Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|
| protocol & Ports are not shown in third-party site redirect warning page#459286 | Valid | Open Redirect | Low | 2019-01-11 | – | 14 |
| Open redirect in semrush.com#716976 | Valid | Open Redirect | Low | 2019-10-25 | – | 26 |
| Open Redirect#311330 | Valid | Open Redirect | Low | 2018-12-07 | – | 28 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (2,942 analysed so far), which can be wrong. Data as of 2026-11-15.