Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Program | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|---|
| Insecure Object Permissions for Guest User leads to access to internal documents!Analysed#1089583 | Valid | IBM | Authentication | Critical | 2022-07-15 | – | 15 |
| Listing of Amazon S3 Bucket accessible to any amazon authenticated user (metrics.pscp.tv)Analysed#278191 | Valid | X / xAI | Information Disclosure | – | 2017-11-19 | $140 | 36 |
| ssh: unprivileged users may hijack due to backdated ssh version open port found(███.unikrn.com)Analysed#257335 | Valid | Unikrn | File and Path Handling | Low | 2019-03-04 | $25 | 56 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report, where there is one, which can be wrong. Data as of 2026-11-15.