weakness in Misconfiguration and Insecure Design
Misconfiguration
83 disclosed reports · $43,774 paid
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
- reports
- 83
- paid a bounty
- 12
Every one of the 83 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Spring Actuator endpoints publicly available and broken authentication
- Internal Access to Hackerone confluence Docs
- Ability To Delete User(s) Account Without User Interaction
- Spring Actuator endpoints publicly available, leading to account takeover
- Session Cookie Leakage via Static Header Field in WebViewerFragment
- Wordpress Takeover using setup configuration at http://████.edu [HtUS]
- Mass account takeover!
- Exposed Cortex API at https://cortex-ingest.shopifycloud.com/
- Cross-origin resource sharing misconfig | steal user information
- Complete Admin account takeover due to PhpDebugBar turned on in Uber's production server
- Subdomain takeover in Gitlab pages
- Subdomain takeover on one of the subdomain under mozaws.net
- Subdomain takeover on a subdomain under firefox.com
- Remove obsolete domain from handbook subdomain
- Unauthenticated API allows reading, writing to and deleting any user's private chat history on ████████
- [ addons-preview-cdn.mozilla.net ] A subdomain takeover is available via unregistered domain in Fastly
- Register & create a ticket as somebody else on HackerOne Support
- Graphql introspection is enabled and leaks details about the schema
- 2M Reports on HackerOne Celebration! - Ability to bulk-submit many reports.
- Subdomain takeover on one of the subdomains under mozaws.net
- phpinfo() exposed on ██████████
- RC Between GitHub's Repo Update REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention
- RC Between GitHub's Repo Transfer REST API and updateTeamsRepository GraphQL Mutation Results in Covert and Persistent Admin Access Retention
- Subdomain takeover on one of the subdomain under mozaws.net
- Unauthenticated Varnish Cache Purge
- Subdomain takeover on one of the subdomain under mozaws.net
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.