xss-in-www-learnboost-com-via-zip-codes2026-10-29 https://bugbountyreports.com/reports/185-stored-xss-in-www-slack-files-com2026-10-29 https://bugbountyreports.com/reports/1176-stored-xss-on-badges-page2026-10-29 https://bugbountyreports.com/reports/9607-stored-xss-on-https-www-question-com2026-10-29 https://bugbountyreports.com/reports/5842-stored-xss-on-helpdesk2026-10-29 https://bugbountyreports.com/reports/7511-stored-xss-on-1-4-02026-10-29 https://bugbountyreports.com/reports/3633-stored-xss-on-activity2026-10-29 https://bugbountyreports.com/reports/3664-stored-xss-on-add-calendar2026-10-29 https://bugbountyreports.com/reports/3663-stored-xss-on-add-event-in-calendar2026-10-29 https://bugbountyreports.com/reports/6083-stored-xss-on-add-project2026-10-29 https://bugbountyreports.com/reports/2669-stored-xss-on-admin-access-page-email-field2026-10-29 https://bugbountyreports.com/reports/7715-stored-xss-on-aliexpress-review-importer-products-when2026-10-29 https://bugbountyreports.com/reports/3902-stored-xss-on-any-page-in-most-uber-domains2026-10-29 https://bugbountyreports.com/reports/6265-stored-xss-on-app-crowdsignal-com-your-subdomain-survey-fm2026-10-29 https://bugbountyreports.com/reports/8509-stored-xss-on-app-crowdsignal-com-your-subdomain2026-10-29 https://bugbountyreports.com/reports/6806-stored-xss-on-apps-shopify-com2026-10-29 https://bugbountyreports.com/reports/6668-stored-xss-on-auth-uber-com-oauth-v2-authorize-via-redirect2026-10-29 https://bugbountyreports.com/reports/651-stored-xss-on-blog-s-page-tile2026-10-29 https://bugbountyreports.com/reports/5962-stored-xss-on-broken-themes-via-filename2026-10-29 https://bugbountyreports.com/reports/8971-stored-xss-on-bugzilla-mozilla-org-via-comment-edit-feature2026-10-29 https://bugbountyreports.com/reports/3761-stored-xss-on-buy-button2026-10-29 https://bugbountyreports.com/reports/4388-stored-xss-on-byddypress-plug-in-via-groups-name2026-10-29 https://bugbountyreports.com/reports/5767-stored-xss-on-company-logo2026-10-29 https://bugbountyreports.com/reports/5625-stored-xss-on-demo-app-link2026-10-29 https://bugbountyreports.com/reports/1420-stored-xss-on-developer-uber-com-via-admin-account2026-10-29 https://bugbountyreports.com/reports/5757-stored-xss-on-express-entries2026-10-29 https://bugbountyreports.com/reports/2234-stored-xss-on-files-overview-by-abusing-git-submodule-url2026-10-29 https://bugbountyreports.com/reports/7553-stored-xss-on-helpdesk-using-user-s-city2026-10-29 https://bugbountyreports.com/reports/6266-stored-xss-on-https-app-crowdsignal-com-surveys-survey-id2026-10-29 https://bugbountyreports.com/reports/5474-stored-xss-on-https-apps-topcoder-com-wiki-pages-editpage2026-10-29 https://bugbountyreports.com/reports/5479-stored-xss-on-https-apps-topcoder-com-wiki-plugins2026-10-29 https://bugbountyreports.com/reports/6758-stored-xss-on-https-events-hackerone-com2026-10-29 https://bugbountyreports.com/reports/4413-stored-xss-on-https-paypal-com-signin-via-cache-poisoning2026-10-29 https://bugbountyreports.com/reports/929-stored-xss-on-https-www-algolia-com-realtime-search-demo2026-10-29 https://bugbountyreports.com/reports/4075-stored-xss-on-imgur-profile2026-10-29 https://bugbountyreports.com/reports/10068-stored-xss-on-inventory-retrieve-php2026-10-29 https://bugbountyreports.com/reports/7902-stored-xss-on-issue-comments-and-other-pages-which-contain2026-10-29 https://bugbountyreports.com/reports/3841-stored-xss-on-issue-details-page2026-10-29 https://bugbountyreports.com/reports/9243-stored-xss-on-linkedin-app-via-iframe-tag-in-article2026-10-29 https://bugbountyreports.com/reports/2851-stored-xss-on-member-post-feed2026-10-29 https://bugbountyreports.com/reports/1748-stored-xss-on-new-calling-plugin-spreed2026-10-29 https://bugbountyreports.com/reports/1378-stored-xss-on-newsroom-uber-com-admin-panel-stream2026-10-29 https://bugbountyreports.com/reports/6427-stored-xss-on-oslo-io-in-notifications-via-project-name2026-10-29 https://bugbountyreports.com/reports/2788-stored-xss-on-player-vimeo-com2026-10-29 https://bugbountyreports.com/reports/3040-stored-xss-on-profile-page-via-steam-display-name2026-10-29 https://bugbountyreports.com/reports/8914-stored-xss-on-promo-indrive-com2026-10-29 https://bugbountyreports.com/reports/6013-stored-xss-on-pypi-simple-api-endpoint2026-10-29 https://bugbountyreports.com/reports/4118-stored-xss-on-reports2026-10-29 https://bugbountyreports.com/reports/5278-stored-xss-on-scan-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/638-stored-xss-on-search-title2026-10-29 https://bugbountyreports.com/reports/1353-stored-xss-on-share-popup-of-a-directory-s-gallery-view2026-10-29 https://bugbountyreports.com/reports/714-stored-xss-on-statement2026-10-29 https://bugbountyreports.com/reports/2916-stored-xss-on-support-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/2988-stored-xss-on-support-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/1491-stored-xss-on-team-slack-com-using-new-markdown-editor-of2026-10-29 https://bugbountyreports.com/reports/7758-stored-xss-on-the-www-intensedebate-com-extras-widgets-url2026-10-29 https://bugbountyreports.com/reports/6444-stored-xss-on-the-job-page2026-10-29 https://bugbountyreports.com/reports/10613-stored-xss-on-the-public-pontoon-dashboards-the-latest2026-10-29 https://bugbountyreports.com/reports/316-stored-xss-on-this-link-https-sehacure-slack-com-help2026-10-29 https://bugbountyreports.com/reports/8065-stored-xss-on-tiktok-ads2026-10-29 https://bugbountyreports.com/reports/7921-stored-xss-on-tiktok-live-form2026-10-29 https://bugbountyreports.com/reports/10021-stored-xss-on-tiktok-s-backend-leads-to-the-leakage-of2026-10-29 https://bugbountyreports.com/reports/637-stored-xss-on-title-of-page-list-in-edit-page-list2026-10-29 https://bugbountyreports.com/reports/9666-stored-xss-on-trix-editor-version-2-1-12026-10-29 https://bugbountyreports.com/reports/10427-stored-xss-on-trix-editor-version-latest-2-1-16-sanitizer2026-10-29 https://bugbountyreports.com/reports/5412-stored-xss-on-upload-files-leads-to-steal-cookie2026-10-29 https://bugbountyreports.com/reports/3159-stored-xss-on-urbandictionary-com2026-10-29 https://bugbountyreports.com/reports/841-stored-xss-on-vimeo-com-and-player-vimeo-com2026-10-29 https://bugbountyreports.com/reports/3050-stored-xss-on-wordpress-infogram-plugin2026-10-29 https://bugbountyreports.com/reports/8722-stored-xss-on-wordpress-com2026-10-29 https://bugbountyreports.com/reports/8799-stored-xss-on-wordpress-com2026-10-29 https://bugbountyreports.com/reports/8544-stored-xss-on-www-hackerone-com-due-to-deleted-s3-bucket2026-10-29 https://bugbountyreports.com/reports/4162-stored-xss-on-www-starbucks-com-sg-careers-career-center2026-10-29 https://bugbountyreports.com/reports/8330-stored-xss-payload-when-sending-videos2026-10-29 https://bugbountyreports.com/reports/2430-stored-xss-templates-call-for-action-feature2026-10-29 https://bugbountyreports.com/reports/5384-stored-xss-through-facebook-page-connection2026-10-29 https://bugbountyreports.com/reports/6709-stored-xss-through-name-last-name-on-https2026-10-29 https://bugbountyreports.com/reports/7670-stored-xss-through-pdf-viewer2026-10-29 https://bugbountyreports.com/reports/2049-stored-xss-thru-svg-upload2026-10-29 https://bugbountyreports.com/reports/1516-stored-xss-triggered-by-json-key-during-ui-generation2026-10-29 https://bugbountyreports.com/reports/3078-stored-xss-using-media2026-10-29 https://bugbountyreports.com/reports/1313-stored-xss-using-svg2026-10-29 https://bugbountyreports.com/reports/8789-stored-xss-via-profile-at2026-10-29 https://bugbountyreports.com/reports/1069-stored-xss-via-free-shipping-option-discounts2026-10-29 https://bugbountyreports.com/reports/6585-stored-xss-via-64-vulnerable-fields-in-leads-to-credential2026-10-29 https://bugbountyreports.com/reports/8952-stored-xss-via-ads-account-name2026-10-29 https://bugbountyreports.com/reports/1255-stored-xss-via-angularjs-injection2026-10-29 https://bugbountyreports.com/reports/5803-stored-xss-via-campaign-name2026-10-29 https://bugbountyreports.com/reports/6071-stored-xss-via-comment-form-at2026-10-29 https://bugbountyreports.com/reports/4346-stored-xss-via-create-project-add-new-translation-project2026-10-29 https://bugbountyreports.com/reports/2128-stored-xss-via-discussion-title-and-send-as-email-attribute2026-10-29 https://bugbountyreports.com/reports/8595-stored-xss-via-filename-on-https-partners-line-me2026-10-29 https://bugbountyreports.com/reports/10334-stored-xss-via-full-name-field-in-userlog-email-entries2026-10-29 https://bugbountyreports.com/reports/8737-stored-xss-via-kroki-diagram2026-10-29 https://bugbountyreports.com/reports/10033-stored-xss-via-link-name2026-10-29 https://bugbountyreports.com/reports/10330-stored-xss-via-malicious-usernames-in-audit-log-details2026-10-29 https://bugbountyreports.com/reports/7076-stored-xss-via-mermaid-prototype-pollution-vulnerability2026-10-29 https://bugbountyreports.com/reports/7446-stored-xss-via-mermaid-prototype-pollution-vulnerability2026-10-29 https://bugbountyreports.com/reports/9823-stored-xss-via-post-tittle-enabling-non-privileged-user-to2026-10-29 https://bugbountyreports.com/reports/3138-stored-xss-via-send-crew-invite2026-10-29 https://bugbountyreports.com/reports/10450-stored-xss-via-svg-upload-check-content-blocklist-bypass2026-10-29 https://bugbountyreports.com/reports/10110-stored-xss-via-svg-upload-in-chat-line-biz2026-10-29 https://bugbountyreports.com/reports/3109-stored-xss-via-template-injection2026-10-29 https://bugbountyreports.com/reports/3089-stored-xss-via-transloadit-com-and-imageproxy2026-10-29 https://bugbountyreports.com/reports/4366-stored-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/3000-stored-xss-vulnerability-in-additional-urls-in-location2026-10-29 https://bugbountyreports.com/reports/4733-stored-xss-vulnerability-in-comments-on-wordpress-com2026-10-29 https://bugbountyreports.com/reports/2731-stored-xss-vulnerability-in-rss-feeds-description-field2026-10-29 https://bugbountyreports.com/reports/5515-stored-xss-vulnerability-on2026-10-29 https://bugbountyreports.com/reports/10096-stored-xss-vulnerability-via-svg-file2026-10-29 https://bugbountyreports.com/reports/2852-stored-xss-with-crlf-injection-via-post-message-to-user-feed2026-10-29 https://bugbountyreports.com/reports/3081-stored-xss-lead-forms-app-php2026-10-29 https://bugbountyreports.com/reports/7399-stored-xss-m-vk-com-video2026-10-29 https://bugbountyreports.com/reports/6592-stored-xss2026-10-29 https://bugbountyreports.com/reports/2061-stored-xss-22026-10-29 https://bugbountyreports.com/reports/1819-stored-xss2026-10-29 https://bugbountyreports.com/reports/7400-stored-xss-al-video-php-act-a-choose-video-box2026-10-29 https://bugbountyreports.com/reports/6735-stored-xss-m-vk-com2026-10-29 https://bugbountyreports.com/reports/1691-stored-xss-cross-site-scripting-in-slack-app-name2026-10-29 https://bugbountyreports.com/reports/4317-stored-xss-html-injection-in-autocomplete-suggestions-for2026-10-29 https://bugbountyreports.com/reports/3482-stored-xxs-https-steamcommunity-com-search-users-text-via2026-10-29 https://bugbountyreports.com/reports/6049-stored-xss-at-connect-topcoder-com-projects-affected-on2026-10-29 https://bugbountyreports.com/reports/10074-stored-xss-in-banner-name-field2026-10-29 https://bugbountyreports.com/reports/10075-stored-xss-in-campaign-name-displayed-in-banners-modal2026-10-29 https://bugbountyreports.com/reports/856-stored-xss-in-https-www-coinbase-com2026-10-29 https://bugbountyreports.com/reports/7079-stored-xss-in-merge-requests2026-10-29 https://bugbountyreports.com/reports/9362-stored-xss-injected-in-wiki-page-via-banzai-pipeline2026-10-29 https://bugbountyreports.com/reports/7078-stored-xss-on-wiki-pages2026-10-29 https://bugbountyreports.com/reports/8502-stored-xss-with-csp-bypass-via-labels-color2026-10-29 https://bugbountyreports.com/reports/9624-stored-xss-ads-tiktok-com2026-10-29 https://bugbountyreports.com/reports/4590-storefront-api-allows-for-a-brute-force-attack-on-customer2026-10-29 https://bugbountyreports.com/reports/557-str-repeat-sign-mismatch-based-memory-corruption2026-10-29 https://bugbountyreports.com/reports/1337-strengthen-diffie-hellman-dh-key-exchange-parameters-in2026-10-29 https://bugbountyreports.com/reports/360-strict-transport-security-misconfiguration2026-10-29 https://bugbountyreports.com/reports/136-strict-transport-security-on-secret-ly2026-10-29 https://bugbountyreports.com/reports/8119-string-length-restriction-byepass-at-https-callerfeel2026-10-29 https://bugbountyreports.com/reports/1287-stringio-strio-getline-can-divulge-arbitrary-memory2026-10-29 https://bugbountyreports.com/reports/5158-stripo-blog-search-sql-injection2026-10-29 https://bugbountyreports.com/reports/5100-stripo-email-reflected-xss2026-10-29 https://bugbountyreports.com/reports/1006-strored-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/5347-strored-xss-on-https-my-stripo-email-multiple-inputs2026-10-29 https://bugbountyreports.com/reports/1767-struct-type-confusion-rce2026-10-29 https://bugbountyreports.com/reports/975-sub-domain-take-over2026-10-29 https://bugbountyreports.com/reports/2959-sub-domain-takeover2026-10-29 https://bugbountyreports.com/reports/1942-sub-domain-takeover-at-mk-prd-vine-co2026-10-29 https://bugbountyreports.com/reports/8238-sub-dept-user-can-add-user-s-to-main-department2026-10-29 https://bugbountyreports.com/reports/1030-sub-domain-takeover2026-10-29 https://bugbountyreports.com/reports/8370-sub-domain-takeover-at-http-www-codefi-consensys-net2026-10-29 https://bugbountyreports.com/reports/903-subdomain-expired2026-10-29 https://bugbountyreports.com/reports/4423-subdomain-take-over-at-recommendation-algolia-com2026-10-29 https://bugbountyreports.com/reports/1878-subdomain-take-over-signup-websummit2026-10-29 https://bugbountyreports.com/reports/2812-subdomain-take-over-of-redacted-18f-gov2026-10-29 https://bugbountyreports.com/reports/993-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/3083-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/3532-subdomain-takeover-https-competition-shopify-com2026-10-29 https://bugbountyreports.com/reports/7010-subdomain-takeover-jet-acronis-com-pointing-to-unclaimed2026-10-29 https://bugbountyreports.com/reports/7009-subdomain-takeover-www-jet-acronis-com-pointing-to2026-10-29 https://bugbountyreports.com/reports/7795-subdomain-takeover-abandoned-zendesk-easycontactnow-com2026-10-29 https://bugbountyreports.com/reports/3440-subdomain-takeover-and-stored-xss-via-trailing-dot-at-https2026-10-29 https://bugbountyreports.com/reports/1895-subdomain-takeover-moderator-ubnt-com2026-10-29 https://bugbountyreports.com/reports/2373-subdomain-takeover-sales-mixmax-com2026-10-29 https://bugbountyreports.com/reports/7348-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/3555-subdomain-takeover-http-dev-rbk-money2026-10-29 https://bugbountyreports.com/reports/2208-subdomain-takeover-2-at-info-hacker-one2026-10-29 https://bugbountyreports.com/reports/2493-subdomain-takeover-3-at-info-hacker-one2026-10-29 https://bugbountyreports.com/reports/2492-subdomain-takeover-4-at-info-hacker-one2026-10-29 https://bugbountyreports.com/reports/9493-subdomain-takeover2026-10-29 https://bugbountyreports.com/reports/9416-subdomain-takeover-mil2026-10-29 https://bugbountyreports.com/reports/461-subdomain-takeover-1511493148-cloud-vimeo-com2026-10-29 https://bugbountyreports.com/reports/8692-subdomain-takeover-affecting-at-vex-weather-com2026-10-29 https://bugbountyreports.com/reports/9067-subdomain-takeover-at2026-10-29 https://bugbountyreports.com/reports/1466-subdomain-takeover-at-api-legalrobot-com-due-to-non-used2026-10-29 https://bugbountyreports.com/reports/3765-subdomain-takeover-at-blog-exchangemarketplace-com2026-10-29 https://bugbountyreports.com/reports/8338-subdomain-takeover-at-course-oberlo-com2026-10-29 https://bugbountyreports.com/reports/5341-subdomain-takeover-at-creatorforum-roblox-com2026-10-29 https://bugbountyreports.com/reports/8227-subdomain-takeover-at-http-get8x8-com2026-10-29 https://bugbountyreports.com/reports/1879-subdomain-takeover-at-http-gameday-websummit-net2026-10-29 https://bugbountyreports.com/reports/8292-subdomain-takeover-at-http-test-www-midigator-com2026-10-29 https://bugbountyreports.com/reports/7653-subdomain-takeover-at-https-new-rubyonrails-org2026-10-29 https://bugbountyreports.com/reports/2077-subdomain-takeover-at-info-hacker-one2026-10-29 https://bugbountyreports.com/reports/2097-subdomain-takeover-at-landing-udemy-com2026-10-29 https://bugbountyreports.com/reports/3154-subdomain-takeover-at-news-static-semrush-com2026-10-29 https://bugbountyreports.com/reports/8007-subdomain-takeover-at-odoo-staging-exness-io2026-10-29 https://bugbountyreports.com/reports/4023-subdomain-takeover-at-signup-uber-com2026-10-29 https://bugbountyreports.com/reports/5157-subdomain-takeover-at-status-stage0-stripo-email2026-10-29 https://bugbountyreports.com/reports/7851-subdomain-takeover-at-status-hosting24-com2026-10-29 https://bugbountyreports.com/reports/5097-subdomain-takeover-at-status0-stripo-email2026-10-29 https://bugbountyreports.com/reports/6879-subdomain-takeover-at-the-main-domain-of-your-site2026-10-29 https://bugbountyreports.com/reports/1600-subdomain-takeover-at-ws-bimedb-com-due-to-unclaimed-amazon2026-10-29 https://bugbountyreports.com/reports/7297-subdomain-takeover-due-to-ns-records-at-us-east4-37signals2026-10-29 https://bugbountyreports.com/reports/5999-subdomain-takeover-due-to-an-unclaimed-amazon-s3-bucket-on2026-10-29 https://bugbountyreports.com/reports/7248-subdomain-takeover-due-to-non-registered-tld-com2026-10-29 https://bugbountyreports.com/reports/1294-subdomain-takeover-due-to-unclaimed-amazon-s3-bucket-on-a22026-10-29 https://bugbountyreports.com/reports/6510-subdomain-takeover-due-to-unclaimed-domain-pointing-to2026-10-29 https://bugbountyreports.com/reports/4448-subdomain-takeover-due-to-unclaimed-domain-pointing-to-aws2026-10-29 https://bugbountyreports.com/reports/8754-subdomain-takeover-http-accessday-opn-ooo2026-10-29 https://bugbountyreports.com/reports/9635-subdomain-takeover-in-gitlab-pages2026-10-29 https://bugbountyreports.com/reports/9528-subdomain-takeover-in-gitlab-pages-george-ratelimited-me2026-10-29 https://bugbountyreports.com/reports/5952-subdomain-takeover-in-help-tictail-com-pointing-to-zendesk2026-10-29 https://bugbountyreports.com/reports/948-subdomain-takeover-in-http-assets-goubiquiti-com2026-10-29 https://bugbountyreports.com/reports/1511-subdomain-takeover-in-http-genghis-cdn-shopify-io-pointing2026-10-29 https://bugbountyreports.com/reports/950-subdomain-takeover-in-http-support-scan-me-pointing-to2026-10-29 https://bugbountyreports.com/reports/2072-subdomain-takeover-in-many-subdomains2026-10-29 https://bugbountyreports.com/reports/7273-subdomain-takeover-of2026-10-29 https://bugbountyreports.com/reports/6861-subdomain-takeover-of-wavecell-com2026-10-29 https://bugbountyreports.com/reports/5772-subdomain-takeover-of2026-10-29 https://bugbountyreports.com/reports/6901-subdomain-takeover-of-jitsi-net2026-10-29 https://bugbountyreports.com/reports/8108-subdomain-takeover-of2026-10-29 https://bugbountyreports.com/reports/1597-subdomain-takeover-of-blog-snapchat-com2026-10-29 https://bugbountyreports.com/reports/7636-subdomain-takeover-of-brand-zen-ly2026-10-29 https://bugbountyreports.com/reports/4426-subdomain-takeover-of-d02-1-ag-productioncontroller2026-10-29 https://bugbountyreports.com/reports/4460-subdomain-takeover-of-datacafe-cert-starbucks-com2026-10-29 https://bugbountyreports.com/reports/7296-subdomain-takeover-of-fr1-vpn-zomans-com2026-10-29 https://bugbountyreports.com/reports/7544-subdomain-takeover-of-images-crossinstall-com2026-10-29 https://bugbountyreports.com/reports/7344-subdomain-takeover-of-main-domain-of-https-www-cyberlynx-lu2026-10-29 https://bugbountyreports.com/reports/5791-subdomain-takeover-of-multiple-ttcdn-co-domains2026-10-29 https://bugbountyreports.com/reports/4250-subdomain-takeover-of-mydailydev-starbucks-com2026-10-29 https://bugbountyreports.com/reports/5535-subdomain-takeover-of-resources-hackerone-com2026-10-29 https://bugbountyreports.com/reports/5138-subdomain-takeover-of-storybook-lystit-com2026-10-29 https://bugbountyreports.com/reports/1369-subdomain-takeover-of-translate-uber-com-de-uber-com-and-fr2026-10-29 https://bugbountyreports.com/reports/7033-subdomain-takeover-of-v-zego-com2026-10-29 https://bugbountyreports.com/reports/7192-subdomain-takeover-of-www-affirm-com2026-10-29 https://bugbountyreports.com/reports/6949-subdomain-takeover-of-www2-growasyouplan-com2026-10-29 https://bugbountyreports.com/reports/8261-subdomain-takeover-on-de-headless-staging-gymshark-com2026-10-29 https://bugbountyreports.com/reports/9966-subdomain-takeover-on-a-subdomain-under-firefox-com2026-10-29 https://bugbountyreports.com/reports/5292-subdomain-takeover-on-demo-greenhouse-io-pointing-to2026-10-29 https://bugbountyreports.com/reports/4263-subdomain-takeover-on-dev-admin-periscope-tv2026-10-29 https://bugbountyreports.com/reports/3227-subdomain-takeover-on-developer-openapi-starbucks-com2026-10-29 https://bugbountyreports.com/reports/7580-subdomain-takeover-on-fddkim-zomato-com2026-10-29 https://bugbountyreports.com/reports/1790-subdomain-takeover-on-happymondays-starbucks-com-due-to-non2026-10-29 https://bugbountyreports.com/reports/4442-subdomain-takeover-on-healthyhackathon-khanacademy-org-and2026-10-29 https://bugbountyreports.com/reports/1448-subdomain-takeover-on-http-fastly-sc-cdn-net2026-10-29 https://bugbountyreports.com/reports/1679-subdomain-takeover-on-http-kiosk-owox-com2026-10-29 https://bugbountyreports.com/reports/2226-subdomain-takeover-on-https-cloudfront-ubnt-com-due-to-non2026-10-29 https://bugbountyreports.com/reports/5389-subdomain-takeover-on-mta1a1-spmail-uber-com2026-10-29 https://bugbountyreports.com/reports/8984-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/8996-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9018-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9136-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9137-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9138-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9139-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9200-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9210-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9211-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9212-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9213-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9214-subdomain-takeover-on-one-of-the-subdomain-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9059-subdomain-takeover-on-one-of-the-subdomain-under-mozgcp-net2026-10-29 https://bugbountyreports.com/reports/9060-subdomain-takeover-on-one-of-the-subdomain-under-mozgcp-net2026-10-29 https://bugbountyreports.com/reports/9061-subdomain-takeover-on-one-of-the-subdomain-under-mozgcp-net2026-10-29 https://bugbountyreports.com/reports/9215-subdomain-takeover-on-one-of-the-subdomain-under-mozgcp-net2026-10-29 https://bugbountyreports.com/reports/8997-subdomain-takeover-on-one-of-the-subdomain-under-mozilla-org2026-10-29 https://bugbountyreports.com/reports/9491-subdomain-takeover-on-one-of-the-subdomains-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/9492-subdomain-takeover-on-one-of-the-subdomains-under-mozaws-net2026-10-29 https://bugbountyreports.com/reports/1702-subdomain-takeover-on-partners-ubnt-com-due-to-non-used2026-10-29 https://bugbountyreports.com/reports/1808-subdomain-takeover-on-podcasts-slack-core-com2026-10-29 https://bugbountyreports.com/reports/1745-subdomain-takeover-on-rider-uber-com-due-to-non-existent2026-10-29 https://bugbountyreports.com/reports/1974-subdomain-takeover-on-s3-shopify-com2026-10-29 https://bugbountyreports.com/reports/3593-subdomain-takeover-on-svcgatewaydevus-starbucks-com-and2026-10-29 https://bugbountyreports.com/reports/3540-subdomain-takeover-on-svcgatewayus-starbucks-com2026-10-29 https://bugbountyreports.com/reports/4106-subdomain-takeover-on-usclsapipma-cv-ford-com2026-10-29 https://bugbountyreports.com/reports/3625-subdomain-takeover-on-wfmnarptpc-starbucks-com2026-10-29 https://bugbountyreports.com/reports/5426-subdomain-takeover-to-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/5452-subdomain-takeover-uptime2026-10-29 https://bugbountyreports.com/reports/432-subdomain-takeover-using-blog-greenhouse-io-pointing-to2026-10-29 https://bugbountyreports.com/reports/9389-subdomain-takeover-via-host-header-injection-on-www2026-10-29 https://bugbountyreports.com/reports/6654-subdomain-takeover-via-insecure-cloudfront-distribution-cdn2026-10-29 https://bugbountyreports.com/reports/8285-subdomain-takeover-via-unclaimed-amazon-s3-bucket-musical-ly2026-10-29 https://bugbountyreports.com/reports/6655-subdomain-takeover-via-unclaimed-heroku-instance-tim2026-10-29 https://bugbountyreports.com/reports/2903-subdomain-takeover-via-unclaimed-uservoice-domain2026-10-29 https://bugbountyreports.com/reports/2909-subdomain-takeover-via-unclaimed-wordpress-site2026-10-29 https://bugbountyreports.com/reports/6326-subdomain-takeover-via-via-dangling-ns-records-on-amazon2026-10-29 https://bugbountyreports.com/reports/3987-submitting-report-through-embedded-submission-form-gives2026-10-29 https://bugbountyreports.com/reports/239-subscribe-user-bug2026-10-29 https://bugbountyreports.com/reports/6475-successfully-took-down-the-grinch-and-saved-the-holidays2026-10-29 https://bugbountyreports.com/reports/326-suffix-of-url-path-is-vulnerable-to-xss-attack2026-10-29 https://bugbountyreports.com/reports/6629-support-incident-can-be-opened-for-any-user-via-and-pii2026-10-29 https://bugbountyreports.com/reports/8931-support-tickets-can-be-created-on-behalf-of-other-users2026-10-29 https://bugbountyreports.com/reports/8069-support-invisionpower-com-takeover-the-subdomain-with2026-10-29 https://bugbountyreports.com/reports/1336-suppress-version-in-server-header-on-gratipay-com-or-grtp-co2026-10-29 https://bugbountyreports.com/reports/3558-suspended-users-can-bypass-ugc-upload-ban2026-10-29 https://bugbountyreports.com/reports/8477-suspicious-login-app-ships-old-league-flysystem-version2026-10-29 https://bugbountyreports.com/reports/3594-svcardproxydevus-starbucks-com-subdomain-take-over2026-10-29 https://bugbountyreports.com/reports/4186-svg-file-that-html-included-is-able-to-upload-via-file2026-10-29 https://bugbountyreports.com/reports/5900-svg-file-upload-leads-to-xml-injection2026-10-29 https://bugbountyreports.com/reports/10283-svg-filter-primitives-bypass-remote-image-blocking-enabling2026-10-29 https://bugbountyreports.com/reports/1220-svg-parser-loads-external-resources-on-image-upload2026-10-29 https://bugbountyreports.com/reports/2868-svg-server-side-request-forgery-ssrf2026-10-29 https://bugbountyreports.com/reports/10149-swagger-ui-injection-via-config-url2026-10-29 https://bugbountyreports.com/reports/19-switching-the-user-to-the-attacker-s-account2026-10-29 https://bugbountyreports.com/reports/8611-synthetics-recorder-code-injection-when-recording-website2026-10-29 https://bugbountyreports.com/reports/9859-sys-fsc2h-ctrl-kernel-stack-free2026-10-29 https://bugbountyreports.com/reports/6498-system-error-reveals-sensitive-sql-call-data2026-10-29 https://bugbountyreports.com/reports/7277-system-error-reveals-sql-information2026-10-29 https://bugbountyreports.com/reports/7156-tab-nabbing-in-hackerone-inbox2026-10-29 https://bugbountyreports.com/reports/3668-tab-nabbing-via-window-opener2026-10-29 https://bugbountyreports.com/reports/6405-tab-nabbing-via-window-opener-location-target-blank2026-10-29 https://bugbountyreports.com/reports/3441-table-and-column-exposure2026-10-29 https://bugbountyreports.com/reports/10090-tables-app-allowed-users-to-view-columns-metadata2026-10-29 https://bugbountyreports.com/reports/10665-tables-application-does-not-respect-sharing-limitations-set2026-10-29 https://bugbountyreports.com/reports/10102-tabnabbing-in-roundcube-webmail2026-10-29 https://bugbountyreports.com/reports/5162-tabnabbing-in-template-comments-stripo-email2026-10-29 https://bugbountyreports.com/reports/2714-tabnabbing-issue-due-to-taget-blank2026-10-29 https://bugbountyreports.com/reports/3382-tabnabbing-issue-due-to-taget-blank2026-10-29 https://bugbountyreports.com/reports/3020-tabnabbing-via-window-opener2026-10-29 https://bugbountyreports.com/reports/2237-tabnabbing-via-window-opener-mavenlink2026-10-29 https://bugbountyreports.com/reports/6952-take-over-a-mail-account-due-missing-validation-of-account2026-10-29 https://bugbountyreports.com/reports/4240-take-over-of-accounts-created-using-google-or-facebook2026-10-29 https://bugbountyreports.com/reports/8437-take-over-subdomain-undici-nodejs-org-cdn-cloudflare-net2026-10-29 https://bugbountyreports.com/reports/8189-take-over-subdomains-of-r2-dev-using-r2-custom-domains2026-10-29 https://bugbountyreports.com/reports/2007-takeover-a-lot-of-accounts2026-10-29 https://bugbountyreports.com/reports/5989-takeover-an-account-that-doesn-t-have-a-shopify-id-and-more2026-10-29 https://bugbountyreports.com/reports/2445-takeover-of-an-account-via-reset-password-options-after2026-10-29 https://bugbountyreports.com/reports/8855-takeover-of-hackerone-engineering-via-github2026-10-29 https://bugbountyreports.com/reports/9679-takeover-of-hackerone-engineering-via-medium2026-10-29 https://bugbountyreports.com/reports/4072-takeover-of-twitter-owned-domain-at-mobileapplinking-com2026-10-29 https://bugbountyreports.com/reports/6540-taking-grinch-down-to-save-holidays2026-10-29 https://bugbountyreports.com/reports/7751-taking-position-in-a-discontinued-forex-pair-without2026-10-29 https://bugbountyreports.com/reports/5270-talk-leak-of-password-protected-room-name-via-already2026-10-29 https://bugbountyreports.com/reports/4181-talk-spreed-disclosure-of-room-names-and-participants-for2026-10-29 https://bugbountyreports.com/reports/8392-talk-android-broadcast-receiver-is-not-protected-by2026-10-29 https://bugbountyreports.com/reports/6875-tams-registration-details-api-for-admins-open-at-https2026-10-29 https://bugbountyreports.com/reports/221-tap-jacking-attack-on-button-tags2026-10-29 https://bugbountyreports.com/reports/10363-taskcluster-web-server-oauth2-authorization-codes-are2026-10-29 https://bugbountyreports.com/reports/10468-taskprocessing-callback-authorization-bypass-allows-ex2026-10-29 https://bugbountyreports.com/reports/682-tcp-source-port-pass-firewall2026-10-29 https://bugbountyreports.com/reports/5222-tcpdump-before-4-9-3-has-a-buffer-over-read-in-print-802-112026-10-29 https://bugbountyreports.com/reports/5223-tcpdump-before-4-9-3-has-a-buffer-over-read-in-print-dccp-c2026-10-29 https://bugbountyreports.com/reports/7103-tcpdump-before-4-9-3-has-a-heap-based-buffer-over-read2026-10-29 https://bugbountyreports.com/reports/5221-tcpdump-cve-2018-14879-buffer-overflow-in-tcpdump-c-get2026-10-29 https://bugbountyreports.com/reports/593-teach-udemy-com-log-poison-vulnerability-through-wordpress2026-10-29 https://bugbountyreports.com/reports/487-team-admin-can-add-billing-contacts2026-10-29 https://bugbountyreports.com/reports/580-team-admin-can-change-unauthorized-team-setting-allow2026-10-29 https://bugbountyreports.com/reports/530-team-admin-can-change-unauthorized-team-setting-require-at2026-10-29 https://bugbountyreports.com/reports/483-team-member-invitations-to-sandboxed-teams-are-not2026-10-29 https://bugbountyreports.com/reports/435-team-member-invitations-to-sandboxed-teams-are-not2026-10-29 https://bugbountyreports.com/reports/4313-team-member-with-program-permission-only-can-escalate-to2026-10-29 https://bugbountyreports.com/reports/921-team-member-s-associated-with-a-group-have-read-only2026-10-29 https://bugbountyreports.com/reports/881-team-member-associated-with-a-custom-group-created-with2026-10-29 https://bugbountyreports.com/reports/6882-team-members-can-trigger-arbitrary-code-execution-in-slack2026-10-29 https://bugbountyreports.com/reports/10538-team-membership-information-returned-on-api-level-based-on2026-10-29 https://bugbountyreports.com/reports/3587-team-object-exposes-amount-of-participants-in-a-private2026-10-29 https://bugbountyreports.com/reports/4963-team-object-in-graphql-disclosed-of-private-programs-via2026-10-29 https://bugbountyreports.com/reports/6016-team-object-in-graphql-disclosed-private-comment2026-10-29 https://bugbountyreports.com/reports/3452-team-object-in-graphql-disclosed-total-number-of2026-10-29 https://bugbountyreports.com/reports/3421-team-object-in-graphql-discloses-team-group-names-and2026-10-29 https://bugbountyreports.com/reports/3563-team-object-in-graphql-that-have-a-published-external2026-10-29 https://bugbountyreports.com/reports/3622-teamprofile-exposes-partially-sensitive-information-through2026-10-29 https://bugbountyreports.com/reports/1359-template-stored-xss2026-10-29 https://bugbountyreports.com/reports/7306-temporary-banned-user-from-platform-is-able-to-make2026-10-29 https://bugbountyreports.com/reports/366-test2026-10-29 https://bugbountyreports.com/reports/364-test2026-10-29 https://bugbountyreports.com/reports/365-test2026-10-29 https://bugbountyreports.com/reports/3636-test-report2026-10-29 https://bugbountyreports.com/reports/5834-test-scripts-for-postgis-in-mason-repository-using-unsafe2026-10-29 https://bugbountyreports.com/reports/1972-test-zba-se-is-vulnerable-to-ssl-poodle2026-10-29 https://bugbountyreports.com/reports/923-test1-owncloud-com-web-server-http-trace-track-method2026-10-29 https://bugbountyreports.com/reports/8623-testing-flow-includes-a-deepsource-secret2026-10-29 https://bugbountyreports.com/reports/5761-testing-for-arbitrary-http-methods2026-10-29 https://bugbountyreports.com/reports/4362-testnet-address-being-sent-in-cleartext-as-http-rinkeby2026-10-29 https://bugbountyreports.com/reports/7169-text-app-leaks-file-path-of-shared-files2026-10-29 https://bugbountyreports.com/reports/8901-text-does-not-respect-allow-download-permissions2026-10-29 https://bugbountyreports.com/reports/1179-text-injection-can-be-used-in-phishing-404-page-and-should2026-10-29 https://bugbountyreports.com/reports/904-text-injection-can-be-used-in-phishing-404-page-should-not2026-10-29 https://bugbountyreports.com/reports/1162-text-injection-can-be-used-in-phishing-404-page-should-not2026-10-29 https://bugbountyreports.com/reports/1858-text-injection-on-auth-problem-at-urbandictionary-com2026-10-29 https://bugbountyreports.com/reports/2763-text-injection-on-status-algolia-com2026-10-29 https://bugbountyreports.com/reports/9127-text-injection-content-spoofing-on-https-cloud-e2026-10-29 https://bugbountyreports.com/reports/4958-thailand-a-small-number-of-smb-cctv-footage-backup-servers2026-10-29 https://bugbountyreports.com/reports/5547-thailand-idor-on-www-starbuckscardth-in-th-a-logged-in-user2026-10-29 https://bugbountyreports.com/reports/5213-thailand-insecure-direct-object-reference-permits-an2026-10-29 https://bugbountyreports.com/reports/6088-thailand-snmp-publicly-accessible2026-10-29 https://bugbountyreports.com/reports/4956-thailand-a-small-number-of-alarm-system-portals-accessible2026-10-29 https://bugbountyreports.com/reports/4936-the-malstaller-attack-global-hijacking-of-any-installation2026-10-29 https://bugbountyreports.com/reports/9851-the-reports-id-json-endpoint-discloses-potentially2026-10-29 https://bugbountyreports.com/reports/8657-the-io-kubernetes-client-util-generic-dynamic-dynamics2026-10-29 https://bugbountyreports.com/reports/8809-the-stripe-veneur-github-repository-links-to-a-domain2026-10-29 https://bugbountyreports.com/reports/6595-the-authentication-code-when-activating-2fa-can-be-used2026-10-29 https://bugbountyreports.com/reports/5975-the-authenticity-token-can-be-reversed-and-used-to-forge2026-10-29 https://bugbountyreports.com/reports/8603-the-complete-server-installation-path-is-visible-in-cloud2026-10-29 https://bugbountyreports.com/reports/834-the-csrf-token-remains-same-after-user-logs-in2026-10-29 https://bugbountyreports.com/reports/973-the-csrf-token-remains-same-after-user-logs-in2026-10-29 https://bugbountyreports.com/reports/2872-the-custom-emoji-page-has-a-reflected-xss2026-10-29 https://bugbountyreports.com/reports/8109-the-dashboard-is-exposed-in-https2026-10-29 https://bugbountyreports.com/reports/8486-the-deleted-polls-is-still-accessable-after-30-days2026-10-29 https://bugbountyreports.com/reports/8947-the-domain-is-truck-admin-eu-east-1-indriverapp-com-and2026-10-29 https://bugbountyreports.com/reports/695-the-email-updates-issues2026-10-29 https://bugbountyreports.com/reports/7694-the-endpoint-test-webhooks-is-vulnerable-to-dns-rebinding2026-10-29 https://bugbountyreports.com/reports/8662-the-endpoint-test-webhooks-is-vulnerable-to-dns-rebinding2026-10-29 https://bugbountyreports.com/reports/7692-the-endpoint-api-internal-graphql-requestauthemail-on2026-10-29 https://bugbountyreports.com/reports/2802-the-federalsit-session-cookie-federalist-sid-is-not2026-10-29 https://bugbountyreports.com/reports/6371-the-hacker-has-access-to-the-administrative-part-of-the2026-10-29 https://bugbountyreports.com/reports/7449-the-host-authorization-middleware-in-action-pack-is2026-10-29 https://bugbountyreports.com/reports/9618-the-initial-e2ee-password-generated-by-rocket-chat-mobile2026-10-29 https://bugbountyreports.com/reports/1532-the-jdbc-driver-used-by-the-vertica-connector-allows-to2026-10-29 https://bugbountyreports.com/reports/5141-the-login-of-hotor-not-is-vulnerable-to-bruteforce2026-10-29 https://bugbountyreports.com/reports/5202-the-password-limit-is-not-set-dos2026-10-29 https://bugbountyreports.com/reports/6162-the-password-of-a-mail-share-is-not-hashed-if-the-password2026-10-29 https://bugbountyreports.com/reports/6688-the-password-of-a-mail-share-is-not-set-if-the-password-is2026-10-29 https://bugbountyreports.com/reports/4962-the-password-recovery-let-users-know-whether-an-email2026-10-29 https://bugbountyreports.com/reports/3919-the-poodle-attack-sslv3-supported-at-status-slack-com2026-10-29 https://bugbountyreports.com/reports/1020-the-poodle-attack-sslv3-supported-for-https-grtp-co2026-10-29 https://bugbountyreports.com/reports/6802-the-pos-app-doesn-t-revoke-the-xauth-token2026-10-29 https://bugbountyreports.com/reports/7211-the-possibility-of-disrupting-the-normal-operation-of2026-10-29 https://bugbountyreports.com/reports/3313-the-possibility-that-unintended-file-operation-may-be2026-10-29 https://bugbountyreports.com/reports/696-the-product-status-method-csrf2026-10-29 https://bugbountyreports.com/reports/3457-the-react-marked-markdown-module-allows-xss-injection-in2026-10-29 https://bugbountyreports.com/reports/3217-the-request-tells-the-number-of-private-programs-the-new2026-10-29 https://bugbountyreports.com/reports/4530-the-return-of-the2026-10-29 https://bugbountyreports.com/reports/7588-the-return-of-the-grinch2026-10-29 https://bugbountyreports.com/reports/10104-the-role-ci-driven-scan-initiator-provides-excessive-read2026-10-29 https://bugbountyreports.com/reports/163-the-server-supports-only-older-protocols-for-https2026-10-29 https://bugbountyreports.com/reports/4512-the-twitter-accounts-are-linked-on-page-but-unclaimed2026-10-29 https://bugbountyreports.com/reports/5043-the-url-in-choose-a-data-source-at-https-bi-owox-com-ui2026-10-29 https://bugbountyreports.com/reports/8830-the-use-of-proto-in-process-mainmodule-proto-require2026-10-29 https://bugbountyreports.com/reports/2803-the-user-who-was-deleted-from-github-organization-still-can2026-10-29 https://bugbountyreports.com/reports/2651-the-username-of-an-account-can-be2026-10-29 https://bugbountyreports.com/reports/7209-the-vtp-parser-in-tcpdump-before-4-9-2-has-a-buffer-over2026-10-29 https://bugbountyreports.com/reports/1991-the-web-app-s-forgot-password-page-is-vulnerable-to-text2026-10-29 https://bugbountyreports.com/reports/7056-theft-of-arbitrary-files-in-line-lite-client-for-android2026-10-29 https://bugbountyreports.com/reports/7673-theft-of-protected-files-on-android2026-10-29 https://bugbountyreports.com/reports/5126-theme-assets-uploader-allows-html-content2026-10-29 https://bugbountyreports.com/reports/7985-theme-editor-oseid-parameter-is-leaked-to-third-party2026-10-29 https://bugbountyreports.com/reports/9781-there-is-a-post-based-csrf-issue-over-ibm-endpoint-leading2026-10-29 https://bugbountyreports.com/reports/8153-there-is-no-rate-limit-for-sme-registration-portal2026-10-29 https://bugbountyreports.com/reports/7385-third-party-app-could-steal-access-token-as-well-as2026-10-29 https://bugbountyreports.com/reports/6670-thumbor-misconfiguration-at-blogapi-uber-com-can-lead-to-dos2026-10-29 https://bugbountyreports.com/reports/6234-ticket-trick-at-https-account-acronis-com2026-10-29 https://bugbountyreports.com/reports/10497-ticket-trick-attack-allows-access-to-workspaces2026-10-29 https://bugbountyreports.com/reports/8469-tiktok-2fa-bypass2026-10-29 https://bugbountyreports.com/reports/8236-tiktok-account-creation-date-information-disclosure2026-10-29 https://bugbountyreports.com/reports/7004-tiktok-session-donation-csrf-via-qr-code-login2026-10-29 https://bugbountyreports.com/reports/8078-tiktok-s-pixel-sdk-js-leaks-current-url-from-websites-using2026-10-29 https://bugbountyreports.com/reports/8648-time-based-sql-injection2026-10-29 https://bugbountyreports.com/reports/8143-time-based-sql-injection-at-https-htus2026-10-29 https://bugbountyreports.com/reports/9181-time-based-sql-injection-at2026-10-29 https://bugbountyreports.com/reports/2467-time-based-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/2569-time-based-sql-injection-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/717-time-strftime-buffer-over-read2026-10-29 https://bugbountyreports.com/reports/5865-time-base-sql-injection-in-search-users2026-10-29 https://bugbountyreports.com/reports/9768-time-based-blind-sql-injection2026-10-29 https://bugbountyreports.com/reports/1967-time-based-blind-sqli-on-news-starbucks-com2026-10-29 https://bugbountyreports.com/reports/7702-time-of-check-to-time-of-use-vulnerability-in-the-std-fs2026-10-29 https://bugbountyreports.com/reports/9643-timeline-api-returns-private-post-when-target-of-a-push2026-10-29 https://bugbountyreports.com/reports/5320-timeline-editor-self-xss-previous-fix-738072-incomplete2026-10-29 https://bugbountyreports.com/reports/10209-timeout-based-race-conditions-make-uint8array-buffer-alloc2026-10-29 https://bugbountyreports.com/reports/356-timing-attack-side-channel-on-api-token-verification2026-10-29 https://bugbountyreports.com/reports/2820-timing-attack-woocommerce-simplify-commerce-gateway2026-10-29 https://bugbountyreports.com/reports/10258-timing-side-channel-in-hmac-verification-via-memcmp-in2026-10-29 https://bugbountyreports.com/reports/2883-tinymce-2-4-02026-10-29 https://bugbountyreports.com/reports/10632-tls-certificate-hostname-bypass-when-the-host-loosely2026-10-29 https://bugbountyreports.com/reports/10634-tls-certificate-hostname-bypass-when-the-ip-is-written2026-10-29 https://bugbountyreports.com/reports/9913-tls-client-authentication-can-be-bypassed-due-to-ticket2026-10-29 https://bugbountyreports.com/reports/46-tls-heartbeat-read-overrun2026-10-29 https://bugbountyreports.com/reports/10390-tls-host-identity-verification-bypass-via-session-reuse2026-10-29 https://bugbountyreports.com/reports/10213-tls-psk-alpn-callback-exceptions-bypass-error-handlers2026-10-29 https://bugbountyreports.com/reports/24-tls-triple-handshake-attack2026-10-29 https://bugbountyreports.com/reports/370-tls-virtual-host-confusion2026-10-29 https://bugbountyreports.com/reports/1757-tocttou-bug-in-mrb-str-setbyte-leading-the-memory-corruption2026-10-29 https://bugbountyreports.com/reports/6180-todos-are-not-redacted-when-membership-changes-access-to2026-10-29 https://bugbountyreports.com/reports/5117-token-leak-in-security-challenge-flow-allows-retrieving2026-10-29 https://bugbountyreports.com/reports/2626-token-leakage-by-referrer2026-10-29 https://bugbountyreports.com/reports/2658-token-leakage-by-referrer-header-analytics2026-10-29 https://bugbountyreports.com/reports/823-tokenizer-crash-when-processing-undecodable-source-code2026-10-29 https://bugbountyreports.com/reports/519-tokenizer-crash-when-processing-undecodable-source-code2026-10-29 https://bugbountyreports.com/reports/7398-tokenless-gui-authentication2026-10-29 https://bugbountyreports.com/reports/1223-tokens-from-services-like-facebook-can-be-stolen2026-10-29 https://bugbountyreports.com/reports/5613-tomcat-examples-available-for-public-disclosure-apache2026-10-29 https://bugbountyreports.com/reports/8241-tomcat-servlet-examples-accessible-at-https-44-240-33-832026-10-29 https://bugbountyreports.com/reports/8861-tor-ip-leak-caused-by-the-pdf-viewer-extension-in-certain2026-10-29 https://bugbountyreports.com/reports/10527-tor-onion-service-introduce2-invalid-mac-cells-permanently2026-10-29 https://bugbountyreports.com/reports/3731-torrent-extension-cross-origin-downloading-url-spoofing-csp2026-10-29 https://bugbountyreports.com/reports/3185-torrent-viewer-extension-web-service-available-on-all2026-10-29 https://bugbountyreports.com/reports/4404-total-bounties-paid-amount-is-disclosed-because-of-redesign2026-10-29 https://bugbountyreports.com/reports/9993-total-failure-of-password-protection-while-extracting-seed2026-10-29 https://bugbountyreports.com/reports/5260-total-paid-bounty-paid-can-be-disclose2026-10-29 https://bugbountyreports.com/reports/8170-totp-2-factor-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/3943-totp-key-is-shorter-than-rfc-4226-recommended-minimum2026-10-29 https://bugbountyreports.com/reports/269-trace-disclosure-attack-may-be-possible2026-10-29 https://bugbountyreports.com/reports/4432-trace-axd-page-leaks-sensitive-information2026-10-29 https://bugbountyreports.com/reports/3479-tracking-bitwarden-firefox-addon-users2026-10-29 https://bugbountyreports.com/reports/4047-tracking-of-users-on-third-party-websites-using-the-twitter2026-10-29 https://bugbountyreports.com/reports/8546-traffic-amplification-attack-via-discovery-protocol2026-10-29 https://bugbountyreports.com/reports/9863-transactions-in-invalid-blocks-are-kept-in-tx-pool-without2026-10-29 https://bugbountyreports.com/reports/864-transactions-visible-on-unconfirmed-devices2026-10-29 https://bugbountyreports.com/reports/6086-transferring-a-public-group-to-a-private-group-doesn-t2026-10-29 https://bugbountyreports.com/reports/2115-transitioning-a-private-program-to-public-does-not-clear2026-10-29 https://bugbountyreports.com/reports/8925-triager-team-members-can-edit-hacker-s-report-and-hacker-is2026-10-29 https://bugbountyreports.com/reports/1189-trick-make-all-fixed-open-redirect-links-vulnerable-again2026-10-29 https://bugbountyreports.com/reports/5746-tricking-the-create-snippet-feature-into-displaying-the2026-10-29 https://bugbountyreports.com/reports/3533-triggering-rce-using-xss-to-bypass-csrf-in-powerbeam-m5-3002026-10-29 https://bugbountyreports.com/reports/4884-trivial-age-old-heap-overflow-in-32-bit-php2026-10-29 https://bugbountyreports.com/reports/6644-true-image-2021-lpe-via-xpc-service-communication2026-10-29 https://bugbountyreports.com/reports/9566-trueimage-for-acronis-true-image-2020-untrusted-dll-search2026-10-29 https://bugbountyreports.com/reports/3614-trusted-daemon-check-fails-when-proxied-through-torsocks-or2026-10-29 https://bugbountyreports.com/reports/6974-trusted-servers-exchange-can-be-triggered-by-attacker2026-10-29 https://bugbountyreports.com/reports/5305-turn-server-allows-tcp-and-udp-proxying-to-internal-network2026-10-29 https://bugbountyreports.com/reports/987-tweet-deck-xss-persistent-group-dm-name2026-10-29 https://bugbountyreports.com/reports/1129-tweetdeck-twitter-owned-app-not-revoked2026-10-29 https://bugbountyreports.com/reports/8986-twitter-account-hijack-costalfy2026-10-29 https://bugbountyreports.com/reports/8604-twitter-account-hijack-nextcloudfrance2026-10-29 https://bugbountyreports.com/reports/8029-twitter-account-hijack-through-broken-link-in-https2026-10-29 https://bugbountyreports.com/reports/524-twitter-ads-campaign-information-disclosure-through-admin2026-10-29 https://bugbountyreports.com/reports/505-twitter-android-app-fragment-injection2026-10-29 https://bugbountyreports.com/reports/9846-twitter-broken-link-hijacking-in-thewild-com2026-10-29 https://bugbountyreports.com/reports/8635-twitter-broken-link-in-https-gener8ads-com-hackerone-profile2026-10-29 https://bugbountyreports.com/reports/543-twitter-card-parent-window-redirection2026-10-29 https://bugbountyreports.com/reports/926-twitter-disconnect-csrf2026-10-29 https://bugbountyreports.com/reports/1583-twitter-disconnect-csrf2026-10-29 https://bugbountyreports.com/reports/346-twitter-flight-ssl-2-0-deprecated-protocol-vulnerability2026-10-29 https://bugbountyreports.com/reports/1850-twitter-for-android-is-exposing-user-s-location-to-any2026-10-29 https://bugbountyreports.com/reports/4238-twitter-id-exposure-via-error-based-side-channel-attack2026-10-29 https://bugbountyreports.com/reports/1794-twitter-ios-fails-to-validate-server-certificate-and-sends2026-10-29 https://bugbountyreports.com/reports/4207-twitter-lite-android-vulnerable-to-local-file-steal2026-10-29 https://bugbountyreports.com/reports/6148-twitter-media-studio-source-information-disclosure-with2026-10-29 https://bugbountyreports.com/reports/4349-twitter-periscope-clickjacking-vulnerability2026-10-29 https://bugbountyreports.com/reports/5242-twitter-source-label-allow-mongolian-vowel-separator-u-180e2026-10-29 https://bugbountyreports.com/reports/8968-twitter-subscriptions-information-disclosure2026-10-29 https://bugbountyreports.com/reports/9644-two-aws-access-key-and-secret-key-and-database-username-and2026-10-29 https://bugbountyreports.com/reports/10060-two-click-account-takeover2026-10-29 https://bugbountyreports.com/reports/2547-two-email-addresses-can-access-the-same-account2026-10-29 https://bugbountyreports.com/reports/4993-two-error-based-sqli-in-courses-aspx-on2026-10-29 https://bugbountyreports.com/reports/3577-two-factor-authentication-bypass2026-10-29 https://bugbountyreports.com/reports/7216-two-out-of-bounds-array-reads-in-python-ast-builder-re2026-10-29 https://bugbountyreports.com/reports/4799-two-vulnerabilities-in-the-ssl-module2026-10-29 https://bugbountyreports.com/reports/4695-two-vulnerability-in-gnu-binutils2026-10-29 https://bugbountyreports.com/reports/1396-two-xss-vulns-in-widget-parameters-all-collections-php-and2026-10-29 https://bugbountyreports.com/reports/2825-two-factor-authentication-bypass-on-grab-android-app2026-10-29 https://bugbountyreports.com/reports/7134-two-factor-authentication-enforcement-bypass2026-10-29 https://bugbountyreports.com/reports/3742-twofactor-auth-bypassable-if-provider-fails-to-load2026-10-29 https://bugbountyreports.com/reports/1722-type-confusion-in-futureiter-throw-which-may-potentially2026-10-29 https://bugbountyreports.com/reports/1754-type-confusion-in-mrb-exc-set-leading-to-memory-corruption2026-10-29 https://bugbountyreports.com/reports/4669-type-confusion-in-object-deserialization2026-10-29 https://bugbountyreports.com/reports/1557-type-confusion-in-partial-setstate-partial-repr-partial2026-10-29 https://bugbountyreports.com/reports/605-type-confusion-in-sass-parserstate-parserstate-sass2026-10-29 https://bugbountyreports.com/reports/4647-type-confusion-in-wddx-packet-deserialization2026-10-29 https://bugbountyreports.com/reports/1852-type-confusion-in-wrap-decimal-leading-to-memory-corruption2026-10-29 https://bugbountyreports.com/reports/4711-type-confusion-vulnerability-soap-make-http-soap-request2026-10-29 https://bugbountyreports.com/reports/4645-type-confusion-vulnerability-in-php-to-xmlrpc-worker2026-10-29 https://bugbountyreports.com/reports/511-type-confusion-vulnerability-in-soapclient2026-10-29 https://bugbountyreports.com/reports/1916-type-juggling-php-object-injection-sql-injection-chain2026-10-29 https://bugbountyreports.com/reports/4132-typeorm-does-not-properly-escape-parameters-when-building2026-10-29 https://bugbountyreports.com/reports/8552-uaf-in-openssl-up-to-3-0-72026-10-29 https://bugbountyreports.com/reports/4806-uaf-in-xmlparser-setevents-12026-10-29 https://bugbountyreports.com/reports/4805-uaf-in-xmlparser-setevents-22026-10-29 https://bugbountyreports.com/reports/9014-uaf-on-jsethereumprovider2026-10-29 https://bugbountyreports.com/reports/6663-uber-employees-are-sharing-information-on-productforums2026-10-29 https://bugbountyreports.com/reports/7654-uber-test-report-202203012026-10-29 https://bugbountyreports.com/reports/1075-uber-com-may-rce-by-flask-jinja2-template-injection2026-10-29 https://bugbountyreports.com/reports/5425-ubernycmarketplace-com-is-vulnerable-to-the-heartbleed-bug2026-10-29 https://bugbountyreports.com/reports/4040-ubnt-amplification-ddos-attack2026-10-29 https://bugbountyreports.com/reports/4451-ubuntu-linux-privilege-escalation-dirty-sock2026-10-29 https://bugbountyreports.com/reports/5136-ubuntu-debian-installation-method-allows-key-poisoning-and2026-10-29 https://bugbountyreports.com/reports/10353-ui-consent-bypass-via-comma-injection-in2026-10-29 https://bugbountyreports.com/reports/9865-ui-flaw-allows-unauthorized-users-to-add-documents-to2026-10-29 https://bugbountyreports.com/reports/1471-ui-redressing-clickjacking-issue-on-information-submit-form2026-10-29 https://bugbountyreports.com/reports/2563-ui-redressing-on-embedded-charts2026-10-29 https://bugbountyreports.com/reports/8767-ui-spoofing-by-showing-sms-tel-dialog-on-another-website2026-10-29 https://bugbountyreports.com/reports/9069-unathenticated-file-read-cve-2020-34522026-10-29 https://bugbountyreports.com/reports/7477-unathorised-access-to-admin-endpoint-on-plus-website2026-10-29 https://bugbountyreports.com/reports/9466-unauth-idor-to-mass-account-takeover-without-user2026-10-29 https://bugbountyreports.com/reports/8006-unauth-mosquitto-client-emails-ips-license-keys-exposure2026-10-29 https://bugbountyreports.com/reports/6753-unauth-rce-on-jenkins-instance-at-https2026-10-29 https://bugbountyreports.com/reports/10512-unauthenticated-q-search-query-causes-exponential-pyparsing2026-10-29 https://bugbountyreports.com/reports/5280-unauthenticated-display-name-information-leak-on2026-10-29 https://bugbountyreports.com/reports/7465-unauthenticated-access-to-admin-panel-functions-at-https2026-10-29 https://bugbountyreports.com/reports/7464-unauthenticated-access-to-admin-panel-functions-at-https2026-10-29 https://bugbountyreports.com/reports/788-unauthenticated-access-to-details-of-hidden-products-in-any2026-10-29 https://bugbountyreports.com/reports/9469-unauthenticated-access-to-internal-api-at-edu-htus2026-10-29 https://bugbountyreports.com/reports/10241-unauthenticated-access-to-private-files-on-app-fizzy-do-via2026-10-29 https://bugbountyreports.com/reports/6558-unauthenticated-access-to-webmail-at-maildev-happytools-dev2026-10-29 https://bugbountyreports.com/reports/3705-unauthenticated-access-to-zendesk-tickets-through-athena2026-10-29 https://bugbountyreports.com/reports/10323-unauthenticated-account-registration-email-verification2026-10-29 https://bugbountyreports.com/reports/10550-unauthenticated-api-allows-reading-writing-to-and-deleting2026-10-29 https://bugbountyreports.com/reports/6304-unauthenticated-arbitrary-file-deletion-cve-2020-3187-in2026-10-29 https://bugbountyreports.com/reports/6073-unauthenticated-arbitrary-file-deletion-cve-2020-3187-in2026-10-29 https://bugbountyreports.com/reports/7236-unauthenticated-arbitrary-file-deletion-cve-2020-31872026-10-29 https://bugbountyreports.com/reports/9470-unauthenticated-arbitrary-file-upload-on-the-https-mil2026-10-29 https://bugbountyreports.com/reports/9530-unauthenticated-arbitrary-file-upload-on-the-https2026-10-29 https://bugbountyreports.com/reports/8637-unauthenticated-blind-ssrf-at-https-via-xmlrpc-php-file2026-10-29 https://bugbountyreports.com/reports/10539-unauthenticated-blind-ssrf-in-circles-signature2026-10-29 https://bugbountyreports.com/reports/4094-unauthenticated-blind-ssrf-in-oauth-jira-authorization2026-10-29 https://bugbountyreports.com/reports/8675-unauthenticated-cache-purging2026-10-29 https://bugbountyreports.com/reports/9520-unauthenticated-clients-can-modify-livechat-business-hours2026-10-29 https://bugbountyreports.com/reports/2899-unauthenticated-cross-site-scripting-in-web-management2026-10-29 https://bugbountyreports.com/reports/10555-unauthenticated-disclosure-of-draft-private-pending-post2026-10-29 https://bugbountyreports.com/reports/10582-unauthenticated-disclosure-of-private-and-hidden-forum2026-10-29 https://bugbountyreports.com/reports/1690-unauthenticated-docker-registry2026-10-29 https://bugbountyreports.com/reports/10357-unauthenticated-file-deletion-via-deletefilemessage-ddp2026-10-29 https://bugbountyreports.com/reports/9114-unauthenticated-file-read-adobe-coldfusion2026-10-29 https://bugbountyreports.com/reports/10124-unauthenticated-file-read-adobe-coldfusion2026-10-29 https://bugbountyreports.com/reports/10315-unauthenticated-file-upload-to-cdn2026-10-29 https://bugbountyreports.com/reports/10403-unauthenticated-file-upload-with-cors-wildcard-and-no-rate2026-10-29 https://bugbountyreports.com/reports/9508-unauthenticated-full-read-ssrf-via-twilio-integration2026-10-29 https://bugbountyreports.com/reports/10623-unauthenticated-go-httpbin-servers-leads-to-cookie-tossing2026-10-29 https://bugbountyreports.com/reports/10097-unauthenticated-graphql-access-by-prepending-schema-to2026-10-29 https://bugbountyreports.com/reports/3003-unauthenticated-hidden-groups-disclosure-via-ajax-groups2026-10-29 https://bugbountyreports.com/reports/6061-unauthenticated-html-injection-stored-contactus-form2026-10-29 https://bugbountyreports.com/reports/8177-unauthenticated-ip-allowlist-bypass-when-accessing-job2026-10-29 https://bugbountyreports.com/reports/9180-unauthenticated-jenkins-instance-exposed-information2026-10-29 https://bugbountyreports.com/reports/9656-unauthenticated-lfi-local-file-inclusion-using-the-symbol2026-10-29 https://bugbountyreports.com/reports/3184-unauthenticated-lfi-revealing-log-information2026-10-29 https://bugbountyreports.com/reports/10454-unauthenticated-path-traversal-lfi-via-custom-sounds-when2026-10-29 https://bugbountyreports.com/reports/9751-unauthenticated-path-traversal-and-command-injection-in2026-10-29 https://bugbountyreports.com/reports/10659-unauthenticated-persistent-denial-of-service-via-federated2026-10-29 https://bugbountyreports.com/reports/9680-unauthenticated-phpinfo-files-could-lead-to-ability-file2026-10-29 https://bugbountyreports.com/reports/8424-unauthenticated-phpinfo-files-could-lead-to-ability-file2026-10-29 https://bugbountyreports.com/reports/9807-unauthenticated-phpinfo-files-could-lead-to-ability-file2026-10-29 https://bugbountyreports.com/reports/8230-unauthenticated-pii-leak-on-verified-requested-to-be2026-10-29 https://bugbountyreports.com/reports/10422-unauthenticated-plugin-settings-modification-on-three2026-10-29 https://bugbountyreports.com/reports/8040-unauthenticated-private-messages-disclosure-via-wordpress2026-10-29 https://bugbountyreports.com/reports/10463-unauthenticated-rce-in-taskcluster-web-server-via-graphql2026-10-29 https://bugbountyreports.com/reports/2838-unauthenticated-rce-in-vaultpress2026-10-29 https://bugbountyreports.com/reports/4633-unauthenticated-read-and-write-access-to-all-endpoints-of-a2026-10-29 https://bugbountyreports.com/reports/10355-unauthenticated-reading-of-every-file-via-livechat-auth-and2026-10-29 https://bugbountyreports.com/reports/5557-unauthenticated-reflected-cross-site-scripting-on-https2026-10-29 https://bugbountyreports.com/reports/3128-unauthenticated-reflected-xss-in-admin-dashboard2026-10-29 https://bugbountyreports.com/reports/10364-unauthenticated-reflected-xss-in-essity-network-toolbox-cgi2026-10-29 https://bugbountyreports.com/reports/5036-unauthenticated-reflected-xss-in-preview-as-user-function2026-10-29 https://bugbountyreports.com/reports/9091-unauthenticated-remote-access-to-testing-endpoint2026-10-29 https://bugbountyreports.com/reports/5397-unauthenticated-request-allows-changing-hostname2026-10-29 https://bugbountyreports.com/reports/6164-unauthenticated-request-smuggling-on-launchpad-37signals-com2026-10-29 https://bugbountyreports.com/reports/10615-unauthenticated-self-registration-on-grants-full-access-to2026-10-29 https://bugbountyreports.com/reports/10016-unauthenticated-sensitive-information-disclosure-on-cve2026-10-29 https://bugbountyreports.com/reports/8231-unauthenticated-sql-injection-at-htus2026-10-29 https://bugbountyreports.com/reports/10432-unauthenticated-sql-injection-via-rest-batch-route-confusion2026-10-29 https://bugbountyreports.com/reports/8095-unauthenticated-ssrf-in-3rd-party-module-cerdic-csstidy2026-10-29 https://bugbountyreports.com/reports/10442-unauthenticated-ssrf-in-voxtelesys-integration2026-10-29 https://bugbountyreports.com/reports/1756-unauthenticated-stored-xss-on-myshopify-com-via-checkout2026-10-29 https://bugbountyreports.com/reports/10453-unauthenticated-team-income-payments-export-ignores-donor2026-10-29 https://bugbountyreports.com/reports/10519-unauthenticated-testing-endpoint-of-notify-push-expose2026-10-29 https://bugbountyreports.com/reports/3787-unauthenticated-user-can-upload-an-attachment-to-the-last2026-10-29 https://bugbountyreports.com/reports/5881-unauthenticated-users-can-access-all-food-grammarly-io-user2026-10-29 https://bugbountyreports.com/reports/10142-unauthenticated-users-can-access-other-users-bug-report2026-10-29 https://bugbountyreports.com/reports/5330-unauthenticated-users-can-obtain-information-about2026-10-29 https://bugbountyreports.com/reports/2082-unauthorised-access-to-anyone-s-user-account2026-10-29 https://bugbountyreports.com/reports/5518-unauthorised-access-to-pagespeed-global-admin-at-https2026-10-29 https://bugbountyreports.com/reports/10662-unauthorised-access-with-hidden-public-link-creation-when2026-10-29 https://bugbountyreports.com/reports/5689-unauthorised-account-detail-modification2026-10-29 https://bugbountyreports.com/reports/9917-unauthorized-access-and-add-user-and-change-personal2026-10-29 