The bounty board for serious security researchers. Post vulnerabilities, claim rewards.
Posted 12 hours ago
Security Bounty Platform
Unparameterized query in the search endpoint allows arbitrary SQL execution.
Anti-CSRF tokens are not validated on state-changing POST endpoints.
Stack traces with internal paths exposed in production error responses.