Mars · disclosed reports
Information Disclosure
11 disclosed reports · $0 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Mars on HackerOne- reports
- 11
- paid a bounty
- 0
Every one of the 11 is a mark on the map. Named now: 1 to 11, most upvoted first.
- Unauthenticated Sensitive Information Disclosure on █████████ CVE-2021-38314
- Insecure API Response Leads to Disclosure of Hashed Passwords
- Publicly accessible `█████████` endpoint exposing internal user identifiers and email addresses
- Datadog api keys exposed can be used to do all the read and write access to the instance
- debug.log leaked [█████████]
- Users Data Exposure via Insecure Endpoint
- massive PII leakage for ███████
- Sensitive Information Exposed at █████
- ███████ - Publicly Accessible public_html Directory Exposing WordPress Configuration
- Customer Data Exposure via Insecure Endpoint of coupon
- Information Exposure Through Directory Listing
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.