Intel · bug bounty
Disclosed bug bounty reports
Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.
SortMost upvoted
12 of 15,219 reports · 227 analysed so far
- #1131465ValidPath traversal in Tempfile on windows OS due to unsanitized backslashesRuby · File and Path Handling · 2021–54votes
- #1104077ValidRound-trip instability in REXMLRuby · No weakness recorded · 2021–20votes
- #170548ValidRuby OpenSSL Library - IV Reuse in GCM ModeRuby · No weakness recorded · 2021–17votes
- #1178562Validimap: StartTLS stripping attack (CVE-2016-0772).Ruby · Cryptography · 2021–10votes
- #1145454Validlib/net/ftp.rb: trusting PASV responses allow client abuseRuby · Information Disclosure · 2021–9votes
- #1165748Informative'net/ftp': Uncontrolled Resource Consumption (Memory/CPU)Ruby · Denial of Service · 2021–8votes
- #745921ValidCode Injection Bug ReportRuby · Command and Code Injection · 2021–8votes
- #1161691ValidOS Command Injection in 'rdoc' documentation generatorRuby · Command and Code Injection · 2021–7votes
- #1158824InformativeOS Command Injection in '/lib/un.rb -- Utilities to replace common UNIX commands in Makefiles etc'Ruby · Command and Code Injection · 2021–4votes
- #980249InformativeNet::SMTP with tls allows forged certificates as long as the hostname matchesRuby · Cryptography · 2021–3votes
- #1090678N/ACommand injection in OptionParser.loadRuby · Command and Code Injection · 2021–1votes
- #898614InformativeDRb denial of service vulnerabilityRuby · Denial of Service · 2021–1votes
The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.