🧰 HackerOne

The items that name it 31

• In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
  articleas tools2026-10-30

  Platform through which Gadi Evron of Knostic reported the Cloudflare and SGLang cross-tenant leak

• Introducing the Cloudflare PHP Capture the Flag challenge
  articleas tools2026-10-27

  Platform hosting Cloudflare's Bug Bounty program, where participants sign up and submit private reports with PHP CTF in the title

• Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
  writeupas classification.key entities2026-10-26
• How bug bounty sharpens one researcher’s security skills
  articleas tools2026-10-22It is written here as HackerOne (platform where @r31n is found and where findings are reported to GitHub's bug bounty program).

  platform where @r31n is found and where findings are reported to GitHub's bug bounty program

• lee1981 (@lee1981b) on X
  advisoryas classification.technologies2026-10-13
• How one bug bounty researcher chooses the features they investigate
  articleas tools2026-10-08

  Platform through which researchers report bug bounty findings to GitHub

• Socket Joins New OpenJS Program to Fund Node.js Security Work
  articleas tools2026-09-25

  Platform used by Node.js and curl for accepting and triaging vulnerability reports

• Hackers breach OpenAI using Claude tools, gaining access to employee accounts and the company
  articleas classification.key entities2026-09-18
• BountySkiller
  repoas classification.technologies2026-08-27
• BOLA in the Wild
  articleas tools2026-08-21

  Bug bounty disclosure platform; source of the 200 publicly disclosed reports (tagged IDOR or Improper Access Control, Jan 2021–Jan 2026) analyzed for this research

• Grok chat history leak: Cryptographic Context Injection
  writeupas tools2026-08-20It is written here as HackerOne (xAI bug bounty program, used for the report).

  xAI bug bounty program, used for the report

• Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
  writeupas tools2026-08-17

  Vulnerability disclosure and bug bounty program used by Wiz to report the finding to Snowflake (report #3819931)

• What Is AI Pentesting and How Does It Work?
  articleas classification.technologies2026-07-27
• Bug Bounty Lab101
  repoas affected products2026-07-25

  bug bounty platform the workflow targets

• BountyForge
  repoas classification.technologies2026-07-22
• AWS Kiro RCE: Prompt Injection to Code Execution | Kodem
  writeupas tools2026-07-19

  Platform used to report the vulnerability to AWS through responsible disclosure

• Socket: Node.js Eyes Public Disclosure for AI-Flooded Security Reports
  articleas tools2026-07-08

  platform used for Node.js vulnerability reporting and triage

• Predicting MongoDB ObjectId continuously in Rocket.Chat
  writeupas tools2026-07-06

  Platform used to report and publicly disclose the vulnerability (report #3687142)

• Authentication Bypass in the default configuration phpBB
  writeupas tools2026-07-03

  Platform used to report the vulnerability to phpBB's VDP program (hackerone.com/phpbb)

• 10 year old critical vulnerability in phpBB affecting tens of millions of users across thousands of forums
  advisoryas classification.key entities2026-06-10
• The OpenSourceMalware Show #7
  talkas tools2026-06-03

  Bug bounty platform; changing its process to weight reports more based on researcher credibility, in part responding to a Microsoft incident that 'burned' a researcher

• elementalsouls/Claude-BugHunter
  repoas classification.technologies2026-05-22
• Anthropic Silently Patches Claude Code Sandbox Bypass
  articleas tools2026-05-20

  bug bounty program platform through which Guan reported the SOCKS5 sandbox bypass vulnerability to Anthropic

• Criminal Liabilities for Disclosure of IT Security Vulnerabilities
  videoas classification.key entities2026-05-20
• Second Time, Same Sandbox: Another Anthropic Claude Code Network Sandbox Bypass Enables Data Exfiltration
  writeupas tools2026-05-20

  Platform used to report the vulnerability to Anthropic's VDP (Report #3646509)

• H-mmer/pentest-agents
  repoas classification.technologies2026-05-18
• h1-brain
  repoas classification.technologies2026-05-06
• PatrikFehrenbach/h1-brain
  repoas classification.technologies2026-05-05
• CVE-2023-36631: Circumventing Windows Firewall controls with... Malwarebytes' Windows Firewall Control
  writeupas classification.technologies2023-06-21
• GitLab patches critical 9.9 AI Gateway template-sandbox-escape RCE (CVE-2026-90970)
  advisoryas classification.technologies
• awarexone/Agentic-Bug-Hunter
  repoas classification.technologies

In every workspace you can read 32