Skip to content
BackEsc
Sign in

weakness in Command and Code Injection

Command Injection - Generic

234 disclosed reports · $161,440 paid

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.

reports
234
paid a bounty
36

Every one of the 234 is a mark on the map. Named now: 1 to 26, most upvoted first.

  1. H1514 Remote Code Execution on kitcrm using bulk customer update of Priority Products#422944Shopify · 830 votes
  2. Remote Code Execution on www.semrush.com/my_reports on Logo upload#403417Semrush · 824 votes
  3. Git flag injection - local file overwrite to remote code execution#658013GitLab · $12,000 · 777 votes
  4. Privilege Escalation From user to SYSTEM via unauthenticated command execution#544928Ubiquiti Inc. · 553 votes
  5. BAD Code !#180074Paragon Initiative Enterprises · 549 votes
  6. Local files could be overwritten in GitLab, leading to remote command execution#587854GitLab · $12,000 · 542 votes
  7. Remote code execution on Basecamp.com#365271Basecamp · $5,000 · 417 votes
  8. Remote Command Execution via Github import#1679624GitLab · $33,510 · 392 votes
  9. RCE via the DecompressedArchiveSizeValidator and Project BulkImports (behind feature flag)#1609965GitLab · $33,510 · 387 votes
  10. RCE by command line argument injection to `gm convert` in `/edit/process?a=crop`#212696Imgur · 229 votes
  11. Test-scripts for postgis in mason-repository using unsafe unzip of content from unclaimed bucket creates potential RCE-issues#329689Mapbox · 209 votes
  12. RCE of Burp Scanner / Crawler via Clickjacking#1274695PortSwigger Web Security · $3,000 · 172 votes
  13. Git flag injection leading to file overwrite and potential remote code execution#653125GitLab · $3,500 · 169 votes
  14. JMX RMI command injection on 195.211.131.82(Mail.ru Gaming)#703910Mail.ru · $2,000 · 163 votes
  15. $50 million CTF Writeup#51466450m-ctf · 152 votes
  16. Path traversal, to RCE#733072GitLab · $12,000 · 142 votes
  17. Send arbitrary PUT requests when user clicks on a link#824689GitLab · 135 votes
  18. Apache Flink RCE via GET jar/plan API Endpoint#1418891Aiven Ltd · $6,000 · 134 votes
  19. Admin Panel Accessed (OAuth Bypassed )#294911Mapbox · $4,000 · 133 votes
  20. Git flag injection - Search API with scope 'blobs'#682442GitLab · $7,000 · 130 votes
  21. Remote Code Execution and AWS IAM Credentials Exfiltration in https://████████/#2083771U.S. Dept Of Defense · 114 votes
  22. Insecure Bundler configuration fetching internal Gems (okra) from Rubygems.org#1104874Basecamp · $5,000 · 102 votes
  23. No SearchEngine sanatizing can lead to command injection#495382Notepad++ · 99 votes
  24. [insideok.ru] Remote Command Execution via file upload.#666716ok.ru · 98 votes
  25. LOGJ4 VUlnerability [HtUS]#1624137U.S. Dept Of Defense · $1,000 · 94 votes
  26. Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via RCE in ghe-update-check#2325023GitHub · 88 votes

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in