bugbountrylist 节点

当前节点:bugbountrylist

时间	节点
2021-04-08 03:59:33	List of bug bounty writeups	I Built a TV That Plays All of Your Private YouTube Videos 程序:Google 漏洞类型:CSRF 赏金:$6,000 作者:David Schütz (@xdavidhu)
2021-04-08 03:59:33	List of bug bounty writeups	Apple TV for Fire OS code execution 程序:Apple 漏洞类型:RCE, Insecure storage, Man-in-the-Disk attack 作者:Razvan Sima (@0xraaz)
2021-04-08 03:59:33	List of bug bounty writeups	Cloud Based Storage Misconfigurations -> Critical Bounties 漏洞类型:Cloud storage misconfiguration 赏金:$7,500 作者:Mikey (@mikey96_bh)
2021-04-08 03:59:32	List of bug bounty writeups	Breaking GitHub Private Pages for $35k 程序:Github 漏洞类型:XSS, CRLF, Web cache poisoning 赏金:$35,000 作者:Robert Chen (@NotDeGhost) & Philip
2021-04-08 03:59:32	List of bug bounty writeups	Remote code execution through unsafe unserialize in PHP 漏洞类型:Insecure deserialization, RCE 作者:Sjoerd Langkemper
2021-04-08 03:59:32	List of bug bounty writeups	Journeys in Quoteless and Multi Reflection XSS 漏洞类型:XSS 赏金:$250 作者:Bend Theory (@bendtheory)
2021-04-08 03:59:31	List of bug bounty writeups	RCE on Starbucks Singapore and more for $5600 程序:Starbucks 漏洞类型:RCE, Unrestricted file upload 赏金:$5,600 作者:Kamil Onur Özkaleli (@ko2sec)
2021-04-08 03:59:31	List of bug bounty writeups	Automate Cache Poisoning Vulnerability - Nuclei 漏洞类型:Web cache poisoning, Stored XSS 赏金:$1,500 作者:Mohamed Elbadry (@_melbadry9)
2021-04-08 03:59:30	List of bug bounty writeups	This Man Thought Opening A TXT File Is Fine, He Thought Wrong. MacOS CVE-2019-8761 程序:Apple 漏洞类型:MacOS bug, HTML injection 作者:Paulos Yibelo (@PaulosYibelo)
2021-04-08 03:59:30	List of bug bounty writeups	Bragging Rights: Let’s head back to bug bucket 漏洞类型:XSS, IDOR, 2FA bypass 赏金:$951 作者:Manas Harsh (@ManasH4rsh)
2021-04-08 03:59:30	List of bug bounty writeups	XSS in Large Messenger and Payment App - a Shout Out to Parameter Guessing 漏洞类型:XSS, HTLML injection 作者:Lauritz (@lauritz)
2021-04-08 03:59:29	List of bug bounty writeups	Play a game, get Subscribed to my channel - YouTube Clickjacking Bug \| #GoogleVRP 漏洞类型:Clickjacking 赏金:$100 作者:GoogleLauritz (@lauritz)
2021-04-08 03:59:29	List of bug bounty writeups	Who Contains the Containers? 程序:Microsoft 漏洞类型:Local privilege escalation 作者:James Forshaw (@tiraniddo)
2021-04-08 03:59:28	List of bug bounty writeups	Facebook account takeover due to a wide platform bug in ajaxpipe responses 程序:Facebook 漏洞类型:Account takeover 赏金:$30,000 作者:Samm0uda (@samm0uda)
2021-04-08 03:59:28	List of bug bounty writeups	Facebook account takeover due to a bypass of allowed callback URLs in the OAuth flow 程序:Facebook 漏洞类型:Account takeover, OAuth flaw, Open redirect 赏金:$12,000 作者:Samm0uda (@samm0uda)
2021-04-08 03:59:28	List of bug bounty writeups	Zero click vulnerability in Apple’s macOS Mail 程序:Apple 漏洞类型:Account takeover, Information disclosure, RCE 作者:Mikko Kenttälä (@Turmio_)
2021-04-08 03:59:27	List of bug bounty writeups	A weird XSS 漏洞类型:Reflected XSS 作者:gato the wizard
2021-04-01 06:05:52	List of bug bounty writeups	Missing CORS leads to Complete Account Takeover 漏洞类型:Missing CORS, CSRF, Account takeover 作者:Niraj Modi (@nirajmodi51)
