TGViewer
Channel Public Channel
Bug Bounty Channel

Bug Bounty Channel

@bug_bounty_channel

All bug bounties here.
Open in Telegram
Subscribers
14.7K
Photos
2
Videos
0
Links
11.7K
Recent Posts 20 shown
Post #11800 188
🏦 curl Report
📝 Title: Explicit NO\_PROXY /0 CIDR rules fail to bypass HTTP proxy for IP-literal requests
🔍 Reporter: bootherr (Bootherr)

📋 Details:
└ 📊 Status: informative
└ ⚡ Severity: Low
└ 🎯 CWE: Information Exposure Through Sent Data
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-17 09:44:04 UTC
└ 📝 Created: 2026-10-14 21:53:32 UTC
HackerOne curl disclosed on HackerOne: Explicit NO_PROXY /0 CIDR rules fail... ## Summary: With an HTTP proxy configured, I found that curl sends IPv4 address-literal requests through it with `NO_PROXY=0.0.0.0/0`, and IPv6 address-literal requests through it with...
Post #11799 186
🏦 curl Report
📝 Title: libcurl RTSP \`CURLOPT\_CRLF\` conversion allows a request body to become a second RTSP request
🔍 Reporter: revolik (vlad)

📋 Details:
└ 📊 Status: informative
└ ⚡ Severity: Low
└ 🎯 CWE: Improper Input Validation
└ 🔢 CVE: CVE-2026-87864

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-17 09:44:22 UTC
└ 📝 Created: 2026-10-14 10:43:39 UTC
HackerOne curl disclosed on HackerOne: libcurl RTSP `CURLOPT_CRLF` conversion... # AI WAS USED IN THE PROCESS OF IDENTIFYING THIS VULNERABILITY. ## The vulnerability was tested manually and the report was carefully read. # Suggested severity Low # Affected version curl...
Post #11798 258
🏦 AWS VDP Report
⚡ Title: Unauthenticated go-httpbin servers : Leads to Cookie Tossing on \*.aws.dev and Open Redirect
🔍 Reporter: notnotnotveg (notnotnotveg)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Medium
└ 🎯 CWE: Missing Authentication for Critical Function
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-16 21:35:28 UTC
└ 📝 Created: 2026-08-24 21:32:10 UTC
HackerOne AWS VDP disclosed on HackerOne: Unauthenticated go-httpbin servers... **Description:** The unauthenticated go-httpbin instance exposes multiple endpoints that accept attacker-controlled input without appropriate validation. Two issues were identified: 1....
  • ❤ 1
Post #11797 311
🏦 IBM Report
❓ Title: SQL Injection vulnerability found on IBM.com subdomain
🔍 Reporter: 570rm_ (570rm)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Not Specified
└ 🎯 CWE: SQL Injection
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-16 15:44:06 UTC
└ 📝 Created: 2026-05-12 15:55:15 UTC
HackerOne IBM disclosed on HackerOne: SQL Injection vulnerability found on... SQL Injection vulnerability found on IBM.com subdomain was reported to IBM, analyzed and has been remediated. Thank you to our external researcher @570rm_.
  • ❤ 2
  • 🔥 1
Post #11796 350
🏦 Weblate Report
⚡ Title: Memory exhaustion \(DoS\) via unbounded file read in \`EncodingDiscovery.detect\_encoding\(\)\`
🔍 Reporter: sumit-sabhaya (0xsumit)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Medium
└ 🎯 CWE: Uncontrolled Resource Consumption
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-16 10:08:54 UTC
└ 📝 Created: 2026-09-14 11:42:59 UTC
HackerOne Weblate disclosed on HackerOne: Memory exhaustion (DoS) via... ## Summary `EncodingDiscovery.detect_encoding()` in `translation_finder/discovery/base.py` passes the raw file handle to `charset_normalizer.from_fp()`, which internally does...
  • ❤ 1
  • 👍 1
Post #11795 329
🏦 curl Report
📝 Title: TFTP accepts a first response from an IP other than the requested server
🔍 Reporter: sushiikan (No name)

📋 Details:
└ 📊 Status: not-applicable
└ ⚡ Severity: Low
└ 🎯 CWE: Man-in-the-Middle
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-16 07:25:36 UTC
└ 📝 Created: 2026-10-10 20:24:39 UTC
HackerOne curl disclosed on HackerOne: TFTP accepts a first response from an... ### Summary: When curl sends a TFTP request to the IP in the URL, it accepts the first valid response from any source IP and pins that sender as the transfer peer. A host that can get UDP packets...
  • ❤ 1
Post #11794 344
🏦 curl Report
⚡ Title: HTTP/1.1 connection reuse returns unsolicited server data as the next request's response \(regression in 8.22.0\)
🔍 Reporter: 1rhino2 (1rhino2)

