Bug bounty program · HackerOne
Most upvoted reports61
- #1419213ValidGrafana LFI on https://grafana.mariadb.orgMariaDB · File and Path Handling · 2022–73votes
- #3788482ValidStack Buffer Overflow in mariadb-dump quote_name() Allows Malicious Server to Execute Arbitrary Code on ClientMariaDB · Memory Corruption · 2026 · Critical–51votes
- #3897914ValidOut-of-bounds read in MariaDB .frm parsing enables RCE via vtable hijackingMariaDB · Memory Corruption · 2026 · High–43votes
- #3876430ValidMariaDB GRANT PROXY permits unauthorized authentication changes and administrator account takeoverMariaDB · Access Control · 2026 · High–35votes
- #3872239ValidConnector/J: malicious server crashes client JVM via unbounded result-set field-count allocation in ClientMessage.readPacketMariaDB · Denial of Service · 2026 · Medium–31votes
- #3896671ValidConnector/C Out-of-bounds read in `unpack_fields()` from short metadata fieldMariaDB · Memory Corruption · 2026–31votes
- #3678395ValidPath Traversal in mbstream ExtractMariaDB · File and Path Handling · 2026 · High–29votes
- #3766217Validlibmariadb ( mariadb-connector-c ): stack overflow via server-controlled field->length in prepared-statement codecMariaDB · Memory Corruption · 2026 · Medium–23votes
- #3782405ValidStack Buffer-Overflow in MariaDB Charset_collation_map_st::insert_or_replace()MariaDB · Memory Corruption · 2026–23votes
- #3867363ValidMariaDB HandlerSocket Improper Request Field-Count Validation Causes Server CrashMariaDB · Denial of Service · 2026 · Medium–23votes
Subdomains67
0 covered by the program's own scope · 0 first seen this week
Roots:mariadb.org 67
Name suggestsAnything
67 names
| Name | Scope | First seen |
|---|---|---|
| ai-plugins.mariadb.org | Not in the scope | 2026-11-14 |
| analytics.mariadb.org | Not in the scope | 2026-11-14 |
| archive.mariadb.orglegacy | Not in the scope | 2026-11-14 |
| s3.archive.mariadb.orgdata, legacy | Not in the scope | 2026-11-14 |
| badges.mariadb.org | Not in the scope | 2026-11-14 |
| bb01.mariadb.org | Not in the scope | 2026-11-14 |
| bb02.mariadb.org | Not in the scope | 2026-11-14 |
| bb03.mariadb.org | Not in the scope | 2026-11-14 |
| bb07.mariadb.org | Not in the scope | 2026-11-14 |
| blog.mariadb.org | Not in the scope | 2026-11-14 |
| buildbot.mariadb.org | Not in the scope | 2026-11-14 |
| ci.mariadb.orgci | Not in the scope | 2026-11-14 |
| deb.mariadb.org | Not in the scope | 2026-11-14 |
| dev.mariadb.orgdev | Not in the scope | 2026-11-14 |
| buildbot.dev.mariadb.orgdev | Not in the scope | 2026-11-14 |
| ci.dev.mariadb.orgci, dev | Not in the scope | 2026-11-14 |
| downloads.dev.mariadb.orgdev | Not in the scope | 2026-11-14 |
| minio.dev.mariadb.orgdata, dev | Not in the scope | 2026-11-14 |
| sponsors.dev.mariadb.orgdev | Not in the scope | 2026-11-14 |
| dnf.mariadb.org | Not in the scope | 2026-11-14 |
| download.mariadb.org | Not in the scope | 2026-11-14 |
| download-dev.mariadb.orgdev | Not in the scope | 2026-11-14 |
| downloads.mariadb.org | Not in the scope | 2026-11-14 |
| downloads-dev.mariadb.orgdev | Not in the scope | 2026-11-14 |
| downloads-staging.mariadb.orgstaging | Not in the scope | 2026-11-14 |
| ecohub.mariadb.org | Not in the scope | 2026-11-14 |
| feedback.mariadb.org | Not in the scope | 2026-11-14 |
| fi.mariadb.org | Not in the scope | 2026-11-14 |
| mirror.fi.mariadb.org | Not in the scope | 2026-11-14 |
| fiwiki.mariadb.org | Not in the scope | 2026-11-14 |
| foundation01.mariadb.org | Not in the scope | 2026-11-14 |
| ftp.mariadb.orgdata | Not in the scope | 2026-11-14 |
| git.mariadb.orggit | Not in the scope | 2026-11-14 |
| grafana.mariadb.orgmonitoring | Not in the scope | 2026-11-14 |
| hbm.mariadb.org | Not in the scope | 2026-11-14 |
| jira.mariadb.orgtools | Not in the scope | 2026-11-14 |
| kb.mariadb.org | Not in the scope | 2026-11-14 |
| lists.mariadb.org | Not in the scope | 2026-11-14 |
| mail.mariadb.orgmail | Not in the scope | 2026-11-14 |
| marina.mariadb.org | Not in the scope | 2026-11-14 |
| minio.mariadb.orgdata | Not in the scope | 2026-11-14 |
| mirmon.mariadb.org | Not in the scope | 2026-11-14 |
| mirror.mariadb.org | Not in the scope | 2026-11-14 |
| mirrors.mariadb.org | Not in the scope | 2026-11-14 |
| monitoring.mariadb.orgmonitoring | Not in the scope | 2026-11-14 |
| new.mariadb.org | Not in the scope | 2026-11-14 |
| www.new.mariadb.org | Not in the scope | 2026-11-14 |
| pad.mariadb.org | Not in the scope | 2026-11-14 |
| pass.mariadb.org | Not in the scope | 2026-11-14 |
| planet.mariadb.org | Not in the scope | 2026-11-14 |
| rpm.mariadb.org | Not in the scope | 2026-11-14 |
| s3bb.mariadb.org | Not in the scope | 2026-11-14 |
| mirror.sg.mariadb.org | Not in the scope | 2026-11-14 |
| smtp01.mariadb.orgmail | Not in the scope | 2026-11-14 |
| sponsors.mariadb.org | Not in the scope | 2026-11-14 |
| static.mariadb.org | Not in the scope | 2026-11-14 |
| test-faust.mariadb.orgtest | Not in the scope | 2026-11-14 |
| tools.mariadb.org | Not in the scope | 2026-11-14 |
| translate.mariadb.org | Not in the scope | 2026-11-14 |
| u003emonitoring.mariadb.org | Not in the scope | 2026-11-14 |
| u003eyum.mariadb.org | Not in the scope | 2026-11-14 |
| uni.mariadb.org | Not in the scope | 2026-11-14 |
| webdav.mariadb.org | Not in the scope | 2026-11-14 |
| websites.mariadb.org | Not in the scope | 2026-11-14 |
| www.mariadb.org | Not in the scope | 2026-11-14 |
| yum.mariadb.org | Not in the scope | 2026-11-14 |
| zabbix.mariadb.orgmonitoring | Not in the scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.