Cybersecurity information flow

作者:Professor0xx01 程序:NCIIPC 漏洞类型:Open redirect 赏金:-

作者:Harsh Jaiswal (@rootxharsh),Rahul Maini (@iamnoooob) 程序:Apple,Mura CMS,Masa CMS 漏洞类型:SQL injection,RCE,Security code review 赏金:-

作者:Alex Chapman (@ajxchapman) 程序:- 漏洞类型:RCE,Memory corruption 赏金:-

作者:Ian Hickey 程序:- 漏洞类型:Relative Path Overwrite (RPO),Relative Path File Injection (RPFI) 赏金:-

作者:Yanir Tsarimi (@Yanir_) 程序:Microsoft 漏洞类型:Chatbot,Sandbox escape,Cross-tenant vulnerability,RCE,Memory leak 赏金:203,000

作者:Adnan Khan (@adnanthekhan) 程序:Google 漏洞类型:CI/CD,Supply chain attack 赏金:1,000

作者:Pedro Henrique Lima 程序:- 漏洞类型:LLM,Prompt leaking,Prompt Injection,RCE,Code injection 赏金:-

作者:mo9khu93r 程序:Kraken 漏洞类型:Rate limiting bypass 赏金:500

作者:Sunny Chau 程序:- 漏洞类型:Password spraying,Red team 赏金:-

作者:Manfred Paul (@_manfp) 程序:Google (Chrome),Microsoft (Edge) 漏洞类型:V8 JavaScript engine,WebAssembly,JS sandbox breakout,Browser hacking,Memory corruption,RCE 赏金:-

作者:Professor0xx01 程序:- 漏洞类型:XSS,MiTM,Components with known vulnerabilities 赏金:-

作者:Arnau Ortega 程序:Microsoft (Azure) 漏洞类型:Cloud,Privilege escalation,Cross-tenant vulnerability,Phishing 赏金:-

作者:ap (@decoder_it) 程序:Microsoft 漏洞类型:RCE,Privilege escalation,Authentication coercion,Active Directory,NTLM,Internal pentest 赏金:-

作者:Paul Barbé,Kévin Schouteeten (@Scouty__) 程序:Microsoft (Azure) 漏洞类型:Kubernetes,Cloud,Privilege escalation 赏金:-

作者:finn,lx,olli 程序:Deno 漏洞类型:V8 JavaScript engine,JS sandbox breakout 赏金:-

作者:Ofek Haviv 程序:Apache 漏洞类型:Dependency confusion 赏金:-

作者:Ph.Hitachi 程序:Globe Telecom (Gcash) 漏洞类型:Information disclosure,File disclosure 赏金:-

作者:Matt Burch (@emptynebuli) 程序:BlackBerry 漏洞类型:Android,Hardcoded API keys,Username enumeration 赏金:-

作者:Ph.Hitachi 程序:Globe Telecom (Gcash) 漏洞类型:Information disclosure,Hardcoded credentials 赏金:-

作者:Aaron Thacker (@thackeraaron) 程序:Cisco 漏洞类型:BIOS,Jailbreaking 赏金:-

作者:David Yesland (@daveysec) 程序:Progress (Kemp LoadMaster) 漏洞类型:OS command injection,CSRF,Security code review 赏金:-

作者:Adnan Khan (@adnanthekhan) 程序:Google 漏洞类型:CI/CD,Supply chain attack 赏金:7,500

作者:Nick Frichette (@frichette_n) 程序:AWS 漏洞类型:Cloud,Privilege escalation 赏金:-

作者:Crypto (@xryptc) 程序:Apple 漏洞类型:Stored XSS 赏金:5,000

作者:Roberto Soares (@espreto) 程序:- 漏洞类型:Active Directory,Red team,Internal pentest 赏金:-

作者:Paul Gerste 程序:Erxes 漏洞类型:RCE,Path traversal,Authentication bypass,Arbitrary file overwrite,GraphQL,SSRF,Security code review 赏金:-

作者:Dylan Pindur 程序:Fortinet 漏洞类型:RCE,Out-of-bounds Write,Memory corruption,Patch diffing 赏金:-

作者:Yaniv Nizry (@YNizry) 程序:Mailspring 漏洞类型:Mutation XSS,RCE,Electron,CSS exfiltration 赏金:-

作者:Swissky (@pentest_swissky) 程序:- 漏洞类型:Red team 赏金:-

作者:Matt Burch (@emptynebuli) 程序:Ivanti (MobileIron) 漏洞类型:Android,Hardcoded API keys,Username enumeration 赏金:-