Intel · bug bounty
Disclosed bug bounty reports
Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.
SortMost upvoted
WeaknessFile and Path Handling
- Any class
- Cross-site Scripting19
- Cross-Site Request Forgery6
- Open Redirect1
- SQL Injection1
- Command and Code Injection19
- Injection and Smuggling1
- File and Path Handling6
- Memory Corruption4
- Denial of Service2
- Input Validation and Logic1
- Misconfiguration and Insecure Design4
- Cryptography2
- Information Disclosure4
- Authentication9
- Access Control11
- No weakness recorded8
6 of 15,219 reports · 227 analysed so far
- #260420Valid[dev-nightly.ubnt.com] Local File ReadingUbiquiti Inc. · File and Path Handling · 2017–31votes
- #229622ValidDirectory traversal at https://nightly.ubnt.comUbiquiti Inc. · File and Path Handling · 2017–26votes
- #73480ValidArbritrary file Upload on AirMaxUbiquiti Inc. · File and Path Handling · 2016–21votes
- #330051ValidUniFi Video Server web interface admin user Firmware Update path traversal leading to local system compromiseUbiquiti Inc. · File and Path Handling · 2020–11votes
- #329770ValidUniFi Video Server web interface Configuration Restore path traversal leading to local system compromiseUbiquiti Inc. · File and Path Handling · 2018–11votes
- #129641ValidUniFi Video Server - Arbitrary file upload as SYSTEMUbiquiti Inc. · File and Path Handling · 2018–10votes
The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.