📋 Details:
└ 📊 Status: informative
└ ⚡ Severity: Medium
└ 🎯 CWE: HTTP Request Smuggling
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 21:07:40 UTC
└ 📝 Created: 2026-10-08 19:56:43 UTC
HackerOne curl disclosed on HackerOne: HTTP/1.1 connection reuse returns... Since 8.22.0 libcurl reuses an idle HTTP/1.1 connection that already has unread bytes waiting on it, as long as the pool health check ran less than a second ago, and those bytes are then returned...
  • ❤ 2
Post #11793 351
🏦 Basecamp Report
⚡ Title: Open redirect on app.hey.com bypasses HEY desktop's internal-origin allowlist and loads attacker content inside a HEY BrowserWindow
🔍 Reporter: nasrysami (NasrySami)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Medium
└ 🎯 CWE: Open Redirect
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 18:00:06 UTC
└ 📝 Created: 2026-08-27 03:58:33 UTC
HackerOne Basecamp disclosed on HackerOne: Open redirect on app.hey.com... ## Summary `app.hey.com/proxy_image` compares the URL scheme case-sensitively. `https://` gets signed and proxied correctly. `HTTPS://` isn't recognised, so instead of proxying it, the endpoint...
  • ❤ 3
Post #11792 370
🏦 PortSwigger Web Security Report
⚡ Title: Burp Suite OpenAPI Event Log HTML injection triggers Windows SMB authentication
🔍 Reporter: gankd (Pedro Cruz)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Medium
└ 🎯 CWE: Not Specified
└ 🔢 CVE: CVE-2021-29416

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 14:08:30 UTC
└ 📝 Created: 2026-08-27 01:09:46 UTC
HackerOne PortSwigger Web Security disclosed on HackerOne: Burp Suite OpenAPI... ### Summary Burp Suite 2026.8 build 53343 inserts attacker-controlled text from an OpenAPI parser exception into the Event log HTML without encoding it. After the user invokes **Response → Save...
  • ❤ 2
Post #11791 380
🏦 RubyGems Report
⚠️ Title: An organization admin can create an attacker-controlled organization owner via the gem transfer flow
🔍 Reporter: timhaines (Tim Haines)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: High
└ 🎯 CWE: Improper Access Control - Generic
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 07:09:18 UTC
└ 📝 Created: 2026-08-14 03:59:20 UTC
HackerOne RubyGems disclosed on HackerOne: An organization admin can create... ### Summary An organization admin on RubyGems.org can create an attacker-controlled organization owner through the gem transfer flow, then use it to evict the organization's legitimate owners and...
  • ❤ 1
Post #11790 333
🏦 curl Report
⚡ Title: Cross-origin redirect reuses a pooled Negotiate-authenticated connection from an unrelated transfer
🔍 Reporter: silentsobs_ (ramesh)

📋 Details:
└ 📊 Status: not-applicable
└ ⚡ Severity: Medium
└ 🎯 CWE: Not Specified
└ 🔢 CVE: CVE-2026-1965

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 07:19:15 UTC
└ 📝 Created: 2026-08-31 03:51:19 UTC
HackerOne curl disclosed on HackerOne: Cross-origin redirect reuses a pooled... AI Disclosure: AI tools were used to assist with code analysis and drafting this report. All findings were independently investigated, verified against the source, and reproduced manually by me...
  • ❤ 1
Post #11789 290
🏦 curl Report
⚡ Title: One Strict-Transport-Security response header empties the victim's entire HSTS store, silently,
🔍 Reporter: xshubhamraj (Shubham Raj)

📋 Details:
└ 📊 Status: not-applicable
└ ⚡ Severity: Medium
└ 🎯 CWE: Cleartext Transmission of Sensitive Information
└ 🔢 CVE: CVE-2023-46219, CVE-2023-23915, CVE-2023-23914, CVE-2024-9681

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 07:19:30 UTC
└ 📝 Created: 2026-09-08 20:29:11 UTC
HackerOne curl disclosed on HackerOne: One Strict-Transport-Security... ## Summary One `Strict-Transport-Security` response header, from any HTTPS server the victim contacts, leaves the victim's on-disk HSTS store at **zero bytes**. Every host in it loses HSTS...
  • ❤ 1
Post #11788 274
🏦 curl Report
❓ Title: IMAP custom FETCH literals can spoof tagged responses and desynchronize reused connections
🔍 Reporter: giant_anteater (Anteater)

📋 Details:
└ 📊 Status: duplicate
└ ⚡ Severity: Not Specified
└ 🎯 CWE: Not Specified
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 07:19:44 UTC
└ 📝 Created: 2026-09-11 14:42:28 UTC
HackerOne curl disclosed on HackerOne: IMAP custom FETCH literals can spoof... ## Summary There is an IMAP parser vulnerability, related to a custom `FETCH` whose message set begins with a range or comma, `is_custom_fetch_listing()` causes `imap_state_listsearch_resp()` to...
  • ❤ 1
Post #11787 292
🏦 Nintendo Report
⚠️ Title: \[Switch\ Remote stack buffer overflow in the LDN/LP2P DHCP server leads to control-flow hijack](https://hackerone.com/reports/3770768)
🔍 Reporter: moehw (moe_hw)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: High
└ 🎯 CWE: Stack Overflow
└ 🔢 CVE: CVE-2026-82079

