Cybersecurity information flow

作者:James Kettle (@albinowax) 程序:- 漏洞类型:Race condition 赏金:-

作者:Noam Moshe 程序:Connected IO 漏洞类型:IoT,RCE,MQTT 赏金:-

作者:Bibek Shah 程序:- 漏洞类型:OAuth,Account takeover 赏金:-

作者:snoopy (@snoopy101101) 程序:- 漏洞类型:Reflected XSS 赏金:500

作者:Joshua Rogers (@MegaManSec) 程序:- 漏洞类型:Local Privilege Escalation 赏金:-

作者:Markus Wulftange (@mwulftange) 程序:Microsoft (Sharepoint) 漏洞类型:RCE,Security code review 赏金:-

作者:Stefan Proksch,Florian Schweitzer (@FSchweitzer) 程序:Cloudflare 漏洞类型:WAF bypass 赏金:-

作者:Ben Barnea (@nachoskrnl) 程序:Microsoft (Windows) 漏洞类型:DoS 赏金:-

作者:Sector 7 (@sector7_nl) 程序:Microsoft (Windows) 漏洞类型:RCE,Local Privilege Escalation,TOCTOU,DLL Hijacking 赏金:-

作者:Nguyễn Tiến Giang (@testanull) 程序:Microsoft (Sharepoint) 漏洞类型:RCE,Authentication bypass,JWT,Code injection,Security code review 赏金:-

作者:Salman Khan (@salman_ashlor) 程序:- 漏洞类型:Host header injection,Web cache poisoning,Account takeover,Password reset 赏金:1,250

作者:Alain Mowat (@plopz0r) 程序:- 漏洞类型:Internal pentest,Active Directory 赏金:-

作者:Julien R.,Marin Duroyon 程序:Xiaomi 漏洞类型:OS command injection,Buffer Overflow,Memory corruption,Security code review 赏金:-

作者:Mohamed Anani (@0xM5awy) 程序:- 漏洞类型:XSS,Open redirect,URL validation bypass 赏金:-

作者:Adam Crosser 程序:Qlik 漏洞类型:RCE,Path traversal,HTTP request tunneling,HTTP request smuggling,Security code review 赏金:-

作者:Kento Oki (@kento932376) 程序:Riot Games 漏洞类型:Game hacking 赏金:6,000

作者:Gavin Kramer (@atomiczsec) 程序:- 漏洞类型:Stored XSS,Reflected XSS 赏金:1,500

作者:bug4you (@bug4you) 程序:- 漏洞类型:SQL injection 赏金:-

作者:Hektor 程序:- 漏洞类型:Information disclosure,File disclosure 赏金:-

作者:Rémi Matasse (@_remsio_) 程序:knplabs/knp-snappy 漏洞类型:Phar deserialization 赏金:-

作者:Mathias Karlsson (@avlidienbrunn) 程序:k- 漏洞类型:XSS 赏金:-

作者:Chirag Agrawal (@__Raiders) 程序:Trillium 漏洞类型:Stored XSS 赏金:-

作者:pyn3rd (@pyn3rd) 程序:VMware (Spring Kafka) 漏洞类型:Insecure deserialization,RCE 赏金:-

作者:Asi Greenholts (@TupleType) 程序:Veracode,Hangfire 漏洞类型:CI/CD 赏金:-

作者:Cristi Vlad (@CristiVlad25) 程序:- 漏洞类型:Rate limiting bypass,Bruteforce 赏金:-

作者:Nithissh 程序:- 漏洞类型:Information disclosure,File disclosure,40x bypass 赏金:-

作者:Nithissh 程序:- 漏洞类型:RCE,Unrestricted file upload 赏金:-

作者:Rafael da Costa Santos (@rafabyte_) 程序:InfluxData (InfluxDB) 漏洞类型:NoSQL injection,Security code review 赏金:-

作者:RedTeam Pentesting (@RedTeamPT) 程序:Trados (WorldServer) 漏洞类型:Session management issue,Bruteforce 赏金:-

作者:Swaroop Yermalkar (@swaroopsy) 程序:- 漏洞类型:iOS,Hardcoded credentials,Information disclosure 赏金:-