https://bugbountyreports.com/reports/5886-unauthorized-access-and-updation-of-email-settings-of-other2026-10-29 https://bugbountyreports.com/reports/9727-unauthorized-access-exposing-sensitive-data2026-10-29 https://bugbountyreports.com/reports/4133-unauthorized-access-of-monero-wallet-by-an-unprivileged2026-10-29 https://bugbountyreports.com/reports/6690-unauthorized-access-to-com-allows-access-to-uber-brazil-tax2026-10-29 https://bugbountyreports.com/reports/3854-unauthorized-access-to-a-system-used-for-ci-cd-processes2026-10-29 https://bugbountyreports.com/reports/7045-unauthorized-access-to-admin-panel-of-the-questionmark2026-10-29 https://bugbountyreports.com/reports/773-unauthorized-access-to-all-collections-name2026-10-29 https://bugbountyreports.com/reports/781-unauthorized-access-to-all-collections-products-pages-from2026-10-29 https://bugbountyreports.com/reports/757-unauthorized-access-to-all-customers-first-and-last-name2026-10-29 https://bugbountyreports.com/reports/804-unauthorized-access-to-any-store-admin-s-first-last-name2026-10-29 https://bugbountyreports.com/reports/9115-unauthorized-access-to-argo-dashboard-on2026-10-29 https://bugbountyreports.com/reports/7513-unauthorized-access-to-choice-av-ru-control-panel2026-10-29 https://bugbountyreports.com/reports/7429-unauthorized-access-to-employee-panel-with-default2026-10-29 https://bugbountyreports.com/reports/8723-unauthorized-access-to-govslack2026-10-29 https://bugbountyreports.com/reports/7946-unauthorized-access-to-internal-server-panel-without2026-10-29 https://bugbountyreports.com/reports/3496-unauthorized-access-to-jiratest-starbucks-com2026-10-29 https://bugbountyreports.com/reports/5592-unauthorized-access-to-metadata-of-undisclosed-reports-that2026-10-29 https://bugbountyreports.com/reports/9263-unauthorized-access-to-offline-publication-cover-pages-via2026-10-29 https://bugbountyreports.com/reports/9814-unauthorized-access-to-pii-leads-to-administrator-account2026-10-29 https://bugbountyreports.com/reports/7619-unauthorized-access-to-pii-leads-to-mass-account-takeover2026-10-29 https://bugbountyreports.com/reports/6295-unauthorized-access-to-private-project-security-dashboard2026-10-29 https://bugbountyreports.com/reports/9960-unauthorized-access-to-private-video-description-via2026-10-29 https://bugbountyreports.com/reports/3006-unauthorized-access-to-protected-tweets-via-niche-co-api2026-10-29 https://bugbountyreports.com/reports/8352-unauthorized-access-to-resumes-stored-on-linkedin2026-10-29 https://bugbountyreports.com/reports/9772-unauthorized-access-to-tiktok-account-private-videos-via2026-10-29 https://bugbountyreports.com/reports/1413-unauthorized-access-to-zookeeper-on-http-locutus-zk3-ec22026-10-29 https://bugbountyreports.com/reports/9892-unauthorized-account-access-via-leaked-credentials-in-url2026-10-29 https://bugbountyreports.com/reports/10010-unauthorized-blogs-creation2026-10-29 https://bugbountyreports.com/reports/8377-unauthorized-canceling-unsubscribe-taxjar-account-payment2026-10-29 https://bugbountyreports.com/reports/9961-unauthorized-coins-transfer-from-locking-account-s2026-10-29 https://bugbountyreports.com/reports/4965-unauthorized-command-execution-in-web-protection-component2026-10-29 https://bugbountyreports.com/reports/4966-unauthorized-command-execution-in-web-protection-component2026-10-29 https://bugbountyreports.com/reports/4964-unauthorized-command-execution-in-web-protection-component2026-10-29 https://bugbountyreports.com/reports/9994-unauthorized-disclosure-of-private-emails-via-wakatime2026-10-29 https://bugbountyreports.com/reports/40-unauthorized-editorial-publishing-to-blogs2026-10-29 https://bugbountyreports.com/reports/7360-unauthorized-kubernetes-to-rce-root-and-found-teamtnt2026-10-29 https://bugbountyreports.com/reports/7974-unauthorized-packages-modification-or-secrets-exfiltration2026-10-29 https://bugbountyreports.com/reports/10059-unauthorized-password-reset-allows-account-takeover-across2026-10-29 https://bugbountyreports.com/reports/9864-unauthorized-table-creation-by-member2026-10-29 https://bugbountyreports.com/reports/1701-unauthorized-team-members-can-leak-information-and-see-all2026-10-29 https://bugbountyreports.com/reports/8932-unauthorized-ticket-can-be-created-by-an-attacker-in-user-s2026-10-29 https://bugbountyreports.com/reports/547-unauthorized-tweeting-on-behalf-of-account-owners2026-10-29 https://bugbountyreports.com/reports/2854-unauthorized-update-of-merchants-information-via-php2026-10-29 https://bugbountyreports.com/reports/6012-unauthorized-updates-to-extended-info-properties-in-store2026-10-29 https://bugbountyreports.com/reports/5941-unauthorized-use-of-victim-credit-card2026-10-29 https://bugbountyreports.com/reports/5212-unauthorized-user-can-obtain-report-sources-attribute2026-10-29 https://bugbountyreports.com/reports/8598-unauthorized-user-can-view-subscribers-of-other-users2026-10-29 https://bugbountyreports.com/reports/6329-unauthorized-user-is-able-to-access-schedule-pipeline2026-10-29 https://bugbountyreports.com/reports/10663-unauthorized-users-can-enumerate-internal-team-resources2026-10-29 https://bugbountyreports.com/reports/3932-unauthorized-users-may-be-able-to-view-almost-all2026-10-29 https://bugbountyreports.com/reports/10495-unauthorized-vertical-privilege-escalation-vulnerability2026-10-29 https://bugbountyreports.com/reports/10217-unbounded-decompression-chain-in-http-responses-on-node-js2026-10-29 https://bugbountyreports.com/reports/10387-unbounded-memory-growth-in-node-http2-clients-via-attacker2026-10-29 https://bugbountyreports.com/reports/9609-unbounded-memory-growth-with-session-handling-in-tlsv1-32026-10-29 https://bugbountyreports.com/reports/10211-uncatchable-maximum-call-stack-size-exceeded-error-on-node2026-10-29 https://bugbountyreports.com/reports/10614-uncaught-recursionerror-crash-in-translation-finder-deep2026-10-29 https://bugbountyreports.com/reports/1796-unchecked-unserialize-usage-in-wordpress-functionality2026-10-29 https://bugbountyreports.com/reports/1800-unchecked-unserialize-usages-in-audit-trail-extension-audit2026-10-29 https://bugbountyreports.com/reports/4515-unchecked-weapon-id-in-weaponlist-message-parser-on-client2026-10-29 https://bugbountyreports.com/reports/4397-unclaimed-github-repository-takeover-on-https-www-data-gov2026-10-29 https://bugbountyreports.com/reports/8496-unclaimed-official-s3-bucket-of-tendermint-tendermint2026-10-29 https://bugbountyreports.com/reports/5092-uncontrolled-resource-consumption-in-any-markdown-field2026-10-29 https://bugbountyreports.com/reports/9808-uncontrolled-resource-consumption-when-parsing-maliciously2026-10-29 https://bugbountyreports.com/reports/112-uncontrolled-resource-consumption-with-xmpp-layer2026-10-29 https://bugbountyreports.com/reports/6968-uncontrolled-search-path-element-allows-dll-hijacking-for2026-10-29 https://bugbountyreports.com/reports/7105-uncovering-file-quarantine-and-ux-security-issues-in-macos2026-10-29 https://bugbountyreports.com/reports/1768-undefined-method-missing-null-pointer-dereference2026-10-29 https://bugbountyreports.com/reports/236-undeletable-file2026-10-29 https://bugbountyreports.com/reports/7266-underrepresentation-bias-through-twitter-s-cropping2026-10-29 https://bugbountyreports.com/reports/7267-underrepresentation-bias-through-twitter-s-cropping2026-10-29 https://bugbountyreports.com/reports/7997-undici-does-not-use-connect-or-otherwise-validate-upstream2026-10-29 https://bugbountyreports.com/reports/7996-undici-proxyagent-vulnerable-to-mitm2026-10-29 https://bugbountyreports.com/reports/6140-undocumented-filecopy-graphql-api2026-10-29 https://bugbountyreports.com/reports/5505-unencrypted-viewstate-parameter-in-a-dod-website2026-10-29 https://bugbountyreports.com/reports/88-unexpected-array-leaks-information-about-the-system2026-10-29 https://bugbountyreports.com/reports/8893-unexpected-deserialization-in-kredis2026-10-29 https://bugbountyreports.com/reports/2142-unfiltered-class-attribute-in-markdown-code2026-10-29 https://bugbountyreports.com/reports/3483-unfiltered-input-allows-for-xss-in-playtime-item-grants2026-10-29 https://bugbountyreports.com/reports/3309-unicorn-worker-pool-exhaustion-by-continuously-updating2026-10-29 https://bugbountyreports.com/reports/895-unifi-v3-2-10-cross-site-request-forgeries-referer-check2026-10-29 https://bugbountyreports.com/reports/3865-unifi-video-server-arbitrary-file-upload-as-system2026-10-29 https://bugbountyreports.com/reports/3866-unifi-video-server-broken-access-control-on-system2026-10-29 https://bugbountyreports.com/reports/5370-unifi-video-server-web-interface-admin-user-firmware-update2026-10-29 https://bugbountyreports.com/reports/4206-unifi-video-server-web-interface-configuration-restore-csrf2026-10-29 https://bugbountyreports.com/reports/3556-unifi-video-server-web-interface-configuration-restore-path2026-10-29 https://bugbountyreports.com/reports/5368-unifi-video-v3-10-1-windows-local-privileges-escalation-to2026-10-29 https://bugbountyreports.com/reports/3130-unifi-video-v3-2-2-windows-local-privileges-escalation-due2026-10-29 https://bugbountyreports.com/reports/5371-unifi-video-web-interface-configuration-restore-user2026-10-29 https://bugbountyreports.com/reports/748-uninitialized-pointer-in-phar-make-dirstream2026-10-29 https://bugbountyreports.com/reports/4707-uninitialized-pointer-in-phar-make-dirstream2026-10-29 https://bugbountyreports.com/reports/6096-uninitialized-read-in-exif-process-ifd-in-makernote2026-10-29 https://bugbountyreports.com/reports/6097-uninitialized-read-in-exif-process-ifd-in-tiff2026-10-29 https://bugbountyreports.com/reports/6094-uninitialized-read-in-gdimagecreatefromxbm2026-10-29 https://bugbountyreports.com/reports/3139-uninitialized-server-memory-disclosure-via-imagemagick-gif2026-10-29 https://bugbountyreports.com/reports/4842-uninitialized-thumbail-data-leads-to-memory-leakage-in-exif2026-10-29 https://bugbountyreports.com/reports/90-uninitialized-variable-error-message-leaks-information2026-10-29 https://bugbountyreports.com/reports/8445-uninstalling-mattermost-launcher-for-windows-64-bit-then2026-10-29 https://bugbountyreports.com/reports/7728-uninstalling-rockstar-games-launcher-for-windows-64-bit2026-10-29 https://bugbountyreports.com/reports/6237-uninstalling-slack-for-windows-64-bit-then-reinstalling2026-10-29 https://bugbountyreports.com/reports/970-unintended-html-inclusion-as-a-result-of-https-hackerone2026-10-29 https://bugbountyreports.com/reports/8167-unintended-information-disclosure-in-the-hubot-log-files2026-10-29 https://bugbountyreports.com/reports/3314-unintentional-file-creation-caused-at-tempfile-with2026-10-29 https://bugbountyreports.com/reports/7500-universal-cross-site-scripting-vulnerability2026-10-29 https://bugbountyreports.com/reports/8776-universal-xss-through-fido-u2f-register-from-subframe2026-10-29 https://bugbountyreports.com/reports/8771-universal-xss-with-playlist-feature2026-10-29 https://bugbountyreports.com/reports/3311-unix-domain-socket-and-a-path-containing-a-null-character2026-10-29 https://bugbountyreports.com/reports/10393-unix-domain-socket-server-bypasses-permission-network2026-10-29 https://bugbountyreports.com/reports/7284-unix-time-unlock-time-values-have-dangerous-validation2026-10-29 https://bugbountyreports.com/reports/9423-unlimited-fake-rate-to-the-passenger-in-city-to-city2026-10-29 https://bugbountyreports.com/reports/10205-unlimited-reuse-of-coupon-code-allows-free-shipping-on-all2026-10-29 https://bugbountyreports.com/reports/4016-unlock-self-lock-by-brute-force2026-10-29 https://bugbountyreports.com/reports/9962-unlock-underage-blocked-app-without-support-interaction2026-10-29 https://bugbountyreports.com/reports/3983-unpacker-improperly-validates-symlinks-allowing-gems-writes2026-10-29 https://bugbountyreports.com/reports/5649-unpermitted-user-can-change-the-device-name-of-admin-account2026-10-29 https://bugbountyreports.com/reports/8137-unprotected-and-test-site-api-exposes-documents-credentials2026-10-29 https://bugbountyreports.com/reports/8963-unprotected-atlantis-server-at-https-132-2262026-10-29 https://bugbountyreports.com/reports/8350-unprotected-atlantis-server-at-https-152-702026-10-29 https://bugbountyreports.com/reports/9307-unprotected-atlantis-server-at-https-152-702026-10-29 https://bugbountyreports.com/reports/8336-unprotected-direct-object-reference2026-10-29 https://bugbountyreports.com/reports/4285-unpublished-product-images-can-be-disclosed2026-10-29 https://bugbountyreports.com/reports/10281-unquoted-body-background-attribute-enables-css-injection2026-10-29 https://bugbountyreports.com/reports/4976-unquoted-service-path-in-rockstar-game-library-service2026-10-29 https://bugbountyreports.com/reports/9522-unread-messages-can-leak-message-ids2026-10-29 https://bugbountyreports.com/reports/4189-unreleased-ctf-levels-are-revealed-on-group-user-id1-user2026-10-29 https://bugbountyreports.com/reports/5407-unrestricted-access-to-any-connected-pack-on-docs2026-10-29 https://bugbountyreports.com/reports/9104-unrestricted-access-to-celery-flower-instance2026-10-29 https://bugbountyreports.com/reports/3199-unrestricted-access-to-eureka-server-on2026-10-29 https://bugbountyreports.com/reports/3212-unrestricted-access-to-https-myteksi-net2026-10-29 https://bugbountyreports.com/reports/6769-unrestricted-access-to-quiesce-functionality-in-dss-api2026-10-29 https://bugbountyreports.com/reports/1829-unrestricted-file-download-path-traversal2026-10-29 https://bugbountyreports.com/reports/3276-unrestricted-file-system-access-via-twig-template-injection2026-10-29 https://bugbountyreports.com/reports/1793-unrestricted-file-upload2026-10-29 https://bugbountyreports.com/reports/5465-unrestricted-file-upload2026-10-29 https://bugbountyreports.com/reports/3091-unrestricted-file-upload-cloudacademy-informatica-com2026-10-29 https://bugbountyreports.com/reports/3501-unrestricted-file-upload-rce2026-10-29 https://bugbountyreports.com/reports/9238-unrestricted-file-upload-at2026-10-29 https://bugbountyreports.com/reports/8038-unrestricted-file-upload-blind-stored-xss-in-subdomain-ads2026-10-29 https://bugbountyreports.com/reports/5901-unrestricted-file-upload-in-chat-window2026-10-29 https://bugbountyreports.com/reports/5119-unrestricted-file-upload-in-www-semrush-com-my-reports-api2026-10-29 https://bugbountyreports.com/reports/4747-unrestricted-file-upload-leading-to-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/6356-unrestricted-file-upload-leads-to-rce-on-mobile-starbucks2026-10-29 https://bugbountyreports.com/reports/5860-unrestricted-file-upload-leads-to-stored-xss2026-10-29 https://bugbountyreports.com/reports/5575-unrestricted-file-upload-leads-to-stored-xss-on-https2026-10-29 https://bugbountyreports.com/reports/5773-unrestricted-file-upload-leads-to-xss-potential-rce2026-10-29 https://bugbountyreports.com/reports/5888-unrestricted-file-upload-on-https-app-dropcontact-io-app2026-10-29 https://bugbountyreports.com/reports/5364-unrestricted-file-upload-on-https-app-lemlist-com2026-10-29 https://bugbountyreports.com/reports/4242-unrestricted-file-upload-on-https-auth-ratelimited-me2026-10-29 https://bugbountyreports.com/reports/5404-unrestricted-file-upload-on-https-my-stripo-email-and-https2026-10-29 https://bugbountyreports.com/reports/8631-unrestricted-file-upload-on-https-partner-tiktokshop-com2026-10-29 https://bugbountyreports.com/reports/8194-unrestricted-file-upload-on-reddit-secure-force-com2026-10-29 https://bugbountyreports.com/reports/5770-unrestricted-file-upload-on-the-image-of-contacts2026-10-29 https://bugbountyreports.com/reports/6899-unrestricted-file-upload-results-in-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/5611-unrestricted-file-upload-to-submitrequest-index-cfm-fwa2026-10-29 https://bugbountyreports.com/reports/10077-unrestricted-setperpage-allows-huge-result-sets-resource2026-10-29 https://bugbountyreports.com/reports/6532-unrestricted-upload-of-file-with-dangerous-type2026-10-29 https://bugbountyreports.com/reports/2700-unsafe-arithmetic-in-pystring-decodeescape2026-10-29 https://bugbountyreports.com/reports/5444-unsafe-cors-sharing-of-admin-users2026-10-29 https://bugbountyreports.com/reports/3506-unsafe-deserialization-in-libera-pay-allows-to-escalate-a2026-10-29 https://bugbountyreports.com/reports/6017-unsafe-deserialization-in-nexus-repository-helm-plugin2026-10-29 https://bugbountyreports.com/reports/6859-unsafe-deserialization-leads-to-token-leakage-in-paypal2026-10-29 https://bugbountyreports.com/reports/3729-unsafe-handling-of-protocol-handlers2026-10-29 https://bugbountyreports.com/reports/2644-unsafe-inline-and-eval-csp-usage2026-10-29 https://bugbountyreports.com/reports/3204-unsafe-query-generation-cve-2012-2660-cve-2012-2694-and-cve2026-10-29 https://bugbountyreports.com/reports/916-unsafe-usage-of-ruby-string-interpolation-enabling-command2026-10-29 https://bugbountyreports.com/reports/9339-unsafe-yaml-load-can-lead-to-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/8916-unsanitized-input-goes-to-regex-function-leads-to-redos2026-10-29 https://bugbountyreports.com/reports/1554-unsanitized-location-name-in-pos-channel-can-lead-to-xss-in2026-10-29 https://bugbountyreports.com/reports/161-unsecure-cookies-cookie-flag-secure-not-set2026-10-29 https://bugbountyreports.com/reports/3114-unsecure-bypass-alerts-of-little-flocker-little-snitch2026-10-29 https://bugbountyreports.com/reports/6724-unsecured-dropwizard-admin-panel-on-display-uber-adsystem2026-10-29 https://bugbountyreports.com/reports/1670-unsecured-grafana-instance2026-10-29 https://bugbountyreports.com/reports/1598-unsecured-legalrobot-co-uk-assets2026-10-29 https://bugbountyreports.com/reports/3118-unserialize-leading-to-arbitrary-php-function-invoke2026-10-29 https://bugbountyreports.com/reports/9706-unsubscribe-anyone-from-all-emails2026-10-29 https://bugbountyreports.com/reports/9821-unsufficent-input-verification-leads-to-dos-and-resource2026-10-29 https://bugbountyreports.com/reports/5568-untrusted-strings-that-are-cache-fetched-with-raw-option2026-10-29 https://bugbountyreports.com/reports/5822-untrusted-users-able-to-run-pending-migrations-in-production2026-10-29 https://bugbountyreports.com/reports/4014-unuse-domain-still-in-using-at-wechat-by-starbucks-east2026-10-29 https://bugbountyreports.com/reports/407-unvalid-open-authentication-with-facebook2026-10-29 https://bugbountyreports.com/reports/342-unvalidated-channel-names-causes-irc-command-injection2026-10-29 https://bugbountyreports.com/reports/1721-unvalidated-redirect-on-team-badoo-com2026-10-29 https://bugbountyreports.com/reports/2713-update-any-profile2026-10-29 https://bugbountyreports.com/reports/5164-update-app-store-django-account-high-jacking-vulnerability2026-10-29 https://bugbountyreports.com/reports/2205-update-php-saml-library-to-2-10-52026-10-29 https://bugbountyreports.com/reports/3192-updating-payout-preference-to-currencycloud-doesn-t-notify2026-10-29 https://bugbountyreports.com/reports/2070-upgrade-aspen-on-inside-gratipay-com-to-pick-up-cr2026-10-29 https://bugbountyreports.com/reports/8513-upload-and-delete-files-in-debug-page-without-access-control2026-10-29 https://bugbountyreports.com/reports/5197-upload-directory-of-mtn-ci2026-10-29 https://bugbountyreports.com/reports/5198-upload-directory-of-mtn-co-sz-has-listing-enabled2026-10-29 https://bugbountyreports.com/reports/9525-upload-of-avatars-for-other-users2026-10-29 https://bugbountyreports.com/reports/9701-upload-profile-photo-and-pets-addition-idor2026-10-29 https://bugbountyreports.com/reports/15-upload-profile-photo-from-url2026-10-29 https://bugbountyreports.com/reports/7713-upload-profile-photo-in-any-folder-you-want-with-any2026-10-29 https://bugbountyreports.com/reports/2399-uploaded-xlf-files-result-in-external-entity-execution2026-10-29 https://bugbountyreports.com/reports/1354-uploading-files-to-a-folder-where-invited-user-don-t-have2026-10-29 https://bugbountyreports.com/reports/4316-uploading-large-avatar-images-cause-excessive-cpu-usage2026-10-29 https://bugbountyreports.com/reports/5695-uploading-large-payload-on-domain-instructions-causes2026-10-29 https://bugbountyreports.com/reports/10391-uppercase-sni-context-matching-can-lead-to-mtls2026-10-29 https://bugbountyreports.com/reports/888-urgent-subdomain-takeover-in-support-urbandictionary-com2026-10-29 https://bugbountyreports.com/reports/369-urgent-subdomain-takeover-on-media-vine-co-due-to-unclaimed2026-10-29 https://bugbountyreports.com/reports/516-urgent-subdomain-takeover-on-status-vimeo-com-due-to2026-10-29 https://bugbountyreports.com/reports/426-urgent-subdomain-takeover-on-twitter-acq2026-10-29 