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-15 01:14:34 UTC
└ 📝 Created: 2026-05-30 03:59:00 UTC
HackerOne Nintendo disclosed on HackerOne: [Switch] Remote stack buffer... # Description A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using...
  • ❤ 1
Post #11786 306
🏦 curl Report
❓ Title: Retry-independent time-condition HTTP/2 UAF
🔍 Reporter: cmeister2 (Max Dymond)

📋 Details:
└ 📊 Status: duplicate
└ ⚡ Severity: Not Specified
└ 🎯 CWE: Use After Free
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-14 21:12:36 UTC
└ 📝 Created: 2026-09-15 23:31:20 UTC
HackerOne curl disclosed on HackerOne: Retry-independent time-condition... ## Relationship to the original report This is a supplemental trigger for [HackerOne report #4030333](https://hackerone.com/reports/4030333), not a claim of an unrelated vulnerability. It reaches...
  • ❤ 1
Post #11785 328
🏦 Essity Report
⚡ Title: Unauthenticated self-registration on ████████ grants full access to internal supplier procurement portal and vendor data
🔍 Reporter: ousski (Oussama)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Medium
└ 🎯 CWE: Missing Authentication for Critical Function
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-14 12:32:47 UTC
└ 📝 Created: 2026-09-29 23:32:38 UTC
HackerOne Essity disclosed on HackerOne: Unauthenticated self-registration on... ## Summary: The program i open scope so i did ASN enumeration and found the following subdomains is owned by Essity ████████ . while checking the JavaScript file found that there is endpoint hidden...
  • ❤ 1
  • 🔥 1
Post #11784 312
🏦 Weblate Report
📝 Title: Uncaught RecursionError crash in translation-finder \(deep directory tree DoS\)
🔍 Reporter: sumit-sabhaya (0xsumit)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Low
└ 🎯 CWE: Uncontrolled Resource Consumption
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-14 11:53:42 UTC
└ 📝 Created: 2026-09-11 17:41:52 UTC
HackerOne Weblate disclosed on HackerOne: Uncaught RecursionError crash in... **Type:** Denial of Service (Availability) **Severity:** Low-Medium (CVSS 3.7-5.5 depending on access) **Affected:** WeblateOrg/translation-finder v3.4.1, commit f5f8bb5 (current main) ##...
Post #11783 277
🏦 Mozilla Report
⚠️ Title: Stored XSS on the public Pontoon dashboards: the latest-activity tooltip re-parses a contributor's account address as HTML
🔍 Reporter: timhaines (Tim Haines)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: High
└ 🎯 CWE: Cross-site Scripting \(XSS\) - Stored
└ 🔢 CVE: None

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-14 08:12:57 UTC
└ 📝 Created: 2026-09-01 23:54:12 UTC
HackerOne Mozilla disclosed on HackerOne: Stored XSS on the public Pontoon... ## Summary Pontoon's latest-activity tooltip on its public dashboards built its markup by concatenating contributor-supplied `data-*` values into a string and handing it to jQuery's `.after()`....
  • 🔥 1
Post #11782 250
🏦 curl Report
⚡ Title: CVE-2026-87866: wolfSSL public-key pinning bypass
🔍 Reporter: argareksapatii (nobcoder)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: Medium
└ 🎯 CWE: Improper Certificate Validation
└ 🔢 CVE: CVE-2026-87866

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-14 07:33:26 UTC
└ 📝 Created: 2026-09-02 07:42:42 UTC
HackerOne curl disclosed on HackerOne: CVE-2026-87866: wolfSSL public-key... ## Summary curl 8.22.0 built with wolfSSL can accept a `CURLOPT_PINNEDPUBLICKEY` hash for a key the TLS peer does not possess. wolfSSL completes the TLS handshake using public key **A** from a...
Post #11781 196
🏦 curl Report
📋 Title: CVE-2026-92388: FTP wildcard write callback mixup
🔍 Reporter: giant_anteater (Anteater)

📋 Details:
└ 📊 Status: resolved
└ ⚡ Severity: None
└ 🎯 CWE: Not Specified
└ 🔢 CVE: CVE-2026-92388

⏰ Timeline:
└ 🔓 Disclosed: 2026-10-14 07:33:44 UTC
└ 📝 Created: 2026-09-11 16:27:00 UTC
HackerOne curl disclosed on HackerOne: CVE-2026-92388: FTP wildcard write... Hi all, A failed FTP wildcard `LIST` leaves `data->set.fwrite_func` pointing at libcurl's internal listing parser and `data->set.out` pointing at the easy handle itself, because the code path that...
Older posts →

About this channel

How can I read @bug_bounty_channel without a Telegram account?
TGViewer shows the public web preview Telegram publishes for Bug Bounty Channel: recent posts, photos, videos and the subscriber count, with no app, login or account.
How many subscribers does Bug Bounty Channel have?
Bug Bounty Channel (@bug_bounty_channel) has 14.7K subscribers on Telegram, refreshed roughly every 30 minutes.
Does Bug Bounty Channel know I viewed it here?
No. Public channel previews carry no viewer identity, and TGViewer has no accounts or tracking of what you look up.
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →