PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

This Season, Give the Gift of Data-Driven Insight

hackerone.com | vulnerability | #bug-bounty | #xss | #data-analysis | #hackerone | #vulnerability-trends | #holiday-season
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne holiday data shows vulnerability reports rise in the two weeks after Thanksgiving, with XSS surging as online shopping peaks; XSS draws 27.9% of all bounties paid across industries.
Published
Collected

Related coverage

vulnerability · bugcrowd.com
Inside the Platform: Bugcrowd’s Vulnerability Trends Report
Bugcrowd's annual Inside the Platform report analyzes 2023 vulnerability submissions: higher P1 rewards and open scopes drove 10x more critical findings, while government submissions surged 151%.
vulnerability · bugcrowd.com
Priority One Report: Bug Bounties Paying out for Deep Testing
Bugcrowd's 2019 Priority One Report finds vulnerabilities and payouts nearly doubled year over year, with findings shifting toward systemic bug classes that automated scanners cannot catch.
vulnerability · hackerone.com
Spotlight on the Server-Side
SSRF ranks among HackerOne's top-paid vulnerabilities, with 196 reports in April alone. The article explains how cloud metadata services amplify impact, citing the Snapchat ad platform token leak.
vulnerability · bishopfox.com
Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113)
CVE-2026-58113 is a zero-interaction XSS in Siemens Teamcenter’s login redirect that let Bishop Fox silently reassign workflow delegation on a victim’s…
vulnerability · bishopfox.com
The State of Vulnerabilities in 2022
An analysis of publicly disclosed bug bounty reports from January–July 2022, surfacing the most frequent vulnerability types, severity trends, and top payouts, including a $29,000 GitLab file read.
vulnerability · yeswehack.com
How to find IDOR, stored XSS, information disclosure vulnerabilities – from our #1 hunters for these CWEs
Learn how to find IDOR, stored XSS and information disclosure vulnerabilities with practical tips and techniques from YesWeHack’s top-ranked bug hunters.
Back