Intel · bug bounty
Disclosed bug bounty reports
Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.
SortMost upvoted
6 of 15,219 reports · 227 analysed so far
- #448524Validxmlrpc.php file is enable it will used for (DOS) and bruteforce attackFormAssembly · Denial of Service · 2018–31votes
- #220116ValidSSLv3 Poodle VulnerabilityFormAssembly · Misconfiguration and Insecure Design · 2018–20votes
- #690338Validscripts loader DOS vulnerabilityFormAssembly · Authentication · 2020–8votes
- #198851ValidXSS in api_v1FormAssembly · Cross-site Scripting · 2018–7votes
- #197253Validformassembly.com is vulnerable to padding-oracle attacks.FormAssembly · Cryptography · 2017–5votes
- #196989ValidXSS on username when register to proffesional accountFormAssembly · Cross-site Scripting · 2017–5votes
The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.