2021-04-01 06:05:51	List of bug bounty writeups	I felt like there were no more bugs left after winning € 2000 … But an email worth €750 changed my mind 漏洞类型:Broken Access Control, IDOR 赏金:€2750 作者:Thexssrat (@theXSSrat)
2021-04-01 06:05:50	List of bug bounty writeups	CSRF to Full Account Takeover 漏洞类型:CSRF, Account takeover 作者:Ashraf Harb (@ashrafharb97)
2021-04-01 06:05:50	List of bug bounty writeups	PHP fopen() function to local file inclusion 漏洞类型:LFI 作者:أنس روبي (@xhzeem)
2021-04-01 06:05:48	List of bug bounty writeups	How I made to Paypal Bug Bounty $750 程序:Paypal 漏洞类型:Open Redirect 赏金:$750 作者:Pethuraj (@Pethuraj)
2021-04-01 06:05:48	List of bug bounty writeups	How to bypass CloudFlare bot protection ? 程序:CloudFlare 漏洞类型:Logic flaw 赏金:$0 作者:jychp (@jychp_fr)
2021-04-01 06:05:47	List of bug bounty writeups	Increasing impact of Information Disclosure — Full Account Takeover ! 漏洞类型:Information disclosure, Password reset flaw 赏金:$0 (OOS) 作者:Abhisek R (@abh1sek_r)
2021-04-01 06:05:46	List of bug bounty writeups	Encrypted Payload -> Decrypted Execution ($600) : Stored XSS 漏洞类型:Stored XSS 赏金:$600 作者:Shrirang Diwakar
2021-04-01 06:05:46	List of bug bounty writeups	PoC: The easiest 125 Euro’s I Ever made 漏洞类型:Logic flaw 赏金:€125 作者:Thexssrat (@theXSSrat)
2021-04-01 06:05:45	List of bug bounty writeups	Exif meta data worth $XXXX 漏洞类型:Information disclosure 作者:Saddam Hussain (@wisdomfreak1)
2021-04-01 06:05:43	List of bug bounty writeups	How I leveraged XSS to make Privilege Escalation to be Super Admin! 漏洞类型:XSS, Privilege escalation 作者:Asem Eleraky (@melotover)
2021-04-01 06:05:42	List of bug bounty writeups	Multiple Authorization bypass issues in Google’s Richmedia Studio 程序:Google 漏洞类型:Authorization flaw 赏金:$6,000 作者:Zohar Shachar
2021-04-01 06:05:42	List of bug bounty writeups	Bypass rate limit to enumeration users through Google Drive 程序:Google 漏洞类型:Rate limiting bypass 赏金:$0 (Won’t fix) 作者:Abdullah Mohamed (@3bodymo_)
2021-04-01 06:05:41	List of bug bounty writeups	Ad portals and the half blood vulnerability 漏洞类型:Logic flaw 赏金:$600+ 作者:Adam (@whitechaitai)
2021-03-25 14:01:12	List of bug bounty writeups	How I made it to Google HOF? 程序:Google 漏洞类型:IDOR 赏金:$1,000 作者:Sudhanshu Rajbhar (@sudhanshur705)
2021-03-25 14:01:12	List of bug bounty writeups	Finding My First Critical Vulnerability 漏洞类型:Information disclosure 赏金:$250 作者:Thexssrat (@theXSSrat)
2021-03-25 14:01:12	List of bug bounty writeups	OTP brute-force via rate limit bypass 漏洞类型:Bruteforce, Lack of rate limiting, OTP bypass 作者:Bilal Muqeet (@blmqt)
2021-03-25 14:01:12	List of bug bounty writeups	Cross Site Port Attack - A Stranger’s Call 漏洞类型:XSPA 作者:Shrey Shah (@ShreySh43332033)
2021-03-25 14:01:12	List of bug bounty writeups	OAuth Misconfiguration found in small time-window of attack 漏洞类型:OAuth misconfiguration 赏金:$300 作者:Muhammad Aamir (@Muhammad__Aamir)
2021-03-25 14:01:12	List of bug bounty writeups	How to Harpon Big Blue! 程序:IBM 漏洞类型:Logic flaw, Exposed registration page 作者:Clark Voss (@clark_voss)
2021-03-25 14:01:12	List of bug bounty writeups	H2C Smuggling in the Wild 漏洞类型:HTTP request smuggling 作者:Sean Yeoh (@seanyeoh)
2021-03-25 14:01:12	List of bug bounty writeups	TikTok for Android 1-Click RCE 程序:TikTok 漏洞类型:RCE, XSS, Insecure intents 作者:Sayed Abdelhafiz (@dPhoeniixx)
2021-03-25 14:01:12	List of bug bounty writeups	How I hacked Facebook: Part Two 程序:Facebook 漏洞类型:SSRF, Account takeover, Cookie manipulation 赏金:$54,580 作者:Alaa Abdulridha (@alaa0x2)
2021-03-25 14:01:12	List of bug bounty writeups	Stealing arbitrary GitHub Actions secrets 程序:GitHub 漏洞类型:Logic bug 赏金:$25,000 作者:Teddy Katz (@not_aardvark)
2021-03-25 14:01:11	List of bug bounty writeups	Dangling DNS: Worksites.net 漏洞类型:Dangling DNS records, Subdomain takeover 作者:Mohamed Elbadry (@_melbadry9)
2021-03-25 14:01:11	List of bug bounty writeups	Abusing Data Protection Laws For D0xing & Account Takeovers 漏洞类型:SSTI, Account takeover 作者:Hx01 (@Hxzeroone)
2021-03-25 14:01:11	List of bug bounty writeups	CVE-2021-27076: A Replay-style Deserialization Attack Against Sharepoint 程序:Microsoft 漏洞类型:Insecure deserialization, RCE 作者:Simon Zuckerbraun (@HexKitchen)
2021-03-25 14:01:11	List of bug bounty writeups	An unknown Linux secret that turned SSRF to OS Command injection 漏洞类型:SSRF, Command injection 作者:secureITmania (@secureitmania)
2021-03-25 14:01:11	List of bug bounty writeups	An Interesting Account Takeover!! 漏洞类型:IDOR, Account takeover, Weak encryption, Password reset flaw 作者:Mayank Pandey (@mayank_pandey01)
2021-03-18 02:01:05	List of bug bounty writeups	Voice Confusion When Commenting On Watch Party 程序:Facebook 漏洞类型:Information disclosure 赏金:$1,000 作者:Prakash Panta (@prakashpanta268)
2021-03-18 02:01:05	List of bug bounty writeups	Facebook Group Members Disclosure. 程序:Facebook 漏洞类型:Information disclosure 赏金:$9,000 作者:Baibhav Anand (@SpongeBhav)
2021-03-18 02:01:05	List of bug bounty writeups	IDOR Vulenebility with empty response still exposing sensitive details of customers! 漏洞类型:IDOR 作者:Rahul Varale
2021-03-18 02:01:05	List of bug bounty writeups	How I Found Sql Injection on 8x8 , Cengage,Comodo,Automattic,20 company 程序:Automattic, IBM, 8x8 漏洞类型:SQL injection 作者:Ahmad A Abdulla (@lu3ky13)
2021-03-18 02:01:05	List of bug bounty writeups	Finding keys under the door 程序:Paytm 漏洞类型:Stored XSS, Unrestricted file upload 作者:Naveen Prakaasham K S V
2021-03-18 02:01:05	List of bug bounty writeups	Account Takeover Via Reset Password Worth 2000$ 漏洞类型:Password reset flaw, Account takeover 赏金:$2,000 作者:Ashutosh mishra (@ashutoshmish_ra)
2021-03-18 02:01:05	List of bug bounty writeups	[Google VRP] How I Get Blind XSS At Google With Dork (First Bounty and HOF ) 程序:Google 漏洞类型:Blind XSS 赏金:$3,133.70 作者:Rio Mulyadi (@riomulyadi_)
2021-03-18 02:01:05	List of bug bounty writeups	Messing with GitHub’s fork collaboration for fun and profit 程序:GitHub 漏洞类型:Broken Access Control 赏金:$30,000 作者:Teddy Katz (@not_aardvark)
2021-03-18 02:01:05	List of bug bounty writeups	Business Logic Error on Registration Leads to SMS Validation Bypass 漏洞类型:2FA bypass 作者:pleorqy (@pleorqy)
2021-03-18 02:01:05	List of bug bounty writeups	Chain of Low Level Bugs and Misconfigurations Leads to Account Takeover 漏洞类型:Reflected XSS, Clickjacking, Account takeover 作者:pleorqy (@pleorqy)