https://bugbountyreports.com/reports/396-urgent-subdomain-takeover-on-users-tweetdeck-com-the-same2026-10-29 https://bugbountyreports.com/reports/1446-urgent-disclosure-of-all-the-apps-with-hash-id-in-mopub2026-10-29 https://bugbountyreports.com/reports/875-urgent-niche-co-account-take-over-vulnerability2026-10-29 https://bugbountyreports.com/reports/3294-urgent-unauthorised-access-to-media-content-of-all-direct2026-10-29 https://bugbountyreports.com/reports/1376-urgent-attacker-can-access-every-data-source-on-bime2026-10-29 https://bugbountyreports.com/reports/1615-uri-obfuscation2026-10-29 https://bugbountyreports.com/reports/9103-uri-parser-s-rfc3986-regular-expression-has-poor2026-10-29 https://bugbountyreports.com/reports/1844-uri-scheme-bypass-in-mail-app-lead-to-html-content-spoof2026-10-29 https://bugbountyreports.com/reports/10481-uri-scheme-validation-bypass-in-actiontext-to-markdown-via2026-10-29 https://bugbountyreports.com/reports/4462-url-advisor-component-in-kis-products-family-is-vulnerable2026-10-29 https://bugbountyreports.com/reports/1200-url-crashing-browser-tested-on-firefox-chrome-and-safari2026-10-29 https://bugbountyreports.com/reports/5230-url-filter-bypass-in-enterprise-grid2026-10-29 https://bugbountyreports.com/reports/4724-url-is-vulnerable-to-clickjacking2026-10-29 https://bugbountyreports.com/reports/5429-url-link-spoofing2026-10-29 https://bugbountyreports.com/reports/10001-url-path-manipulation-enables-cache-poisoning-of-amazon2026-10-29 https://bugbountyreports.com/reports/4458-url-redirection2026-10-29 https://bugbountyreports.com/reports/317-url-redirection-flaw2026-10-29 https://bugbountyreports.com/reports/7818-url-scheme-misconfiguration-on-tiktok-for-ios2026-10-29 https://bugbountyreports.com/reports/10028-url-scheme-validation-bypass-in-shopify-mobile-app-allows2026-10-29 https://bugbountyreports.com/reports/2791-url-spoof-brave-shield-bypass2026-10-29 https://bugbountyreports.com/reports/3768-url-spoofing-in-brave-for-macos2026-10-29 https://bugbountyreports.com/reports/3769-url-spoofing-using-protocol-handlers2026-10-29 https://bugbountyreports.com/reports/4100-url-that-twitter-mobile-site-can-not-load2026-10-29 https://bugbountyreports.com/reports/3606-url-parse-package-return-wrong-hostname2026-10-29 https://bugbountyreports.com/reports/5128-url-parse-hostname-spoofing-via-javascript-uris2026-10-29 https://bugbountyreports.com/reports/4791-urllib-connects-to-a-wrong-host2026-10-29 https://bugbountyreports.com/reports/1502-urllib-http-header-injection-cve-2016-56992026-10-29 https://bugbountyreports.com/reports/7226-urn-request-bypass-acl-checks2026-10-29 https://bugbountyreports.com/reports/7227-urnstate-heap-overflow2026-10-29 https://bugbountyreports.com/reports/9296-usage-of-disabled-protocol-in-curl2026-10-29 https://bugbountyreports.com/reports/9763-usage-of-unsafe-random-function-in-undici-for-choosing2026-10-29 https://bugbountyreports.com/reports/6217-use-after-free-and-out-of-bounds-read-in-xmlrpc-decode2026-10-29 https://bugbountyreports.com/reports/478-use-after-free-during-the-stagevideoavailabilityevent-can2026-10-29 https://bugbountyreports.com/reports/477-use-after-free-in-flash-messagechannel-send-can-cause2026-10-29 https://bugbountyreports.com/reports/6208-use-after-free-in-gc-with-certain-destructors2026-10-29 https://bugbountyreports.com/reports/536-use-after-free-in-get-filter2026-10-29 https://bugbountyreports.com/reports/632-use-after-free-in-load-newobj-ex2026-10-29 https://bugbountyreports.com/reports/1983-use-after-free-in-mrb-vm-exec2026-10-29 https://bugbountyreports.com/reports/2584-use-after-free-in-mruby-mpdecimal2026-10-29 https://bugbountyreports.com/reports/4664-use-after-free-in-php7-unserialize2026-10-29 https://bugbountyreports.com/reports/908-use-after-free-in-sortwithsortkeys2026-10-29 https://bugbountyreports.com/reports/1880-use-after-free-in-str-replace2026-10-29 https://bugbountyreports.com/reports/4670-use-after-free-in-unserialize2026-10-29 https://bugbountyreports.com/reports/4657-use-after-free-in-unserialize-with-unexpected-session2026-10-29 https://bugbountyreports.com/reports/4658-use-after-free-vulnerability-in-array-walk-array-walk2026-10-29 https://bugbountyreports.com/reports/1751-use-after-free-vulnerability-in-mruby-array-to-h-causing2026-10-29 https://bugbountyreports.com/reports/6209-use-after-free-vulnerability-in-phar-parse-zipfile2026-10-29 https://bugbountyreports.com/reports/1385-use-after-free-vulnerability-in-php-s-gc-algorithm-and2026-10-29 https://bugbountyreports.com/reports/706-use-after-free-vulnerability-in-session-deserializer2026-10-29 https://bugbountyreports.com/reports/4656-use-after-free-vulnerability-in-snmp-with-gc-and-unserialize2026-10-29 https://bugbountyreports.com/reports/406-use-after-free-vulnerability-in-unserialize2026-10-29 https://bugbountyreports.com/reports/467-use-after-free-vulnerability-in-unserialize2026-10-29 https://bugbountyreports.com/reports/705-use-after-free-vulnerability-in-unserialize2026-10-29 https://bugbountyreports.com/reports/4660-use-after-free-vulnerability-in-unserialize2026-10-29 https://bugbountyreports.com/reports/468-use-after-free-vulnerability-in-unserialize-with2026-10-29 https://bugbountyreports.com/reports/434-use-after-free-vulnerability-in-unserialize-with2026-10-29 https://bugbountyreports.com/reports/707-use-after-free-vulnerability-in-unserialize-with-gmp2026-10-29 https://bugbountyreports.com/reports/703-use-after-free-vulnerability-in-unserialize-with2026-10-29 https://bugbountyreports.com/reports/704-use-after-free-vulnerability-in-unserialize-with2026-10-29 https://bugbountyreports.com/reports/4644-use-after-free-vulnerability-in-wddx-packet-deserialization2026-10-29 https://bugbountyreports.com/reports/4580-use-after-free-with-assign-by-ref-to-overloaded-objects2026-10-29 https://bugbountyreports.com/reports/4659-use-after-free-double-free-in-garbage-collection2026-10-29 https://bugbountyreports.com/reports/3080-use-any-user-to-follow-you-increase-followers-idor2026-10-29 https://bugbountyreports.com/reports/5111-use-github-pack-with-coda-employee-github-account-search2026-10-29 https://bugbountyreports.com/reports/7289-use-of-a-broken-or-risky-cryptographic-algorithm2026-10-29 https://bugbountyreports.com/reports/8614-use-of-cryptographically-weak-pseudo-random-number2026-10-29 https://bugbountyreports.com/reports/2388-use-of-uninitialized-memory-in-unserialize2026-10-29 https://bugbountyreports.com/reports/6103-use-of-uninitialized-value-in-ftp-getrc-msg-method-of-mod2026-10-29 https://bugbountyreports.com/reports/7674-use-of-uninitialized-value-of-in-req-parsebody-method-of2026-10-29 https://bugbountyreports.com/reports/4798-use-of-uninitialized-variables-in-operator-methodcaller2026-10-29 https://bugbountyreports.com/reports/7766-use-of-unreleased-features-in-programming-education-service2026-10-29 https://bugbountyreports.com/reports/2213-use-of-unsafe-host-header-leads-to-open-redirect2026-10-29 https://bugbountyreports.com/reports/4712-use-after-free-double-free-in-wddx-deserialize2026-10-29 https://bugbountyreports.com/reports/4792-use-after-free-in-asyncio-future-remove-done-callback2026-10-29 https://bugbountyreports.com/reports/4668-use-after-free-in-arrayobject-deserialization2026-10-29 https://bugbountyreports.com/reports/10531-use-after-free-in-btree-index-traversal-via-stale-key2026-10-29 https://bugbountyreports.com/reports/5765-use-after-free-in-ipv6-2292pktoptions-leading-to-arbitrary2026-10-29 https://bugbountyreports.com/reports/509-use-after-free-in-php-curl-related-to-curlopt-file-infile2026-10-29 https://bugbountyreports.com/reports/4672-use-after-free-in-php7-s-unserialize2026-10-29 https://bugbountyreports.com/reports/8154-use-after-free-in-setsockopt-ipv6-2292pktoptions-cve-20202026-10-29 https://bugbountyreports.com/reports/10301-use-after-free-in-smb-connection-reuse-req-path-dangling2026-10-29 https://bugbountyreports.com/reports/4666-use-after-free-in-unserialize2026-10-29 https://bugbountyreports.com/reports/2842-use-after-free-in-xml-libxml-node-replacechild2026-10-29 https://bugbountyreports.com/reports/2107-use-after-free-leading-to-an-invalid-pointer-dereference2026-10-29 https://bugbountyreports.com/reports/4917-use-after-free-vulnerability-in-flash-player2026-10-29 https://bugbountyreports.com/reports/4886-use-after-free-vulnerability-in-spl-arrayobject-unserialize2026-10-29 https://bugbountyreports.com/reports/4885-use-after-free-vulnerability-in-spl-splobjectstorage2026-10-29 https://bugbountyreports.com/reports/7304-used-email-confirmation-link-reveals-the-email-address2026-10-29 https://bugbountyreports.com/reports/6383-user-able-to-reopen-a-ticket-by-modify-the-request2026-10-29 https://bugbountyreports.com/reports/3981-user-account-blocking-by-internal-server-error2026-10-29 https://bugbountyreports.com/reports/5329-user-account-compromised-authentication-bypass-via-oauth2026-10-29 https://bugbountyreports.com/reports/213-user-account-creation-csrf2026-10-29 https://bugbountyreports.com/reports/301-user-account-is-not-being-deleted-after-user-delete-account2026-10-29 https://bugbountyreports.com/reports/9629-user-api-key-leakage-in-github-commit-leads-to-unauthorized2026-10-29 https://bugbountyreports.com/reports/9901-user-api-key-leaked2026-10-29 https://bugbountyreports.com/reports/9052-user-automatically-logged-in-as-sys-admin-user-on-https2026-10-29 https://bugbountyreports.com/reports/7892-user-can-bypass-password-enforcement-when-federated-sharing2026-10-29 https://bugbountyreports.com/reports/9684-user-can-copy-locked-folders-and-gain-access-to-the-contents2026-10-29 https://bugbountyreports.com/reports/5398-user-can-delete-data-in-shared-folders-he-s-not-autorized2026-10-29 https://bugbountyreports.com/reports/10266-user-can-delete-other-users-personal-access-tokens-at2026-10-29 https://bugbountyreports.com/reports/7934-user-can-link-non-public-file-attachments-leading-to-file2026-10-29 https://bugbountyreports.com/reports/7559-user-can-pay-using-archived-price-by-manipulating-the2026-10-29 https://bugbountyreports.com/reports/1544-user-can-start-call-in-a-channel-of-an-unpaid-account2026-10-29 https://bugbountyreports.com/reports/5874-user-can-subscribe-a-plan-that-is-hidden-by-manipulating2026-10-29 https://bugbountyreports.com/reports/6763-user-can-upload-files-even-after-closing-his-account2026-10-29 https://bugbountyreports.com/reports/4895-user-credentials-leak-and-arbitrary-local-file-read-leak2026-10-29 https://bugbountyreports.com/reports/7084-user-deletion-is-not-handled-properly-everywhere2026-10-29 https://bugbountyreports.com/reports/9096-user-details-can-be-disclosed-even-if-the-account-is-in2026-10-29 https://bugbountyreports.com/reports/4472-user-editable-nextcloud-wiki-pages-of-public-repositories2026-10-29 https://bugbountyreports.com/reports/9813-user-email-disclosure-via-id-based-invitation2026-10-29 https://bugbountyreports.com/reports/878-user-email-enumuration-using-gmail2026-10-29 https://bugbountyreports.com/reports/2615-user-enumeration2026-10-29 https://bugbountyreports.com/reports/2975-user-enumeration2026-10-29 https://bugbountyreports.com/reports/2808-user-enumeration-from-failed-login-error-message2026-10-29 https://bugbountyreports.com/reports/6906-user-enumeration-through-forget-password2026-10-29 https://bugbountyreports.com/reports/1027-user-enumeration-via-error-message2026-10-29 https://bugbountyreports.com/reports/2973-user-enumeration-via-forgot-password-error-message2026-10-29 https://bugbountyreports.com/reports/10202-user-enumeration-via-timing-attack-in-django-mod-wsgi2026-10-29 https://bugbountyreports.com/reports/2295-user-enumeration-when-adding-email-to-account2026-10-29 https://bugbountyreports.com/reports/7668-user-files-is-disclosed-when-someone-called-while-the2026-10-29 https://bugbountyreports.com/reports/175-user-guessing-enumeration-at-https-app-c2fo-com-api2026-10-29 https://bugbountyreports.com/reports/9518-user-impersonation-through-sendmessage-options2026-10-29 https://bugbountyreports.com/reports/6382-user-in-the-same-center-can-create-csrf-to-change-the2026-10-29 https://bugbountyreports.com/reports/8243-user-information-disclosed-via-api2026-10-29 https://bugbountyreports.com/reports/1937-user-information-disclosure-via-rest-api2026-10-29 https://bugbountyreports.com/reports/2169-user-information-disclosure-via-rest-api2026-10-29 https://bugbountyreports.com/reports/1525-user-information-leak-allows-user-to-bypass-email2026-10-29 https://bugbountyreports.com/reports/1526-user-information-sent-to-client-through-websockets2026-10-29 https://bugbountyreports.com/reports/5353-user-input-validation-can-lead-to-dos2026-10-29 https://bugbountyreports.com/reports/9880-user-limit-bypass-via-pending-invitations-in-workspace2026-10-29 https://bugbountyreports.com/reports/3991-user-login-page-doesn-t-implement-any-form-of-rate-limiting2026-10-29 https://bugbountyreports.com/reports/3543-user-object-in-graphql-exposes-number-of-trial-reports-for2026-10-29 https://bugbountyreports.com/reports/3134-user-profiles-leak-pii-in-html-document-for-mobile-browser2026-10-29 https://bugbountyreports.com/reports/5948-user-registration-using-public-domain-email-like-gmail-in2026-10-29 https://bugbountyreports.com/reports/8801-user-scoped-external-storage-can-be-used-to-gather2026-10-29 https://bugbountyreports.com/reports/6138-user-sensitive-information-disclosure2026-10-29 https://bugbountyreports.com/reports/1365-user-supplied-links-on-profile-page-is-not-validated-and2026-10-29 https://bugbountyreports.com/reports/4070-user-uploaded-portfolio-files-can-be-accessed-by-any-user2026-10-29 https://bugbountyreports.com/reports/1870-user-with-guest-access-can-access-private-merge-requests2026-10-29 https://bugbountyreports.com/reports/1215-user-with-limited-access-to-index-configuration-can-rename2026-10-29 https://bugbountyreports.com/reports/7779-user-with-no-develop-apps-permission-can-uninstall-custom2026-10-29 https://bugbountyreports.com/reports/5792-user-with-no-draft-order-permission-can-still-perform2026-10-29 https://bugbountyreports.com/reports/1695-user-with-no-permissions-can-access-full-wdcalendar-feed2026-10-29 https://bugbountyreports.com/reports/1694-user-with-no-permissions-can-create-edit-delete-favorite2026-10-29 https://bugbountyreports.com/reports/1883-user-with-only-viewing-privilege-can-send-message-to-room2026-10-29 https://bugbountyreports.com/reports/3835-user-with-privilege-to-maintain-external-programs-can2026-10-29 https://bugbountyreports.com/reports/5274-user-with-read-only-access-to-a-share-can-gain-write-access2026-10-29 https://bugbountyreports.com/reports/1055-user-with-read-only-permissions-can-edit-the-internal2026-10-29 https://bugbountyreports.com/reports/1056-user-with-read-only-permissions-can-edit-the-swagawarded2026-10-29 https://bugbountyreports.com/reports/1097-user-with-read-only-permissions-can-manually-public2026-10-29 https://bugbountyreports.com/reports/965-user-with-read-only-permissions-can-request-approve-public2026-10-29 https://bugbountyreports.com/reports/5624-user-with-removed-manage-shops-permissions-is-still-able-to2026-10-29 https://bugbountyreports.com/reports/6686-user-with-single-department-permission-can-view-applicant2026-10-29 https://bugbountyreports.com/reports/9075-user-ldap-app-logs-user-passwords-in-the-log-file-on-level2026-10-29 https://bugbountyreports.com/reports/8784-user-oidc-app-is-missing-bruteforce-protection2026-10-29 https://bugbountyreports.com/reports/4510-user-assisted-rce-in-slack-for-macos-from-official-site-due2026-10-29 https://bugbountyreports.com/reports/429-user-s-dm-won-t-deleted-after-logout-from-twitter-for-ios2026-10-29 https://bugbountyreports.com/reports/1157-user-s-legal-name-could-be-changed-despite-front-end2026-10-29 https://bugbountyreports.com/reports/7307-user-s-who-are-banned-from-program-can-still-be-invited-to2026-10-29 https://bugbountyreports.com/reports/5267-username-and-access-token-disclousure2026-10-29 https://bugbountyreports.com/reports/7740-username-and-password-leaked-via-pptx-for-website2026-10-29 https://bugbountyreports.com/reports/10076-username-normalization-missing-allows-visually2026-10-29 https://bugbountyreports.com/reports/10084-username-validation-bypass2026-10-29 https://bugbountyreports.com/reports/5507-username-password-is-disclosure-in-readme-file-in-https2026-10-29 https://bugbountyreports.com/reports/8866-usernames-still-visible-on-report-export-pdf-despite-i-want2026-10-29 https://bugbountyreports.com/reports/4076-users-able-to-set-video-url-for-unpublished-words-and-able2026-10-29 https://bugbountyreports.com/reports/9147-users-can-access-exams-in-course-without-having-to2026-10-29 https://bugbountyreports.com/reports/1822-users-can-bookmark-other-user-s-messages2026-10-29 https://bugbountyreports.com/reports/6276-users-can-bypass-page-restrictions-via-export-feature-at2026-10-29 https://bugbountyreports.com/reports/10234-users-can-change-project-visibility-which-requires-high2026-10-29 https://bugbountyreports.com/reports/1872-users-can-download-old-project-exports-due-to-unclaimed2026-10-29 https://bugbountyreports.com/reports/1628-users-can-falsely-declare-their-own-uber-account-info-on2026-10-29 https://bugbountyreports.com/reports/10108-users-can-modify-tags-on-files-that-do-not-belong-to-them2026-10-29 https://bugbountyreports.com/reports/8714-users-can-set-up-workflows-using-restricted-and-invisible2026-10-29 https://bugbountyreports.com/reports/1514-users-contents-on-aws-is-cacheable2026-10-29 https://bugbountyreports.com/reports/9898-users-data-exposure-via-insecure-endpoint2026-10-29 https://bugbountyreports.com/reports/3396-users-email-can-be-changed-without-verification2026-10-29 https://bugbountyreports.com/reports/8507-users-querying-dim-hacker-reports-table-through-analytics2026-10-29 https://bugbountyreports.com/reports/2620-users-with-2fa-can-have-multiple-sessions2026-10-29 https://bugbountyreports.com/reports/1869-users-with-guest-access-can-post-notes-to-private-merge2026-10-29 https://bugbountyreports.com/reports/2879-users-with-member-privilege-are-able-to-see-emails-and2026-10-29 https://bugbountyreports.com/reports/10664-users-with-read-only-access-to-a-nextcloud-table-can2026-10-29 https://bugbountyreports.com/reports/8239-users-without-permission-can-download-restricted-files2026-10-29 https://bugbountyreports.com/reports/790-uses-unsafe-inline-without-nonce2026-10-29 https://bugbountyreports.com/reports/2983-using-an-outdated-version-of-openssh-on-db01-wakatime-com2026-10-29 https://bugbountyreports.com/reports/9301-using-branded-hashtag-feature-user-partnered-with-account2026-10-29 https://bugbountyreports.com/reports/1135-using-get-method-for-account-login-with-csrf-token-leaking2026-10-29 https://bugbountyreports.com/reports/3236-using-gitlab-to-monitor-and-hijack-domains-in-mass-quantity2026-10-29 https://bugbountyreports.com/reports/4135-using-graphql-staff-with-no-explicit-permissions-on-store2026-10-29 https://bugbountyreports.com/reports/310-using-nmap-revealing-sensitive-information2026-10-29 https://bugbountyreports.com/reports/8451-using-special-ipv4-mapped-ipv6-addresses-to-bypass-local-ip2026-10-29 https://bugbountyreports.com/reports/2765-ux-js-error-on-password-safety-link2026-10-29 https://bugbountyreports.com/reports/2850-ux-js-error-on-password-safety-link2026-10-29 https://bugbountyreports.com/reports/8626-uxss-on-brave-browser-via-scan-qr-code2026-10-29 https://bugbountyreports.com/reports/10326-v1plugin-decrypt-panics-on-empty-ciphertext-remote-dos2026-10-29 https://bugbountyreports.com/reports/10325-v2plugin-decrypt-panics-on-empty-ciphertext-remote-dos2026-10-29 https://bugbountyreports.com/reports/10343-valid-share-tokens-allow-to-access-tempory-upload-files-of2026-10-29 https://bugbountyreports.com/reports/945-validation-bypass-for-active-record-and-active-model2026-10-29 https://bugbountyreports.com/reports/3900-validation-bypass-for-queries-generated-for-postgresql2026-10-29 https://bugbountyreports.com/reports/1862-validation-bypass-on-user-profile2026-10-29 https://bugbountyreports.com/reports/3085-validation-message-in-bounty-award-endpoint-can-be-used-to2026-10-29 https://bugbountyreports.com/reports/157-value-of-jsessionid-and-xsrf-token-parameter-in-cookie2026-10-29 https://bugbountyreports.com/reports/5421-variant-of-cve-2013-0269-denial-of-service-and-unsafe2026-10-29 https://bugbountyreports.com/reports/537-various-low-level-vulnerabilities2026-10-29 https://bugbountyreports.com/reports/2942-venturebeat-com-url-should-be-https2026-10-29 https://bugbountyreports.com/reports/4163-verbose-php-error-messages-exposed-on-a-blog-article2026-10-29 https://bugbountyreports.com/reports/302-verbose-sql-error-messages2026-10-29 https://bugbountyreports.com/reports/738-verification-code-issues-for-two-step-authentication2026-10-29 https://bugbountyreports.com/reports/1635-verification-of-e-mail-address-possible-on-https-biz-yelp2026-10-29 https://bugbountyreports.com/reports/2847-verification-of-email-addresses-possible-through-https-www2026-10-29 https://bugbountyreports.com/reports/8455-verification-process-done-using-different-documents-without2026-10-29 https://bugbountyreports.com/reports/4309-verify-any-unused-email-address2026-10-29 https://bugbountyreports.com/reports/8531-verifying-email-bypass2026-10-29 https://bugbountyreports.com/reports/2006-version-4-7-2-of-wordpress-is-vulnerable2026-10-29 https://bugbountyreports.com/reports/6851-very-long-names-on-demo-openmage-org-could-redirect-victim2026-10-29 https://bugbountyreports.com/reports/4980-video-player-on-allows-arbitrary-remote-videos-to-be-played2026-10-29 https://bugbountyreports.com/reports/6367-vidyard-api-auth-token-exposed2026-10-29 https://bugbountyreports.com/reports/3485-view-add-to-cart-unlisted-items-via-idor2026-10-29 https://bugbountyreports.com/reports/1492-view-all-deleted-comments-and-rating-of-any-app2026-10-29 https://bugbountyreports.com/reports/6310-view-another-user-information-with-idor-vulnerability2026-10-29 https://bugbountyreports.com/reports/2999-view-any-program-s-team-members-through-get-https-hackerone2026-10-29 https://bugbountyreports.com/reports/9287-view-any-user-email-using-the-team-s-audit-log-section2026-10-29 https://bugbountyreports.com/reports/4354-view-hackerone-challenge-scope-before-challenge-begins2026-10-29 https://bugbountyreports.com/reports/1669-view-liked-twits-of-private-account-via-publish-twitter-com2026-10-29 https://bugbountyreports.com/reports/6922-view-only-to-root-privilege-escalation-on-unifi-protect2026-10-29 https://bugbountyreports.com/reports/9488-view-private-repository-nwo-of-deploy-key-via-internal-lfs2026-10-29 https://bugbountyreports.com/reports/9141-view-repo-and-title-of-any-private-check-run2026-10-29 https://bugbountyreports.com/reports/6563-view-the-starred-projects-in-a-private-profile2026-10-29 https://bugbountyreports.com/reports/8499-view-thumbnail-of-any-private-video-friends-or-followers2026-10-29 https://bugbountyreports.com/reports/9152-view-titles-of-private-reports-with-pending-email-invitation2026-10-29 https://bugbountyreports.com/reports/10308-view-only-guests-could-see-deleted-collectives-pages-in-the2026-10-29 https://bugbountyreports.com/reports/10477-view-only-offline-transaction-creation-bypasses-the-long2026-10-29 https://bugbountyreports.com/reports/8252-viewer-is-able-to-leak-the-previous-versions-of-the-file2026-10-29 https://bugbountyreports.com/reports/515-vimeo-vimeo-pro-unautorised-tax-bypass2026-10-29 https://bugbountyreports.com/reports/409-vimeo-search-xss-vulnerability-http-vimeo-com-search2026-10-29 https://bugbountyreports.com/reports/448-vimeo-com-reflected-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/501-vimeo-com-reflected-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/430-vimeo-com-insecure-direct-object-references-reset-password2026-10-29 https://bugbountyreports.com/reports/2453-vine-overwrite-account-associated-with-email-via-android2026-10-29 https://bugbountyreports.com/reports/2593-vine-all-registered-user-private-sensitive-information2026-10-29 https://bugbountyreports.com/reports/2573-violation-of-secure-design-principles-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/4759-viral-direct-message-clickjacking-via-link-truncation2026-10-29 https://bugbountyreports.com/reports/7152-virtual-data-room-hide-download-on-collabora-is-easy-to2026-10-29 https://bugbountyreports.com/reports/1797-vk-com-login-php2026-10-29 https://bugbountyreports.com/reports/5211-vlc-4-0-0-stack-buffer-overflow-seh2026-10-29 https://bugbountyreports.com/reports/9811-vscode-launch-json-file-exposed-on-hemi-xyz2026-10-29 https://bugbountyreports.com/reports/6359-vulnerability-in-www-yoti-com-leads-to-leakage-of-admin2026-10-29 https://bugbountyreports.com/reports/5351-vulnerability-in-goldsource-engine-allows-to-upload-and-run2026-10-29 https://bugbountyreports.com/reports/5224-vulnerability-in-http-parser-embedded-null-header-handling2026-10-29 https://bugbountyreports.com/reports/3645-vulnerability-in-project-import-leads-to-arbitrary-command2026-10-29 https://bugbountyreports.com/reports/4476-vulnerability-name-host-header-injection-redirect2026-10-29 https://bugbountyreports.com/reports/3883-vulnerability-report-missing-certificate-authority2026-10-29 https://bugbountyreports.com/reports/9199-vulnerability-report-no-rate-limit-password-reset2026-10-29 https://bugbountyreports.com/reports/502-vulnerability-type-xss-uncovered-in-airbnb-es2026-10-29 https://bugbountyreports.com/reports/413-vulnerability-with-the-way-escaped-characters-in-style2026-10-29 https://bugbountyreports.com/reports/3037-vulnerable-exported-broadcast-receiver2026-10-29 https://bugbountyreports.com/reports/8478-vulnerable-moment-timezone-version-shipped2026-10-29 https://bugbountyreports.com/reports/3788-vulnerable-to-cross-site-request-forgery-jira2026-10-29 https://bugbountyreports.com/reports/786-vulnerable-to-javascript-injection-wxs-javascript-injection2026-10-29 https://bugbountyreports.com/reports/4394-w3-total-cache-plugin-multiple-vulnerabilities2026-10-29 https://bugbountyreports.com/reports/5154-waf-bypass-via-double-encoded-non-standard-ascii-chars2026-10-29 https://bugbountyreports.com/reports/7886-waitlist-bypass-for-accessing-sign-plus-beta2026-10-29 https://bugbountyreports.com/reports/10470-wallet-rpc-restricted-mode-policy-bypass2026-10-29 https://bugbountyreports.com/reports/10460-wallet-rpc-crash-via-malformed-gettransactions-response2026-10-29 https://bugbountyreports.com/reports/10458-wallet-rpc-describe-transfer-uses-real-output-in-tx-index2026-10-29 https://bugbountyreports.com/reports/2244-wannacrypt-killswitch2026-10-29 https://bugbountyreports.com/reports/5620-warehouse-dom-based-xss-may-lead-to-social-club-account2026-10-29 https://bugbountyreports.com/reports/9911-wasi-sandbox-escape-via-symlink2026-10-29 https://bugbountyreports.com/reports/2930-watch-any-password-video-without-password2026-10-29 https://bugbountyreports.com/reports/8454-wavecell-com-broken-link-hijacking-instagram-takeover2026-10-29 https://bugbountyreports.com/reports/4757-wddx-deserialize-allows-illegal-memory-access2026-10-29 https://bugbountyreports.com/reports/4756-wddx-deserialize-null-dereference2026-10-29 https://bugbountyreports.com/reports/4687-wddx-deserialize-null-dereference-in-php-wddx-pop-element2026-10-29 https://bugbountyreports.com/reports/4689-wddx-deserialize-null-dereference-with-invalid-xml2026-10-29 https://bugbountyreports.com/reports/4763-wddx-deserialize-use-after-free2026-10-29 https://bugbountyreports.com/reports/52-weak-ciphers-enabled2026-10-29 https://bugbountyreports.com/reports/9783-weak-credentials-found-in-jenkins-endpoint2026-10-29 https://bugbountyreports.com/reports/667-weak-cryptographic-hash2026-10-29 https://bugbountyreports.com/reports/2300-weak-e-mail-change-functionality-could-lead-to-account2026-10-29 https://bugbountyreports.com/reports/9166-weak-email-verification-newly-registered-users-can-bypass2026-10-29 https://bugbountyreports.com/reports/2668-weak-forgot-password-implementation2026-10-29 https://bugbountyreports.com/reports/735-weak-hsts-age-in-support-hackerone-site2026-10-29 https://bugbountyreports.com/reports/6119-weak-password-poilicy-in-signup-password-leak-to-account2026-10-29 https://bugbountyreports.com/reports/2729-weak-password-policy2026-10-29 https://bugbountyreports.com/reports/1005-weak-password-policy2026-10-29 https://bugbountyreports.com/reports/6916-weak-password-policy-leading-to-exposure-of-administrator2026-10-29 https://bugbountyreports.com/reports/3019-weak-password-policy-on-signup2026-10-29 https://bugbountyreports.com/reports/2365-weak-password-policy-on-techsupport-teradici-com2026-10-29 https://bugbountyreports.com/reports/9650-weak-password-policy-via-directadmin-password-change2026-10-29 https://bugbountyreports.com/reports/2364-weak-password-requirement-on-techsupport-teradici-com2026-10-29 https://bugbountyreports.com/reports/8077-weak-protection-against-brute-forcing-on-login-api-leads-to2026-10-29 https://bugbountyreports.com/reports/357-weak-random-number-generator-for-auth-tokens2026-10-29 https://bugbountyreports.com/reports/358-weak-random-number-generator-used-in-concrete2026-10-29 https://bugbountyreports.com/reports/8260-weak-randomness-in-webcrypto-keygen2026-10-29 https://bugbountyreports.com/reports/7503-weak-rate-limit-could-lead-to-ato-due-to-weak-password2026-10-29 https://bugbountyreports.com/reports/7932-weak-rate-limit-for-sign-plus-email-verification2026-10-29 https://bugbountyreports.com/reports/9353-weak-ssh-algorithms-and-cve-2023-48795-discovered-on2026-10-29 https://bugbountyreports.com/reports/729-weak-ssl-cipher-suites2026-10-29 https://bugbountyreports.com/reports/8091-weak-auto-fill-password2026-10-29 https://bugbountyreports.com/reports/9102-web-api-key-registration-allows-registering-multiple-keys2026-10-29 https://bugbountyreports.com/reports/1295-web-authentication-endpoint-credentials-brute-force2026-10-29 https://bugbountyreports.com/reports/3899-web-cache-deception-attack-xss2026-10-29 https://bugbountyreports.com/reports/4105-web-cache-deception-attack-xss2026-10-29 https://bugbountyreports.com/reports/8644-web-cache-deception-vulnerability-on-algolia-com-leads-to2026-10-29 https://bugbountyreports.com/reports/7001-web-cache-poisoning-at-www-acronis-com2026-10-29 https://bugbountyreports.com/reports/7691-web-cache-poisoning-attack-leads-to-user-information2026-10-29 https://bugbountyreports.com/reports/7419-web-cache-poisoning-leading-to-dos2026-10-29 https://bugbountyreports.com/reports/4369-web-cache-poisoning-leads-to-disclosure-of-csrf-token-and2026-10-29 https://bugbountyreports.com/reports/6963-web-cache-poisoning-on2026-10-29 https://bugbountyreports.com/reports/4489-web-protection-component-in-anti-virus-products-family2026-10-29 https://bugbountyreports.com/reports/4968-web-protection-component-in-anti-virus-products-family-uses2026-10-29 https://bugbountyreports.com/reports/873-web-server-information-disclosure2026-10-29 https://bugbountyreports.com/reports/2184-web-server-is-vulnerable-to-beast-attack2026-10-29 https://bugbountyreports.com/reports/6919-web-server-predictable-session-id-on-edgeswitch2026-10-29 https://bugbountyreports.com/reports/2131-web-xml-configuration-file-disclosure2026-10-29 https://bugbountyreports.com/reports/10203-webauthn-app-was-updated-based-on-public-key2026-10-29 https://bugbountyreports.com/reports/7153-webauthn-tokens-are-not-removed-on-user-deletion2026-10-29 https://bugbountyreports.com/reports/5284-webdav-empty-property-search-leads-to-full-cpu-usage2026-10-29 https://bugbountyreports.com/reports/2529-webhook-allows-sending-payload-using-insecure-http-protocol2026-10-29 https://bugbountyreports.com/reports/2541-weblate-security-misconfiguration-method-enumeration2026-10-29 https://bugbountyreports.com/reports/2408-weblate-banner-grabbing-ngnix-server-version2026-10-29 https://bugbountyreports.com/reports/2283-weblate-org-x-xss-protection-not-enabled2026-10-29 https://bugbountyreports.com/reports/5001-weblogic-server-side-request-forgery2026-10-29 https://bugbountyreports.com/reports/4950-webrick-httpauth-digestauth-authentication-is-vulnerable-to2026-10-29 https://bugbountyreports.com/reports/4945-webshell-via-file-upload-on-ecjobs-starbucks-com-cn2026-10-29 https://bugbountyreports.com/reports/8617-website-php-source-code-returned-in-javascript2026-10-29 https://bugbountyreports.com/reports/6795-website-vulnerable-to-poodle-sslv3-with-expired-certificate2026-10-29 https://bugbountyreports.com/reports/6342-websites-can-run-arbitrary-code-on-machines-running-the2026-10-29 https://bugbountyreports.com/reports/1100-websites-opened-from-reports-can-change-url-of-report-page2026-10-29 https://bugbountyreports.com/reports/1969-websites-opened-from-reports-can-change-url-of-report-page2026-10-29 https://bugbountyreports.com/reports/1584-websummit-open-redirect2026-10-29 https://bugbountyreports.com/reports/7288-webview-address-bar-spoofing-in-line-client-for-ios2026-10-29 https://bugbountyreports.com/reports/7053-webview-in-line-client-for-ios-will-render-application2026-10-29 https://bugbountyreports.com/reports/761-webview-vulnerablity-owncloudandroid-application2026-10-29 https://bugbountyreports.com/reports/5461-week-passwords-generated-by-password-reset-function2026-10-29 https://bugbountyreports.com/reports/105-weird-bug-ability-to-see-partial-of-other-user-s2026-10-29 https://bugbountyreports.com/reports/9498-wg-call-injection-in-economy-contextcommand2026-10-29 https://bugbountyreports.com/reports/7634-when-sharing-a-deck-card-in-conversation-the-metadata-can2026-10-29 https://bugbountyreports.com/reports/7135-when-uploading-attachments-unencrypted-file-names-are-made2026-10-29 https://bugbountyreports.com/reports/7201-when-you-call-your-branch-the-same-name-as-a-git-hash-it2026-10-29 https://bugbountyreports.com/reports/6484-wholesome-hacky-holidays-a-writeup2026-10-29 https://bugbountyreports.com/reports/7616-widespread-csrf-on-authenticated-post-endpoints2026-10-29 https://bugbountyreports.com/reports/4930-widespread-failure-of-certificate-validation-in-android-apps2026-10-29 https://bugbountyreports.com/reports/191-wildcard-dns-in-website2026-10-29 https://bugbountyreports.com/reports/362-window-opener-property-bug2026-10-29 https://bugbountyreports.com/reports/1710-window-opener-bug-at-www-coinbase-com2026-10-29 https://bugbountyreports.com/reports/3231-window-opener-fix-bypass2026-10-29 https://bugbountyreports.com/reports/1449-window-opener-is-leaking-to-external-domains-upon-redirect2026-10-29 https://bugbountyreports.com/reports/3230-window-opener-protection-bypass2026-10-29 https://bugbountyreports.com/reports/4528-windows-builds-with-insecure-path-defaults-cve-2019-15522026-10-29 https://bugbountyreports.com/reports/9979-windows-device-names-con-prn-aux-bypass-path-traversal2026-10-29 https://bugbountyreports.com/reports/10475-windows-installer-grants-low-privileged-users-write-access2026-10-29 https://bugbountyreports.com/reports/6098-windows-only-arbitrary-file-read-vulnerability-in-openssl-s2026-10-29 https://bugbountyreports.com/reports/8008-without-verifying-email-and-activate-account-user-can2026-10-29 https://bugbountyreports.com/reports/2841-woocommerce-prevent-caching-bug-bypass2026-10-29 https://bugbountyreports.com/reports/5090-woocommerce-blacklist-in-map-meta-cap-leads-to-privilege2026-10-29 https://bugbountyreports.com/reports/9956-woocommerce-sql-injection-in-wc-report-coupon-usage2026-10-29 https://bugbountyreports.com/reports/4258-woocommerce-persistent-xss-via-customer-address-state-county2026-10-29 https://bugbountyreports.com/reports/1504-woocommerce-support-ticket-indirect-object-reference2026-10-29 https://bugbountyreports.com/reports/2885-wordpress-4-8-2-vulnerable-to-multiple-attacks2026-10-29 https://bugbountyreports.com/reports/1848-wordpress-4-6-1-stored-xss-via-theme-file2026-10-29 https://bugbountyreports.com/reports/3065-wordpress-4-7-csrf-http-ssrf-any-private-ip-port-and-basic2026-10-29 https://bugbountyreports.com/reports/1876-wordpress-4-7-12026-10-29 https://bugbountyreports.com/reports/2614-wordpress-4-7-2-two-xss-in-media-upload-when-file-too-large2026-10-29 https://bugbountyreports.com/reports/10630-wordpress-7-1-media-processing-race-enables-persistent-php2026-10-29 https://bugbountyreports.com/reports/8638-wordpress-application-vulnerable-to-dos-attack-via-wp-cron2026-10-29 https://bugbountyreports.com/reports/2356-wordpress-authentication-denial-of-service2026-10-29 https://bugbountyreports.com/reports/3054-wordpress-core-denial-of-service-via-cross-site-request2026-10-29 https://bugbountyreports.com/reports/1407-wordpress-core-stored-xss-via-attachment-file-name2026-10-29 https://bugbountyreports.com/reports/3046-wordpress-db-class-bad-implementation-of-prepare-method2026-10-29 https://bugbountyreports.com/reports/2008-wordpress-directories-files-visible-to-internet2026-10-29 https://bugbountyreports.com/reports/1043-wordpress-failure-notice-page-will-generate-arbitrary2026-10-29 https://bugbountyreports.com/reports/1326-wordpress-flash-xss-in-flashmediaelement-swf2026-10-29 https://bugbountyreports.com/reports/1836-wordpress-flashmediaelement-swf-xss-on-stopthehacker-com2026-10-29 https://bugbountyreports.com/reports/1249-wordpress-pingback-ddos-attacks-in-domain-veris-in2026-10-29 https://bugbountyreports.com/reports/1325-wordpress-some-bug-in-plupload-flash-swf-leading-to-rce2026-10-29 https://bugbountyreports.com/reports/8443-wordpress-takeover-using-setup-configuration-at-http-edu2026-10-29 https://bugbountyreports.com/reports/5156-wordpress-unzip-file-path-traversal2026-10-29 https://bugbountyreports.com/reports/8057-wordpress-users-disclosure-wp-json-wp-v2-users2026-10-29 https://bugbountyreports.com/reports/8326-wordpress-users-disclosure-wp-json-wp-v2-users2026-10-29 https://bugbountyreports.com/reports/8398-wordpress-users-disclosure-wp-json-wp-v2-users-not-resolved2026-10-29 https://bugbountyreports.com/reports/8090-wordpress-users-disclosure-from-json-and-xml-file2026-10-29 https://bugbountyreports.com/reports/9948-wordpress-version-exposure-via-on-hemi-xyz2026-10-29 https://bugbountyreports.com/reports/4260-wordpress-vip-leaks-email-of-the-test-a-c2026-10-29 https://bugbountyreports.com/reports/1452-wordpress-vulnerabilities-in-transparencyreport-uber-com2026-10-29 https://bugbountyreports.com/reports/5275-wordpress-vulnerable-to-multiple-attacks-at-https-nextcloud2026-10-29 https://bugbountyreports.com/reports/2699-wordpress-vulnerable-to-potential-unauthorized-password2026-10-29 https://bugbountyreports.com/reports/1458-wordpress-directory-traversal-denial-of-serivce2026-10-29 https://bugbountyreports.com/reports/3395-wordpress-com-rest-api-oauth-bypass-via-cross-site-flashing2026-10-29 https://bugbountyreports.com/reports/4716-worker-container-escape-lead-to-arbitrary-file-reading-in2026-10-29 https://bugbountyreports.com/reports/4730-worker-container-escape-lead-to-arbitrary-file-reading-in2026-10-29 https://bugbountyreports.com/reports/9761-worker-permission-bypass-via-internalworker-leak-in2026-10-29 https://bugbountyreports.com/reports/7721-workspace-configuration-metadata-disclosure2026-10-29 https://bugbountyreports.com/reports/8808-wp-embed-xss-on-safari2026-10-29 https://bugbountyreports.com/reports/3263-wpjobmanager-unserialize-of-user-input2026-10-29 https://bugbountyreports.com/reports/1971-writable-rubyci-amazon-s3-bucket2026-10-29 https://bugbountyreports.com/reports/1912-write-out-of-bounds-at-number-format2026-10-29 https://bugbountyreports.com/reports/6483-writeup-hackyholiday-ctf2026-10-29 https://bugbountyreports.com/reports/6458-writeup-submission2026-10-29 https://bugbountyreports.com/reports/4916-wrong-handling-of-content-type-allows-flash-injection-and2026-10-29 https://bugbountyreports.com/reports/4447-wrong-interpretation-of-url-encoded-characters-showing2026-10-29 https://bugbountyreports.com/reports/2904-wrong-password-validation-message2026-10-29 https://bugbountyreports.com/reports/7560-wrong-settings-in-adf-faces-leads-to-information-disclosure2026-10-29 https://bugbountyreports.com/reports/6877-wrong-url-in-hackerone-goes-to-wix-com-unconnected2026-10-29 https://bugbountyreports.com/reports/6895-wrong-url-in-main-page2026-10-29 https://bugbountyreports.com/reports/3057-www-drivegrab-com-sql-injection2026-10-29 https://bugbountyreports.com/reports/2339-www-hackerone-com-website-csp-script-src-includes-unsafe2026-10-29 https://bugbountyreports.com/reports/785-www-shopify-com-xss-on-blog-pages-via-sharing-buttons2026-10-29 https://bugbountyreports.com/reports/924-www-shopify-com-xss-via-third-party-script2026-10-29 https://bugbountyreports.com/reports/1789-www-starbucks-co-uk-reflected-xss-via-utm-source-parameter2026-10-29 https://bugbountyreports.com/reports/1101-www-veris-in-dom-based-xss2026-10-29 https://bugbountyreports.com/reports/172-x-content-type-options-header-missing2026-10-29 https://bugbountyreports.com/reports/179-x-content-type-options-header-missing2026-10-29 https://bugbountyreports.com/reports/246-x-content-type-options-header-missing2026-10-29 https://bugbountyreports.com/reports/1438-x-content-type-options-header-missing-at-auth-login2026-10-29 https://bugbountyreports.com/reports/9725-x-e2ee-signature-verification-can-be-bypassed-leading-to2026-10-29 https://bugbountyreports.com/reports/6151-x-forward-for-header-allows-to-bypass-access-restrictions2026-10-29 