#bugbounty

Reflected XSS turned 0-click via attribute breakout: autofocus + onfocus. NDA-safe bug bounty log.

Програма Bug Bounty запущена monobank діє із 17 листопада до 1 грудня 2023 року. Призовий фонд 1 млн гривень. Найвища винагорода за виявлену вразливість до 60 тис. грн, деталі в офіційних джерелах. Щоб

Army of Crypto Bug Hunt Details In the bug hunt for Army of Crypto, we're excited to offer rewarding opportunities for your contributions. Every legitimate bug reported on our Forums will be awarded with

The ONE Bridge launched its second testnet with bug bounties! *Medium Criticality Smart Contract Issues: $500-$1,000 USD *High Criticality Smart Contract or Backend Issues: $3,000-$10,000 USD #GlitterFinance

The DeFi protocol ISSUAA has launched on testnet

Starbucks has recently addressed a critical vulnerability affecting its mobile platform. The bug, upon exploitation, could severely threaten the platform security as it allowed code execution attacks.

Basecamp has recently disclosed a critical vulnerability that could allow remote code execution attacks. Fortunately, Basecamp has already deployed a fix and the bug no more exists. Critical Basecamp RCE

After years of running private vulnerability disclosure, Basecamp has now launched their bug bounty program to the public. All bug bounty hunters can participate in this program via HackerOne. Basecamp

Amidst the US-China-TikTok tussle and security snafus, the Chinese video-sharing app has taken an important step. Specifically, TikTok has launched a dedicated bug bounty program on the popular platform

GitLab has addressed a security vulnerability that could have exposed private groups. The flaw existed in the Elasticsearch API that continued to show code after transferring GitLab public groups to private.

Taking a bold step towards recognizing the efforts of white hat hackers, Facebook has launched a loyalty program. Dubbed Hacker Plus, this Facebook program will award additional payouts to dedicated hackers

After pioneering a bug rewards program for printer security, HP takes another step in this direction. As announced, HP has expanded its bug bounty program for printers to include cartridge security

A serious security flaw potentially affected the bug bounty platform HackerOne. Identified as pollution prototype vulnerability, the bug indirectly affected HackerOne as it existed in their marketing site

A teenage researcher was awarded $25,000 as bounty for discovering a flaw affecting Instagram. Specifically, he found a stored XSS vulnerability affecting the Instagram Spark AR Studio. Stored XSS In Instagram

A serious XSS vulnerability was discovered in Google Maps. Upon report, Google originally patched the vulnerability, however it was later discovered that the fix was trivial to bypass and as such Google

Slack has recently fixed a critical remote code execution vulnerability affecting its desktop apps. This RCE flaw posed a serious security threat to all Slack users. Slack Critical RCE Flaw Reportedly,

Taking another step towards security, the cybersecurity firm FireEye has publicly launched its bug bounty program. While the program initially started as a private program, the firm now invites all bug

Sony have recently launched their bug bounty program for PlayStation. Security researchers and bug bounty hunters can now report any bugs affecting PlayStation-related devices expecting great rewards.