PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[Guest Post] The next era of Bug Bounty at Pinterest

bugcrowd.com | research | #bug-bounty | #bugcrowd | #responsible-disclosure | #guest-post | #vrt | #pinterest
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Pinterest's product security team reviews its Bugcrowd program: 150+ valid reports and $35,000 paid since 2015, VRT-based rewards, and newly increased bounties across all severity tiers.
Published
Collected

Related coverage

research · bugcrowd.com
[Guest Post] Atlassian Adopts Bug Bounty Safe Harbor to Further Enable Researchers
Atlassian adopts a safe harbor clause in its Bugcrowd bounty rules, promising no legal action against good-faith researchers, after rewarding nearly 400 vulnerabilities worth $400,000 since 2017.
research · bugcrowd.com
Ethical Security Research on SecureDrop
After a QR-code malware incident aimed at journalists, SecureDrop and Bugcrowd publish ethical research rules — no malware on live instances, no DoS — and add rewards up to $2,500 for valid findings.
research · bugcrowd.com
[Guest Blog] Calling All Bug Hunters: Sophos Teams Up with Bugcrowd
In a guest post, Sophos explains its Bugcrowd-powered responsible disclosure program, describing how formal triage improved response times and how rewards range from kudos to swag.
research · blog.quarkslab.com
A Story About Three Bluetooth Vulnerabilities in Android
Recounts three Android Bluetooth vulnerabilities reported by Quarkslab in 2018: two went unanswered yet were fixed later (one rated Critical RCE), plus disclosure-process notes.
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
research · projectdiscovery.io
PHP2Shell: finding and patching affected PHP
Two CVSS 9.2 bugs in the PHP runtime allow unauthenticated code execution; the patch is a package upgrade and a restart, and this guide shows how to find every PHP runtime you need to patch.
Back