https://bugbountyreports.com/reports/169-x-frame-options-sameorigin-warning2026-10-29 https://bugbountyreports.com/reports/3122-x-xss-protection-misconfiguration2026-10-29 https://bugbountyreports.com/reports/1899-x-509-certificate-validation-fails-on-international-vanity2026-10-29 https://bugbountyreports.com/reports/190-x-csrf-token-problem2026-10-29 https://bugbountyreports.com/reports/465-x509-to-x509-req-null-pointer-deref2026-10-29 https://bugbountyreports.com/reports/10128-xml-e-ternal-entity-xxe-injection-in2026-10-29 https://bugbountyreports.com/reports/9474-xml-external-entity-xxe-injection2026-10-29 https://bugbountyreports.com/reports/3848-xml-hash-collision-dos-vulnerability-in-python-s-xml-etree2026-10-29 https://bugbountyreports.com/reports/6988-xml-injection-external-service-interaction-http-dns-on2026-10-29 https://bugbountyreports.com/reports/6786-xml-injection-on-https-www-parameter2026-10-29 https://bugbountyreports.com/reports/3474-xml-member-proccessing-local-file-inclusion-vulnerability2026-10-29 https://bugbountyreports.com/reports/1259-xml-parser-bug-xxe-over-which-leads-to-rce2026-10-29 https://bugbountyreports.com/reports/4674-xml-parse-into-struct-segmentation-fault2026-10-29 https://bugbountyreports.com/reports/10401-xml-rpc-login-leak-exposes-valid-session-id-enabling2026-10-29 https://bugbountyreports.com/reports/6982-xmlrpc-enabling-xpsa-and-bruteforce-and-dos-a-file2026-10-29 https://bugbountyreports.com/reports/9206-xmlrpc-php-wp-cron-php-files-are-enabled-and-will-used-for2026-10-29 https://bugbountyreports.com/reports/5606-xmlrpc-php-file-enabled2026-10-29 https://bugbountyreports.com/reports/8579-xmlrpc-php-file-enabled-at-org2026-10-29 https://bugbountyreports.com/reports/3976-xmlrpc-php-file-is-enable-it-will-used-for-dos-and2026-10-29 https://bugbountyreports.com/reports/8051-xmlrpc-php-file-is-enable-it-will-used-for-bruteforce2026-10-29 https://bugbountyreports.com/reports/5726-xmlrpc-php-file-is-enable-which-enables-attacker-to-xspa2026-10-29 https://bugbountyreports.com/reports/6604-xmlrpc-php-file-is-enabled-it-will-used-for-bruteforce2026-10-29 https://bugbountyreports.com/reports/5273-xmlrpc-php-is-enabled-nextcloud2026-10-29 https://bugbountyreports.com/reports/3789-xmlrpc-php-on-mariadb-org-can-lead-to-ddos-and-brute-force2026-10-29 https://bugbountyreports.com/reports/5348-xsrf-token-is-not-being-validated-when-sending-emails-test2026-10-29 https://bugbountyreports.com/reports/113-xsrf-token-problem2026-10-29 https://bugbountyreports.com/reports/274-xss2026-10-29 https://bugbountyreports.com/reports/2321-xss2026-10-29 https://bugbountyreports.com/reports/9283-xss2026-10-29 https://bugbountyreports.com/reports/684-xss-gallery-search-listing2026-10-29 https://bugbountyreports.com/reports/3595-xss-reflected2026-10-29 https://bugbountyreports.com/reports/5599-xss-cross-site-scripting-on-http-axa-dxi-eu2026-10-29 https://bugbountyreports.com/reports/5602-xss-cross-site-scripting-on-https-apimgr-8x8-com2026-10-29 https://bugbountyreports.com/reports/5109-xss-leads-to-arbitrary-file-read-in-rocket-chat-desktop2026-10-29 https://bugbountyreports.com/reports/3578-xss-persistent-selecting-role-s-for-protected-branches2026-10-29 https://bugbountyreports.com/reports/3748-xss-stored-wizard-is-saving-executable-code2026-10-29 https://bugbountyreports.com/reports/3863-xss-flow-on-www-paypal-com-paypalme-my-landing-requires2026-10-29 https://bugbountyreports.com/reports/1161-xss-love-uber-com2026-10-29 https://bugbountyreports.com/reports/4000-xss-store-steampowered-com-via-agecheck-path-name2026-10-29 https://bugbountyreports.com/reports/3335-xss-myshopify-com-collections-vendors-q2026-10-29 https://bugbountyreports.com/reports/6027-xss-self-xss2026-10-29 https://bugbountyreports.com/reports/78-xss-html-injection2026-10-29 https://bugbountyreports.com/reports/224-xss-01-on-staging-fct-li2026-10-29 https://bugbountyreports.com/reports/256-xss-12026-10-29 https://bugbountyreports.com/reports/4213-xss-and-cache-poisoning-via-upload-twitter-com-on-ton2026-10-29 https://bugbountyreports.com/reports/1197-xss-and-csrf-in-zomato-contact-form2026-10-29 https://bugbountyreports.com/reports/8503-xss-and-html-injection-on-https-labs-history-state-gov2026-10-29 https://bugbountyreports.com/reports/8068-xss-and-html-injection-on-the-pressable-com-search-box2026-10-29 https://bugbountyreports.com/reports/7861-xss-and-iframe-injection-on-tiktok-ads-portal-using2026-10-29 https://bugbountyreports.com/reports/4531-xss-and-open-redirect-on-mopub-login2026-10-29 https://bugbountyreports.com/reports/612-xss-at-bulk-editing-products2026-10-29 https://bugbountyreports.com/reports/618-xss-at-bulk-editing-productvariants2026-10-29 https://bugbountyreports.com/reports/7816-xss-at-http-nextapps-mtnonline-com-search-suggest-q-xss2026-10-29 https://bugbountyreports.com/reports/51-xss-at-http-smarthistory-khanacademy-org2026-10-29 https://bugbountyreports.com/reports/795-xss-at-http-vk-com-on-ie-using-flash-files2026-10-29 https://bugbountyreports.com/reports/3234-xss-at-https-app-goodhire-com-member-gh-aspx2026-10-29 https://bugbountyreports.com/reports/6810-xss-at-https-exchangemarketplace-com-blogsearch2026-10-29 https://bugbountyreports.com/reports/611-xss-at-importing-product-list2026-10-29 https://bugbountyreports.com/reports/2371-xss-at-in-instacart-com-store-partner-recipe2026-10-29 https://bugbountyreports.com/reports/8468-xss-at-jamfpro-shopifycloud-com2026-10-29 https://bugbountyreports.com/reports/7523-xss-at-shopify-email-app2026-10-29 https://bugbountyreports.com/reports/8456-xss-at-tiktok-ads-endpoint2026-10-29 https://bugbountyreports.com/reports/7815-xss-at-videostore-mtnonline-com-gl-aspx-via-all-parameters2026-10-29 https://bugbountyreports.com/reports/960-xss-at-wordpress-com2026-10-29 https://bugbountyreports.com/reports/964-xss-at-www-woothemes-com2026-10-29 https://bugbountyreports.com/reports/7676-xss-because-of-akamai-arl-misconfiguration-on2026-10-29 https://bugbountyreports.com/reports/7905-xss-by-clicking-jira-s-link2026-10-29 https://bugbountyreports.com/reports/5987-xss-by-file-active-storage-proxying2026-10-29 https://bugbountyreports.com/reports/859-xss-by-image-file-name2026-10-29 https://bugbountyreports.com/reports/6984-xss-by-mathml-at-active-storage2026-10-29 https://bugbountyreports.com/reports/6230-xss-di-biodata2026-10-29 https://bugbountyreports.com/reports/7120-xss-due-to-cve-2020-35802026-10-29 https://bugbountyreports.com/reports/7121-xss-due-to-cve-2020-35802026-10-29 https://bugbountyreports.com/reports/8110-xss-due-to-cve-2020-35802026-10-29 https://bugbountyreports.com/reports/7197-xss-due-to-cve-2020-3580-mil2026-10-29 https://bugbountyreports.com/reports/7275-xss-due-to-cve-2020-35802026-10-29 https://bugbountyreports.com/reports/7274-xss-due-to-cve-2020-35802026-10-29 https://bugbountyreports.com/reports/8134-xss-due-to-cve-2022-38463-in-https2026-10-29 https://bugbountyreports.com/reports/5519-xss-due-to-incomplete-js-escaping2026-10-29 https://bugbountyreports.com/reports/8386-xss-due-to-incorrect-handling-of-postmessages2026-10-29 https://bugbountyreports.com/reports/2979-xss-during-presentation2026-10-29 https://bugbountyreports.com/reports/2897-xss-filter-bypass-polldaddy2026-10-29 https://bugbountyreports.com/reports/1957-xss-for-admin-of-https-newsletter-nextcloud-com2026-10-29 https://bugbountyreports.com/reports/9581-xss-found-for-https2026-10-29 https://bugbountyreports.com/reports/9766-xss-found-in-https-www-mil2026-10-29 https://bugbountyreports.com/reports/2531-xss-found-in-zomato2026-10-29 https://bugbountyreports.com/reports/3486-xss-found-on-snapchat-website2026-10-29 https://bugbountyreports.com/reports/9006-xss-from-mastodon-embeds2026-10-29 https://bugbountyreports.com/reports/694-xss-https-delivery-shopifyapps-com-digital-downloads-app-in2026-10-29 https://bugbountyreports.com/reports/702-xss-https-www-shopify-com-signup2026-10-29 https://bugbountyreports.com/reports/3435-xss-in-explore-keywords-dropdown-results2026-10-29 https://bugbountyreports.com/reports/7031-xss-in-support-requests-user-cases2026-10-29 https://bugbountyreports.com/reports/401-xss-in-browse-contacts2026-10-29 https://bugbountyreports.com/reports/5145-xss-in-users-id-set-tier-endpoint2026-10-29 https://bugbountyreports.com/reports/2335-xss-in-shop-myshopify-com-admin-via-button-objects-in2026-10-29 https://bugbountyreports.com/reports/2387-xss-in-shop-myshopify-com-admin-via-twine-template2026-10-29 https://bugbountyreports.com/reports/368-xss-in-3rd-party-plugin-not-affecting-uzbey-s-users2026-10-29 https://bugbountyreports.com/reports/8343-xss-in-acronis-cloud-manager-admin-portal2026-10-29 https://bugbountyreports.com/reports/3151-xss-in-api-v12026-10-29 https://bugbountyreports.com/reports/234-xss-in-app-simplenote-com2026-10-29 https://bugbountyreports.com/reports/1077-xss-in-archive-uber-com-due-to-mime-sniffing-in-ie2026-10-29 https://bugbountyreports.com/reports/9340-xss-in-aspera-documentation-website2026-10-29 https://bugbountyreports.com/reports/1177-xss-in-asset-name2026-10-29 https://bugbountyreports.com/reports/4215-xss-in-bootbox2026-10-29 https://bugbountyreports.com/reports/3680-xss-in-buying-and-selling-pages-can-created-spoofed-content2026-10-29 https://bugbountyreports.com/reports/146-xss-in-camptix-event-ticketing2026-10-29 https://bugbountyreports.com/reports/9070-xss-in-cisco-endpoint2026-10-29 https://bugbountyreports.com/reports/855-xss-in-creating-tweets2026-10-29 https://bugbountyreports.com/reports/8318-xss-in-desktop-client-in-call-notification-popup2026-10-29 https://bugbountyreports.com/reports/8316-xss-in-desktop-client-in-the-notifications2026-10-29 https://bugbountyreports.com/reports/5902-xss-in-desktop-client-via-invalid-server-address-on-login2026-10-29 https://bugbountyreports.com/reports/8317-xss-in-desktop-client-via-user-status-and-information2026-10-29 https://bugbountyreports.com/reports/1102-xss-in-dm-group-name-in-twitter2026-10-29 https://bugbountyreports.com/reports/1387-xss-in-draft-orders-in-timeline-i-shopify-admin-site2026-10-29 https://bugbountyreports.com/reports/298-xss-in-editor-by-any-user2026-10-29 https://bugbountyreports.com/reports/6400-xss-in-email-input-intensedebate-com2026-10-29 https://bugbountyreports.com/reports/567-xss-in-experts-shopify-com2026-10-29 https://bugbountyreports.com/reports/392-xss-in-fabric-io2026-10-29 https://bugbountyreports.com/reports/2484-xss-in-flashmediaelement-swf-business-blog-zomato-com2026-10-29 https://bugbountyreports.com/reports/1073-xss-in-getrush-uber-com2026-10-29 https://bugbountyreports.com/reports/4203-xss-in-gist-integration2026-10-29 https://bugbountyreports.com/reports/1477-xss-in-gm2026-10-29 https://bugbountyreports.com/reports/9289-xss-in-gocd-analytics-plugin2026-10-29 https://bugbountyreports.com/reports/1324-xss-in-group2026-10-29 https://bugbountyreports.com/reports/77-xss-in-groups2026-10-29 https://bugbountyreports.com/reports/3924-xss-in-http-localhost-8153-go-admin-config-server-update2026-10-29 https://bugbountyreports.com/reports/2610-xss-in-http-www-rockstargames-com-theballadofgaytony-js2026-10-29 https://bugbountyreports.com/reports/5565-xss-in-https-affiliates-kromtech-com2026-10-29 https://bugbountyreports.com/reports/616-xss-in-https-app-mavenlink-com-workspaces2026-10-29 https://bugbountyreports.com/reports/6246-xss-in-https-docs-gocd-org-current2026-10-29 https://bugbountyreports.com/reports/5563-xss-in-https-mackeeper-com2026-10-29 https://bugbountyreports.com/reports/4453-xss-in-https-merchant-kartpay-com-settlements2026-10-29 https://bugbountyreports.com/reports/9556-xss-in-https-promo-acronis-com2026-10-29 https://bugbountyreports.com/reports/1534-xss-in-https-www-coursera-org-courses2026-10-29 https://bugbountyreports.com/reports/1368-xss-in-https-www-uber-com2026-10-29 https://bugbountyreports.com/reports/9458-xss-in-ibm-infocenter2026-10-29 https://bugbountyreports.com/reports/1718-xss-in-ie11-on-portswigger-net-via-flash2026-10-29 https://bugbountyreports.com/reports/5866-xss-in-image-metadata-field2026-10-29 https://bugbountyreports.com/reports/906-xss-in-imgur-mobile2026-10-29 https://bugbountyreports.com/reports/913-xss-in-imgur-mobile-32026-10-29 https://bugbountyreports.com/reports/2241-xss-in-instacart-com-store-partner-recipe2026-10-29 https://bugbountyreports.com/reports/79-xss-in-invite-approval2026-10-29 https://bugbountyreports.com/reports/1150-xss-in-l-mapbox-sharecontrol-in-mapbox-js2026-10-29 https://bugbountyreports.com/reports/1315-xss-in-link-items-mopub-com2026-10-29 https://bugbountyreports.com/reports/8349-xss-in-linktr-ee-on-link-thumbnail-adding2026-10-29 https://bugbountyreports.com/reports/82-xss-in-localize-io2026-10-29 https://bugbountyreports.com/reports/1591-xss-in-m-ok-ru2026-10-29 https://bugbountyreports.com/reports/81-xss-in-main-page2026-10-29 https://bugbountyreports.com/reports/80-xss-in-main-page-invitation2026-10-29 https://bugbountyreports.com/reports/3679-xss-in-main-search-use-class-tag-to-imitate-reverb-com-core2026-10-29 https://bugbountyreports.com/reports/71-xss-in-member-list-because-of-city-textbox2026-10-29 https://bugbountyreports.com/reports/6521-xss-in-message-attachment-fileds2026-10-29 https://bugbountyreports.com/reports/2632-xss-in-my-shopify-com-in-widget2026-10-29 https://bugbountyreports.com/reports/665-xss-in-myshopify-admin-site-in-discounts2026-10-29 https://bugbountyreports.com/reports/595-xss-in-myshopify-com-admin-site-in-tax-overrides2026-10-29 https://bugbountyreports.com/reports/9271-xss-in-new-loading-page-html2026-10-29 https://bugbountyreports.com/reports/450-xss-in-original-referrer-after-follow2026-10-29 https://bugbountyreports.com/reports/152-xss-in-password2026-10-29 https://bugbountyreports.com/reports/5556-xss-in-pdf-viewer2026-10-29 https://bugbountyreports.com/reports/158-xss-in-private-message2026-10-29 https://bugbountyreports.com/reports/6839-xss-in-request-approvals2026-10-29 https://bugbountyreports.com/reports/671-xss-in-search-communities-function2026-10-29 https://bugbountyreports.com/reports/5436-xss-in-select-attribute-options2026-10-29 https://bugbountyreports.com/reports/8710-xss-in-servicenow-logout-https-4432026-10-29 https://bugbountyreports.com/reports/1555-xss-in-shopify-unsanitized-supplier-name-can-lead-to-xss-in2026-10-29 https://bugbountyreports.com/reports/297-xss-in-simperium-com2026-10-29 https://bugbountyreports.com/reports/8269-xss-in-socialicon-link2026-10-29 https://bugbountyreports.com/reports/3996-xss-in-steam-react-chat-client2026-10-29 https://bugbountyreports.com/reports/259-xss-in-stopthehacker-support2026-10-29 https://bugbountyreports.com/reports/9195-xss-in-subdomain-of-duckduckgo2026-10-29 https://bugbountyreports.com/reports/1535-xss-in-subtitles-of-vimeo-flash-player-and-hubnut2026-10-29 https://bugbountyreports.com/reports/226-xss-in-team-only-area2026-10-29 https://bugbountyreports.com/reports/1421-xss-in-the-poll-feature-on-twitter-com2026-10-29 https://bugbountyreports.com/reports/1018-xss-in-the-all-widgets-of-shopifyapps-com2026-10-29 https://bugbountyreports.com/reports/247-xss-in-the-input2026-10-29 https://bugbountyreports.com/reports/2322-xss-in-the-search-bar-of-mercantile-wordpress-org2026-10-29 https://bugbountyreports.com/reports/311-xss-in-theme-preview-tools-file2026-10-29 https://bugbountyreports.com/reports/1864-xss-in-topics-because-of-bandcamp-preview-engine2026-10-29 https://bugbountyreports.com/reports/494-xss-in-twitter-com-safety-unsafe-link-warning2026-10-29 https://bugbountyreports.com/reports/3968-xss-in-ubermovement-com-via-editable-google-sheets2026-10-29 https://bugbountyreports.com/reports/9514-xss-in-various-messagetypes2026-10-29 https://bugbountyreports.com/reports/6354-xss-in-vk-link2026-10-29 https://bugbountyreports.com/reports/561-xss-in-website-s-link2026-10-29 https://bugbountyreports.com/reports/8190-xss-in-widget-review-form-preview-in-settings2026-10-29 https://bugbountyreports.com/reports/780-xss-in-wordpress2026-10-29 https://bugbountyreports.com/reports/8234-xss-in-www-shopify-com-markets-utm-source2026-10-29 https://bugbountyreports.com/reports/8161-xss-in-zentao-integration-affecting-self-hosted-instances2026-10-29 https://bugbountyreports.com/reports/7485-xss-is-triggered-on-your-web2026-10-29 https://bugbountyreports.com/reports/6419-xss-leads-to-rce-on-the-rocketchat-desktop-client2026-10-29 https://bugbountyreports.com/reports/912-xss-m-imgur-com2026-10-29 https://bugbountyreports.com/reports/3323-xss-on-widgets-shopifyapps-com-via-stripping-attribute-and2026-10-29 https://bugbountyreports.com/reports/8458-xss-on-gov-via-url-path2026-10-29 https://bugbountyreports.com/reports/312-xss-on-concrete-concrete-elements-dashboard-sitemap-php2026-10-29 https://bugbountyreports.com/reports/7770-xss-on-developers-mtn-com2026-10-29 https://bugbountyreports.com/reports/7199-xss-on2026-10-29 https://bugbountyreports.com/reports/10176-xss-on2026-10-29 https://bugbountyreports.com/reports/9580-xss-on2026-10-29 https://bugbountyreports.com/reports/2526-xss-on-shop-myshopify-com-admin-and-partners-shopify-com2026-10-29 https://bugbountyreports.com/reports/2198-xss-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/9081-xss-on-about-tbupdate2026-10-29 https://bugbountyreports.com/reports/622-xss-on-added-name-album-on-videos2026-10-29 https://bugbountyreports.com/reports/9988-xss-on-amazon-aquisition-elemental2026-10-29 https://bugbountyreports.com/reports/2370-xss-on-any-shopify-shop-via-abuse-of-the-html5-structured2026-10-29 https://bugbountyreports.com/reports/427-xss-on-any-site-that-includes-the-moogaloop-flash-player2026-10-29 https://bugbountyreports.com/reports/653-xss-on-autoserch2026-10-29 https://bugbountyreports.com/reports/8773-xss-on-brave-today-through-custom-rss-feed2026-10-29 https://bugbountyreports.com/reports/1277-xss-on-codex-wordpress-org2026-10-29 https://bugbountyreports.com/reports/4481-xss-on-community-imgur-com2026-10-29 https://bugbountyreports.com/reports/1698-xss-on-demo-nextcloud-com-due-to-outdated-version2026-10-29 https://bugbountyreports.com/reports/715-xss-on-ecommerce-shopify-com2026-10-29 https://bugbountyreports.com/reports/1194-xss-on-gmchat-gm-com2026-10-29 https://bugbountyreports.com/reports/320-xss-on-gravatar2026-10-29 https://bugbountyreports.com/reports/978-xss-on-hardware-shopify-com2026-10-29 https://bugbountyreports.com/reports/1081-xss-on-hardware-shopify-com2026-10-29 https://bugbountyreports.com/reports/2760-xss-on-http-irc-parrotsec-org2026-10-29 https://bugbountyreports.com/reports/7732-xss-on-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/7733-xss-on-https-via-parameter2026-10-29 https://bugbountyreports.com/reports/7115-xss-on-https-parameter2026-10-29 https://bugbountyreports.com/reports/7734-xss-on-https-parameter2026-10-29 https://bugbountyreports.com/reports/7735-xss-on-https-parameter2026-10-29 https://bugbountyreports.com/reports/5039-xss-on-https-app-mopub-com-reports-custom-add-new-d12026-10-29 https://bugbountyreports.com/reports/1067-xss-on-https-app-shopify-com2026-10-29 https://bugbountyreports.com/reports/6002-xss-on-https-fax-pbx-itsendless-org-cve-2017-180242026-10-29 https://bugbountyreports.com/reports/6999-xss-on-https-partners-acronis-com2026-10-29 https://bugbountyreports.com/reports/5630-xss-on-https-www-rockstargames-com-gtaonline-jp-screens2026-10-29 https://bugbountyreports.com/reports/3478-xss-on-https-www-starbucks-co-uk-can-lead-to-credit-card2026-10-29 https://bugbountyreports.com/reports/758-xss-on-https-www-udemy-com-asset-export-html2026-10-29 https://bugbountyreports.com/reports/2994-xss-on-infogram-com2026-10-29 https://bugbountyreports.com/reports/8770-xss-on-internal-privileged-origin-through-reader-mode2026-10-29 https://bugbountyreports.com/reports/2175-xss-on-ios-app-via-html-rendering2026-10-29 https://bugbountyreports.com/reports/6300-xss-on-issue-reference-numbers2026-10-29 https://bugbountyreports.com/reports/9436-xss-on-line-careers2026-10-29 https://bugbountyreports.com/reports/8449-xss-on-link-and-window-opener2026-10-29 https://bugbountyreports.com/reports/1168-xss-on-love-uber-com2026-10-29 https://bugbountyreports.com/reports/1776-xss-on-manually-entering-postal-codes2026-10-29 https://bugbountyreports.com/reports/1445-xss-on-meta-tags-in-profile-page2026-10-29 https://bugbountyreports.com/reports/2781-xss-on-mobile-version-of-vimeo-com-where-the-button-follow2026-10-29 https://bugbountyreports.com/reports/299-xss-on-mopub-com2026-10-29 https://bugbountyreports.com/reports/2898-xss-on-nanostation-loco-m2-airmax2026-10-29 https://bugbountyreports.com/reports/833-xss-on-oauth-authorize-authenticate-endpoint2026-10-29 https://bugbountyreports.com/reports/1042-xss-on-partners-uber-com2026-10-29 