Cybersecurity information flow

作者:Chux (@chux13786509) 程序:- 漏洞类型:Docker Registry 赏金:-

作者:Adam Crosser 程序:Ant Media 漏洞类型:Local Privilege Escalation,JMX 赏金:-

作者:Filip Dragovic (@filip_dragovic) 程序:Oracle (VirtualBox) 漏洞类型:Local Privilege Escalation 赏金:-

作者:TheZero (@Th3Zer0),suidpit (@suidpit) 程序:Element 漏洞类型:Intent redirection,Insecure intent,Android 赏金:-

作者:Roi Nisimi (@roinisimi) 程序:AWS,Google (GCP) 漏洞类型:Information disclosure 赏金:-

作者:Stefan Schiller (@scryh_) 程序:SourceForge,Apache Allura 漏洞类型:Arbitrary file read,RCE,Security code review 赏金:-

作者:Ben Barnea (@nachoskrnl) 程序:Microsoft (Windows) 漏洞类型:RCE,Parsing issue 赏金:-

作者:Anas Eladly (@0xanas_eladly) 程序:- 漏洞类型:Race condition 赏金:-

作者:Dane Sherrets (@DaneSherrets) 程序:Tools for Humanity (Worldcoin) 漏洞类型:Race condition,Web3 hacking 赏金:3,000

作者:Thomas Houhou (@Th0h0) 程序:Swisscom 漏洞类型:Password reset,Security code review 赏金:4,000

作者:Johann Rehberger (wunderwuzzi23) 程序:Google (AI Studio) 漏洞类型:Prompt Injection,LLM 赏金:-

作者:Shir Tamari (@shirtamari),Sagi Tzadik (@sagitz_) 程序:Hugging Face 漏洞类型:AI,Cloud,CI/CD,RCE,Insecure deserialization,Privilege escalation,Supply chain attack,Cross-tenant vulnerability 赏金:200

作者:RyotaK (@ryotkak) 程序:DOMPurify 漏洞类型:WAF bypass,XSS 赏金:-

作者:Yaniv Nizry (@YNizry) 程序:Apache Dubbo 漏洞类型:Insecure deserialization,Security code review 赏金:-

作者:Brian (@hoyahaxa) 程序:Imperva 漏洞类型:WAF bypass 赏金:-

作者:Abhi Sharma (@a13h1_) 程序:- 漏洞类型:CRLF injection 赏金:1,500

作者:Paul van der Haas (@PvdH) 程序:ReCrystallize Software 漏洞类型:Default credentials,LFI,Authentication bypass,Privilege escalation,Unrestricted file upload,RCE 赏金:-

作者:Bartłomiej Bergier (@_bergee_) 程序:- 漏洞类型:SSRF,HTML injection,CSP bypass,XSS 赏金:200

作者:Omar ElSayed (@bxrowski0x) 程序:- 漏洞类型:IDOR 赏金:2,000

作者:Martin Doyhenard (@tincho_508) 程序:- 漏洞类型:Desync attack,HTTP request smuggling,Web cache poisoning 赏金:-

作者:Clément Amic 程序:- 漏洞类型:Insecure deserialization,RCE,Security code review 赏金:-

作者:David Yesland (@daveysec) 程序:Progress (Kemp LoadMaster) 漏洞类型:OS command injection,RCE,Reverse engineering 赏金:-

作者:Olivier Laflamme (@olivier_boschko) 程序:TP-Link 漏洞类型:Reverse engineering,Buffer Overflow,Memory corruption,DoS 赏金:-

作者:Abdullah Nawaf / HX007,Orwa Atyat (@GodfatherOrwa) 程序:- 漏洞类型:RCE,Authentication bypass,SQL injection 赏金:35,000

作者:Will Vandevanter,Juan Pablo Gomez Postigo 程序:- 漏洞类型:RCE 赏金:-

作者:Alex Leahu 程序:- 漏洞类型:Insecure deserialization 赏金:-

作者:Maik 程序:OpenOlat 漏洞类型:XXE,Security code review 赏金:-

作者:Rich Wolferd,Nick Landers (@monoxgas) 程序:Microsoft (Outlook) 漏洞类型:RCE,Code injection 赏金:-

作者:Thomas Houhou (@Th0h0) 程序:EPFL 漏洞类型:Session management issue 赏金:-

作者:Arseniy Sharoglazov (@_mohemiv) 程序:- 漏洞类型:Source code disclosure,ASP.NET 赏金:-