https://bugbountyreports.com/reports/3772-xss-on-partners-uber-com-due-to-no-user-input-sanitisation2026-10-29 https://bugbountyreports.com/reports/2784-xss-on-player-vimeo-com-without-user-interaction-and-vimeo2026-10-29 https://bugbountyreports.com/reports/6596-xss-on-polaris-shopify-com-demo-using-postmessage2026-10-29 https://bugbountyreports.com/reports/1824-xss-on-postal-codes2026-10-29 https://bugbountyreports.com/reports/5046-xss-on-product-comments-in-transfers2026-10-29 https://bugbountyreports.com/reports/3515-xss-on-redirection-page-bypassed2026-10-29 https://bugbountyreports.com/reports/3015-xss-on-report-classic2026-10-29 https://bugbountyreports.com/reports/8411-xss-on-reset-password-page2026-10-29 https://bugbountyreports.com/reports/8840-xss-on-rockstargames-com2026-10-29 https://bugbountyreports.com/reports/4291-xss-on-services-shopify-com2026-10-29 https://bugbountyreports.com/reports/6610-xss-on-setup-config-page2026-10-29 https://bugbountyreports.com/reports/596-xss-on-support-shopify-com2026-10-29 https://bugbountyreports.com/reports/3591-xss-on-support-wordcamp-org-in-ajax-quote-php2026-10-29 https://bugbountyreports.com/reports/9183-xss-on-terra-6-indriverapp-com2026-10-29 https://bugbountyreports.com/reports/7380-xss-on-tiktok-com2026-10-29 https://bugbountyreports.com/reports/2188-xss-on-username-when-register-to-proffesional-account2026-10-29 https://bugbountyreports.com/reports/9792-xss-on-using-the-legacy-graphie-to-png-api2026-10-29 https://bugbountyreports.com/reports/5854-xss-on-videos-ia2026-10-29 https://bugbountyreports.com/reports/411-xss-on-vimeo2026-10-29 https://bugbountyreports.com/reports/2786-xss-on-vimeo-com-search-within-these-results-feature2026-10-29 https://bugbountyreports.com/reports/2785-xss-on-vimeo-com-home-after-other-user-follows-you2026-10-29 https://bugbountyreports.com/reports/5011-xss-on-www-alerts-and-a-number-of-other-pages2026-10-29 https://bugbountyreports.com/reports/2692-xss-on-www-mapbox-com-authorize2026-10-29 https://bugbountyreports.com/reports/2691-xss-on-www-mapbox-com-authorize-because-of-open-redirect-at2026-10-29 https://bugbountyreports.com/reports/1124-xss-on-www-wordpress-com2026-10-29 https://bugbountyreports.com/reports/1428-xss-on-zomato-com2026-10-29 https://bugbountyreports.com/reports/1397-xss-onmouseover2026-10-29 https://bugbountyreports.com/reports/9282-xss-parameter-css2026-10-29 https://bugbountyreports.com/reports/7951-xss-payload-on-tiktok-seller-center-endpoint2026-10-29 https://bugbountyreports.com/reports/378-xss-platform-twitter-com2026-10-29 https://bugbountyreports.com/reports/380-xss-platform-twitter-com-video-js-metadata2026-10-29 https://bugbountyreports.com/reports/662-xss-profile2026-10-29 https://bugbountyreports.com/reports/9247-xss-refelected-on-jazz-net2026-10-29 https://bugbountyreports.com/reports/6306-xss-reflect-to-post2026-10-29 https://bugbountyreports.com/reports/5571-xss-reflected2026-10-29 https://bugbountyreports.com/reports/8939-xss-reflected2026-10-29 https://bugbountyreports.com/reports/9729-xss-reflected2026-10-29 https://bugbountyreports.com/reports/7729-xss-reflected2026-10-29 https://bugbountyreports.com/reports/7561-xss-reflected2026-10-29 https://bugbountyreports.com/reports/294-xss-reflected-https-www-stopthehacker-com2026-10-29 https://bugbountyreports.com/reports/8948-xss-reflected-pq-tva-com2026-10-29 https://bugbountyreports.com/reports/9016-xss-reflected-pqm-tva-com2026-10-29 https://bugbountyreports.com/reports/7699-xss-reflected-at-https-sketch-pixiv-net-via-next-url2026-10-29 https://bugbountyreports.com/reports/6236-xss-reflected-in-m-vk-com2026-10-29 https://bugbountyreports.com/reports/6373-xss-reflected-on-https-www-pixiv-net2026-10-29 https://bugbountyreports.com/reports/7116-xss-reflected-on-https-parameter2026-10-29 https://bugbountyreports.com/reports/7114-xss-reflected-on-https-parameters2026-10-29 https://bugbountyreports.com/reports/7573-xss-reflected-on-imgur-com2026-10-29 https://bugbountyreports.com/reports/4297-xss-reflected-on-my-report2026-10-29 https://bugbountyreports.com/reports/8185-xss-reflected-on-reddit-com-via-url-path2026-10-29 https://bugbountyreports.com/reports/8215-xss-seems-to-work-again-after-change-to-linkpop-at-https2026-10-29 https://bugbountyreports.com/reports/5381-xss-stored2026-10-29 https://bugbountyreports.com/reports/3166-xss-stored2026-10-29 https://bugbountyreports.com/reports/6958-xss-stored-at-socialclub-rockstargames-com-add-friend2026-10-29 https://bugbountyreports.com/reports/7258-xss-stored-in-cacheable-response2026-10-29 https://bugbountyreports.com/reports/5951-xss-stored-in-https-your-store-myshopify-com-admin2026-10-29 https://bugbountyreports.com/reports/6289-xss-stored-in-the-shopify-email-app2026-10-29 https://bugbountyreports.com/reports/5982-xss-stored-via-upload-avatar-png-html-file-in-accounts2026-10-29 https://bugbountyreports.com/reports/3280-xss-through-e2e-action-id-delivered-by-jsonp2026-10-29 https://bugbountyreports.com/reports/3310-xss-through-document-projects2026-10-29 https://bugbountyreports.com/reports/6375-xss-through-image-upload-of-contacts-using-svg-file2026-10-29 https://bugbountyreports.com/reports/6401-xss-through-image-upload-of-contacts-using-svg-file-with2026-10-29 https://bugbountyreports.com/reports/7627-xss-trigger-via-html-iframe-injection-in-https-due-to2026-10-29 https://bugbountyreports.com/reports/6036-xss-triggered-in-myshopify-com-admin-product2026-10-29 https://bugbountyreports.com/reports/7786-xss-triggered-in-your-store-myshopify-com-admin-apps2026-10-29 https://bugbountyreports.com/reports/1706-xss-using-javascript-alert-80072026-10-29 https://bugbountyreports.com/reports/9527-xss-via-api-v1-chat-postmessage2026-10-29 https://bugbountyreports.com/reports/8410-xss-via-client-side-template-injection-on-www-news-speeches2026-10-29 https://bugbountyreports.com/reports/4224-xss-via-direct-message-deeplinks2026-10-29 https://bugbountyreports.com/reports/991-xss-via-dropbox2026-10-29 https://bugbountyreports.com/reports/123-xss-via-email2026-10-29 https://bugbountyreports.com/reports/124-xss-via-email-link2026-10-29 https://bugbountyreports.com/reports/1328-xss-via-fabrico-account-name2026-10-29 https://bugbountyreports.com/reports/7664-xss-via-mod-log-removed-posts2026-10-29 https://bugbountyreports.com/reports/999-xss-via-modified-zomato-widget-res-search-widget-php2026-10-29 https://bugbountyreports.com/reports/1041-xss-via-react-element-spoofing2026-10-29 https://bugbountyreports.com/reports/6149-xss-via-referrer-parameter2026-10-29 https://bugbountyreports.com/reports/2212-xss-via-svg-file2026-10-29 https://bugbountyreports.com/reports/5979-xss-via-unicode-characters-in-upload-filename2026-10-29 https://bugbountyreports.com/reports/8761-xss-via-vuln-rendertron-instance-at-jetblue-com-render2026-10-29 https://bugbountyreports.com/reports/6892-xss-via-x-forwarded-host-header2026-10-29 https://bugbountyreports.com/reports/7583-xss-via-x-forwarded-host-header2026-10-29 https://bugbountyreports.com/reports/8852-xss-vulnerabilities-due-to-missing-checks-in-tag-helpers2026-10-29 https://bugbountyreports.com/reports/806-xss-vulnerability2026-10-29 https://bugbountyreports.com/reports/9767-xss-vulnerability-found-in-javascript-code-of-https-mil2026-10-29 https://bugbountyreports.com/reports/944-xss-vulnerability-in-coach-roster-create-your-first-class2026-10-29 https://bugbountyreports.com/reports/2435-xss-vulnerability-in-developer-gm-com2026-10-29 https://bugbountyreports.com/reports/1360-xss-vulnerability-in-http-ubermovement-com-community-daniel2026-10-29 https://bugbountyreports.com/reports/3296-xss-vulnerability-in-sanitize-method-when-parsing-link-s2026-10-29 https://bugbountyreports.com/reports/278-xss-vulnerability-in-video-player-page2026-10-29 https://bugbountyreports.com/reports/2751-xss-vulnerability-in-woocommerce-product-vendors-plugin2026-10-29 https://bugbountyreports.com/reports/2032-xss-vulnerability-on-a-dod-website2026-10-29 https://bugbountyreports.com/reports/559-xss-vulnerability-on-all-pages2026-10-29 https://bugbountyreports.com/reports/1831-xss-vulnerability-on-an-army-website2026-10-29 https://bugbountyreports.com/reports/1820-xss-vulnerability-on-audio-and-video-parsers2026-10-29 https://bugbountyreports.com/reports/1821-xss-vulnerability-on-image-link-parser2026-10-29 https://bugbountyreports.com/reports/10214-xss-vulnerability-on-pressable-atomic-hosting-platform-via2026-10-29 https://bugbountyreports.com/reports/8676-xss-vulnerability-without-a-content-security-bypass-in-a2026-10-29 https://bugbountyreports.com/reports/4715-xss-vulnerable-parameter-in-a-location-hash2026-10-29 https://bugbountyreports.com/reports/3434-xss-was-found-by-exploiting-the-url-markdown-on-http-store2026-10-29 https://bugbountyreports.com/reports/3162-xss-when-clicking-share-to-twitter-at-quora-com-widgets2026-10-29 https://bugbountyreports.com/reports/2992-xss-when-shared2026-10-29 https://bugbountyreports.com/reports/9621-xss-when-using-translate-in-action-controller-rails-7-0-7-12026-10-29 https://bugbountyreports.com/reports/2787-xss-when-using-captions-subtitles-on-video-player-based-on2026-10-29 https://bugbountyreports.com/reports/4505-xss-while-logging-using-google2026-10-29 https://bugbountyreports.com/reports/518-xss-with-time-of-day-format2026-10-29 https://bugbountyreports.com/reports/8964-xss-with-visual-language-editor-tags2026-10-29 https://bugbountyreports.com/reports/6030-xss-within-shopify-email-app-admin2026-10-29 https://bugbountyreports.com/reports/1926-xss-upload-php2026-10-29 https://bugbountyreports.com/reports/7469-xss2026-10-29 https://bugbountyreports.com/reports/3247-xss2026-10-29 https://bugbountyreports.com/reports/2859-xss2026-10-29 https://bugbountyreports.com/reports/3079-xss2026-10-29 https://bugbountyreports.com/reports/3167-xss2026-10-29 https://bugbountyreports.com/reports/6441-xss2026-10-29 https://bugbountyreports.com/reports/2861-xss2026-10-29 https://bugbountyreports.com/reports/6593-xss2026-10-29 https://bugbountyreports.com/reports/2961-xss2026-10-29 https://bugbountyreports.com/reports/7467-xss2026-10-29 https://bugbountyreports.com/reports/2984-xss2026-10-29 https://bugbountyreports.com/reports/3142-xss2026-10-29 https://bugbountyreports.com/reports/3615-xss2026-10-29 https://bugbountyreports.com/reports/8296-xss-v-safe-html-is-not-safe-enough2026-10-29 https://bugbountyreports.com/reports/8819-xss-r-vcc-na11-8x8-com2026-10-29 https://bugbountyreports.com/reports/2753-xssi-cross-site-script-inclusion2026-10-29 https://bugbountyreports.com/reports/4045-xssi-on-refer-xoom-com-allows-stealing-email-addresses-and2026-10-29 https://bugbountyreports.com/reports/4053-xssi-quick-navigation-interface-leak-of-private-page-post2026-10-29 https://bugbountyreports.com/reports/7338-xw-6-2-0-firmware-5-reflected-xss-issues-in-link-cgi2026-10-29 https://bugbountyreports.com/reports/4944-xxe-at-ecjobs-starbucks-com-cn-retail-hxpublic-v62026-10-29 https://bugbountyreports.com/reports/920-xxe-at-host-vpn-owncloud-com2026-10-29 https://bugbountyreports.com/reports/3408-xxe-at-informatica-sub-domain2026-10-29 https://bugbountyreports.com/reports/4575-xxe-in-dod-website-that-may-lead-to-rce2026-10-29 https://bugbountyreports.com/reports/6852-xxe-in-enterprise-search-s-app-search-web-crawler2026-10-29 https://bugbountyreports.com/reports/3286-xxe-in-site-audit-function-exposing-file-and-directory2026-10-29 https://bugbountyreports.com/reports/1531-xxe-in-the-connector-designer2026-10-29 https://bugbountyreports.com/reports/2239-xxe-in-upload-file-feature2026-10-29 https://bugbountyreports.com/reports/2050-xxe-issue2026-10-29 https://bugbountyreports.com/reports/1817-xxe-on-dod-web-server2026-10-29 https://bugbountyreports.com/reports/4033-xxe-on-https-duckduckgo-com2026-10-29 https://bugbountyreports.com/reports/2649-xxe-on-sms-be-vip-twitter-com-in-sxmp-processor2026-10-29 https://bugbountyreports.com/reports/5415-xxe-through-injection-of-a-payload-in-the-xmp-metadata-of-a2026-10-29 https://bugbountyreports.com/reports/9468-xxe-with-rce-potential-on-the-https-cve-2017-35482026-10-29 https://bugbountyreports.com/reports/4420-yarn-transfers-npm-credentials-over-unencrypted-http2026-10-29 https://bugbountyreports.com/reports/10415-yelp-for-business-locked-email-field-silently-editable-via2026-10-29 https://bugbountyreports.com/reports/8930-yelp-com-and-biz-yelp-com-ato-via-xss-cookie-bridge2026-10-29 https://bugbountyreports.com/reports/8887-yelp-com-xss-ato-via-login-keylogger-link-google-account2026-10-29 https://bugbountyreports.com/reports/1080-yet-another-buffer-overflow-in-php-of-the-airmax-products2026-10-29 https://bugbountyreports.com/reports/9063-yet-another-casb-integration-takeover-of-active-integrations2026-10-29 https://bugbountyreports.com/reports/9750-yet-another-otp-code-leaked-in-the-api-response2026-10-29 https://bugbountyreports.com/reports/2320-you-can-simply-just-use-passwords-that-simply-are-as-1234562026-10-29 https://bugbountyreports.com/reports/3343-your-support-community-suffers-from-angularjs-injection-and2026-10-29 https://bugbountyreports.com/reports/7074-your-store-myshopify-com-preview-link-is-leak-on-third2026-10-29 https://bugbountyreports.com/reports/822-zend-throw-or-error-format-string-vulnerability2026-10-29 https://bugbountyreports.com/reports/6904-zero-click-account-takeover-due-to-api-misconfiguration2026-10-29 https://bugbountyreports.com/reports/7501-zero-day-path-traversal-vulnerability-in-grafana-8-x-allows2026-10-29 https://bugbountyreports.com/reports/4332-zero-amount-miner-tx-ringct-allows-monero-wallet-to-receive2026-10-29 https://bugbountyreports.com/reports/4507-zeromq-libzmq-remote-code-execution2026-10-29 https://bugbountyreports.com/reports/469-zip-integer-overflow-leads-to-writing-past-heap-boundary2026-10-29 https://bugbountyreports.com/reports/1386-ziparchive-class-use-after-free-vulnerability-in-php-s-gc2026-10-29 https://bugbountyreports.com/reports/10546-zmq-get-output-distribution-duplicate-amount-dos2026-10-29 https://bugbountyreports.com/reports/10438-zmq-rpc-log-injection-and-untrusted-payload-persistence2026-10-29 https://bugbountyreports.com/reports/3336-zomato-com-reflected-cross-site-scripting2026-10-29 https://bugbountyreports.com/reports/75322026-10-29 https://bugbountyreports.com/reports/43562026-10-29 https://bugbountyreports.com/reports/36752026-10-29 https://bugbountyreports.com/reports/1028-youtrack2026-10-29 https://bugbountyreports.com/reports/794-javascript2026-10-29 https://bugbountyreports.com/reports/23252026-10-29 https://bugbountyreports.com/reports/2002-dos-vk-com2026-10-29 https://bugbountyreports.com/reports/20902026-10-29 https://bugbountyreports.com/reports/31412026-10-29 https://bugbountyreports.com/reports/42282026-10-29 https://bugbountyreports.com/reports/2233-2fa2026-10-29 https://bugbountyreports.com/reports/7534-api2026-10-29 https://bugbountyreports.com/reports/4518-swag2026-10-29 https://bugbountyreports.com/reports/74022026-10-29 https://bugbountyreports.com/reports/19402026-10-29 https://bugbountyreports.com/reports/39542026-10-29 https://bugbountyreports.com/reports/16822026-10-29 https://bugbountyreports.com/reports/4953-com-vk-usersstore-userscontentprovider-exchange-token2026-10-29 https://bugbountyreports.com/reports/3669-faq2026-10-29 https://bugbountyreports.com/reports/11272026-10-29 https://bugbountyreports.com/reports/1125-32026-10-29 https://bugbountyreports.com/reports/74112026-10-29 https://bugbountyreports.com/reports/6946-ozoncorporate-ru2026-10-29 https://bugbountyreports.com/reports/7408-virus2026-10-29 https://bugbountyreports.com/reports/31912026-10-29 https://bugbountyreports.com/reports/35382026-10-29 https://bugbountyreports.com/reports/4169-vk-api2026-10-29 https://bugbountyreports.com/reports/50472026-10-29 https://bugbountyreports.com/reports/7440-cisco-smart-install2026-10-29 https://bugbountyreports.com/reports/32092026-10-29 https://bugbountyreports.com/reports/2485-https-vk-com-al-video-php2026-10-29 https://bugbountyreports.com/reports/7932026-10-29 https://bugbountyreports.com/reports/32702026-10-29 https://bugbountyreports.com/reports/26382026-10-29 https://bugbountyreports.com/reports/6443-vk-pay2026-10-29 https://bugbountyreports.com/reports/3268-upgreid-xss2026-10-29 https://bugbountyreports.com/reports/2639-2fa-bypass2026-10-29 https://bugbountyreports.com/reports/2140-2-2fa-bypass2026-10-29 https://bugbountyreports.com/reports/1029-csrf-m-ok-ru2026-10-29 https://bugbountyreports.com/reports/64392026-10-29 https://bugbountyreports.com/reports/74032026-10-29 https://bugbountyreports.com/reports/36742026-10-29 https://bugbountyreports.com/reports/21802026-10-29 https://bugbountyreports.com/reports/4341-2fa-access-token2026-10-29 https://bugbountyreports.com/reports/3568-csrf2026-10-29 https://bugbountyreports.com/reports/3424-id2026-10-29 https://bugbountyreports.com/reports/1064-twitter2026-10-29 https://bugbountyreports.com/reports/6385-steamid2026-10-29 https://bugbountyreports.com/reports/53562026-10-29 https://bugbountyreports.com/reports/6205-api-iframe-miniapp2026-10-29 https://bugbountyreports.com/reports/6811-vk-com2026-10-29 https://bugbountyreports.com/reports/5536-csrf2026-10-29 https://bugbountyreports.com/reports/3269-flood2026-10-29 https://bugbountyreports.com/reports/3551-xss-m-ok-ru2026-10-29 https://bugbountyreports.com/reports/17282026-10-29 https://bugbountyreports.com/reports/2421-ssl-api2026-10-29 https://bugbountyreports.com/reports/11262026-10-29 https://bugbountyreports.com/reports/20602026-10-29 https://bugbountyreports.com/reports/7468-50x502026-10-29 https://bugbountyreports.com/reports/4284-android2026-10-29 https://bugbountyreports.com/reports/3780-long-pool2026-10-29 https://bugbountyreports.com/reports/12292026-10-29 https://bugbountyreports.com/reports/34932026-10-29 https://bugbountyreports.com/reports/64722026-10-29 https://bugbountyreports.com/reports/35532026-10-29 https://bugbountyreports.com/reports/25892026-10-29 https://bugbountyreports.com/reports/4029-email-csrf2026-10-29 https://bugbountyreports.com/reports/32482026-10-29 https://bugbountyreports.com/reports/74702026-10-29 https://bugbountyreports.com/reports/74722026-10-29 https://bugbountyreports.com/reports/75022026-10-29 https://bugbountyreports.com/reports/36162026-10-29 https://bugbountyreports.com/reports/42292026-10-29 https://bugbountyreports.com/reports/42022026-10-29 https://bugbountyreports.com/reports/33192026-10-29 https://bugbountyreports.com/reports/35312026-10-29 https://bugbountyreports.com/reports/33902026-10-29 https://bugbountyreports.com/reports/43552026-10-29 https://bugbountyreports.com/reports/74102026-10-29 https://bugbountyreports.com/reports/35672026-10-29 https://bugbountyreports.com/reports/3232-email2026-10-29 https://bugbountyreports.com/reports/36032026-10-29 https://bugbountyreports.com/reports/74012026-10-29 https://bugbountyreports.com/reports/31442026-10-29 https://bugbountyreports.com/reports/3333-sms2026-10-29 https://bugbountyreports.com/reports/28602026-10-29 https://bugbountyreports.com/reports/34532026-10-29 https://bugbountyreports.com/reports/74712026-10-29 https://bugbountyreports.com/reports/3849-id2026-10-29 https://bugbountyreports.com/reports/5998-ode-injection-host2026-10-29 https://bugbountyreports.com/reports/33912026-10-29 https://bugbountyreports.com/reports/2858-vk-cc2026-10-29 https://bugbountyreports.com/reports/16232026-10-29 https://bugbountyreports.com/reports/19202026-10-29 https://bugbountyreports.com/reports/1921-22026-10-29 https://bugbountyreports.com/reports/3148-id2026-10-29 https://bugbountyreports.com/reports/4227-remixsid2026-10-29 https://bugbountyreports.com/reports/4721-email2026-10-29 https://bugbountyreports.com/reports/26452026-10-29 https://bugbountyreports.com/reports/6353-auth-restore2026-10-29 https://bugbountyreports.com/reports/7637-android2026-10-29 https://bugbountyreports.com/reports/7182026-10-29 https://bugbountyreports.com/reports/35522026-10-29 https://bugbountyreports.com/reports/35392026-10-29 https://bugbountyreports.com/reports/19392026-10-29 https://bugbountyreports.com/reports/19252026-10-29 https://bugbountyreports.com/reports/19242026-10-29 https://bugbountyreports.com/reports/3984-webview2026-10-29 https://bugbountyreports.com/reports/2977-xss-vk2026-10-29 https://bugbountyreports.com/reports/4975-xss2026-10-29 https://bugbountyreports.com/reports/3145-xss-wysiwyg2026-10-29 https://bugbountyreports.com/reports/3146-xss2026-10-29 https://bugbountyreports.com/reports/5131-xss-business2026-10-29 https://bugbountyreports.com/reports/34772026-10-29 https://bugbountyreports.com/reports/9972-clear-authentication-deficiencies-potential-for-man-in-the2026-10-29 https://bugbountyreports.com/reports/57472026-10-29