跳到正文

本頁有繁體中文版。

切換到繁體中文

This page is available in English.

Switch to English
TGbox
随机漂流瓶
返回频道导航
提交收录

Bug Bounty ChannelTelegram 开发编程频道

@bug_bounty_channel

直达

Bug Bounty Channel（@bug_bounty_channel）是 TGbox 收录的 Telegram 开发编程频道，目前有 14,656 名订阅者，创建于 2016年8月20日，活跃度为非常活跃，内容以英语为主。

频道简介与描述自动翻译

所有的Bug bounties在这里。

在 App 中打开网页版 t.me

订阅
14,656
创建时间
收录时间
活跃度
非常活跃

成员趋势

– ·7 次采样

近 7 天
−28
近 30 天
−102
14,78714,656

最近消息平均阅读 263阅读率 1.8%

  1. 274 次浏览

    🏦 MariaDB Report ⚡ Title: Connector/C++ ignores allowMultiQueries and injects savepoint names into SQL 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: SQL Injection └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 11:40:48 UTC └ 📝 Created: 2026-07-26 00:59:38 UTC

    展开全文

  2. 248 次浏览

    🏦 MariaDB Report ⚡ Title: Connector/C++ aborts client process on server session-tracking packet via std::stoi 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Uncontrolled Resource Consumption └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 11:40:31 UTC └ 📝 Created: 2026-07-26 01:30:04 UTC

    展开全文

  3. 218 次浏览

    🏦 MariaDB Report ⚡ Title: Connector/C++ string escaper re-escapes its own output, enabling SQL injection 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: SQL Injection └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 11:39:07 UTC └ 📝 Created: 2026-07-26 00:20:07 UTC

    展开全文

  4. 197 次浏览

    🏦 MariaDB Report ⚡ Title: Connector/ODBC: MADB\_Stmt::ArrayOffset is not reset when an exception unwinds out of MADB\_StmtExecute, so the next paramset reads out of bounds 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Out-of-bounds Read └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:36:47 UTC └ 📝 Created: 2026-08-06 09:50:59 UTC

    展开全文

  5. 189 次浏览

    🏦 MariaDB Report ⚡ Title: Connector/ODBC: SqlwcsOctetLen sizes UTF-16 with a byte-oriented helper, reading past the caller's buffer and sending client memory to the server 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Out-of-bounds Read └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:36:07 UTC └ 📝 Created: 2026-08-06 09:45:22 UTC

    展开全文

  6. 195 次浏览

    🏦 MariaDB Report ⚡ Title: r2dbc-mariadb: server message accepted with no command in flight desynchronises the connection and serves one user's rows to another 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Information Disclosure └ 🔢 CVE: CVE-2026-55859, CVE-2026-55860 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:35:53 UTC └ 📝 Created: 2026-08-06 09:42:36 UTC

    展开全文

  7. 209 次浏览

    🏦 MariaDB Report ⚡ Title: Connector/ODBC injects unquoted column names into positioned DELETE and UPDATE via MADB\_DynStrGetWhere 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: SQL Injection └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:35:31 UTC └ 📝 Created: 2026-07-26 19:08:35 UTC

    展开全文

  8. 266 次浏览

    🏦 MariaDB Report ⚡ Title: Connector/ODBC SQLGetDescRec treats descriptor handle as statement handle, heap OOB write on every call 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Type Confusion └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:35:06 UTC └ 📝 Created: 2026-07-26 14:26:05 UTC

    展开全文

  9. 309 次浏览

    🏦 MariaDB Report ⚡ Title: Stack buffer overflow in 9 of 10 Connector/ODBC catalog functions via unbounded name 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Stack Overflow └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:34:42 UTC └ 📝 Created: 2026-07-26 14:18:40 UTC

    展开全文

  10. 317 次浏览

    🏦 MariaDB Report ❓ Title: Connector/C TLS auth-switch bypass exposes plaintext password on hostname verification failure 🔍 Reporter: mschorm (Michal Schorm) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Not Specified └ 🎯 CWE: Improper Certificate Validation └ 🔢 CVE: CVE-2026-107819 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 17:31:54 UTC └ 📝 Created: 2026-07-28 15:19:54 UTC

    展开全文

  11. 359 次浏览

    🏦 MariaDB Report ❓ Title: Connector/C Out-of-bounds read from unterminated GSSAPI SPN in \`parse\_server\_packet\(\)\` 🔍 Reporter: mschorm (Michal Schorm) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Not Specified └ 🎯 CWE: Out-of-bounds Read └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 17:31:34 UTC └ 📝 Created: 2026-07-28 15:47:37 UTC

    展开全文

  12. 319 次浏览

    🏦 Weblate Report ⚡ Title: CPU-based Denial of Service in translation-finder via O\(N²\) per-result wildcard mask matching 🔍 Reporter: robin-sabhaya (Robin) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Uncontrolled Resource Consumption └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 09:51:14 UTC └ 📝 Created: 2026-10-05 17:39:11 UTC

    展开全文

  13. 299 次浏览

    🏦 WordPress Report ⚠️ Title: Unauthenticated private CSV export of Meetup organizer PII via broken authz check in WordCamp Reports 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 13:59:32 UTC └ 📝 Created: 2026-07-18 02:44:52 UTC

    展开全文

  14. 286 次浏览

    🏦 WordPress Report ⚡ Title: WordCamp Meta gpre: password-protected event RSVP list readable without password via /gpre/v1/.../rsvp-responses 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 14:18:33 UTC └ 📝 Created: 2026-09-14 20:40:59 UTC

    展开全文

  15. 339 次浏览

    🏦 WordPress Report ⚠️ Title: wordpress.org Rosetta: invite stores unvalidated role — Editor can assign site Administrator despite editable\_roles 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 14:18:24 UTC └ 📝 Created: 2026-08-15 16:39:03 UTC

    展开全文

  16. 385 次浏览

    🏦 WordPress Report ⚠️ Title: Instamojo CampTix: fail-open MAC + webhook Credit without binding payment to order 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 14:18:06 UTC └ 📝 Created: 2026-08-15 04:52:27 UTC

    展开全文

  17. 373 次浏览

    🏦 WordPress Report ⚠️ Title: Unauthenticated Disclosure of Private, Draft, and Password-Protected Post Content via Core Read-Permission Bypass in SCF Reference Fields 🔍 Reporter: 0x200notfound (0x200) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Information Disclosure └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 19:56:29 UTC └ 📝 Created: 2026-10-28 05:28:00 UTC

    展开全文

  18. 281 次浏览

    🏦 AWS VDP Report ⚡ Title: Unescaped consent-prompt renderer \(HTML\(\)\) enables concealed-approval OS command injection in strands-agents/tools use\_computer — RCE 🔍 Reporter: hope_no_dupe (peeker) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: OS Command Injection └ 🔢 CVE: CVE-2026-18733 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-06 14:33:16 UTC └ 📝 Created: 2026-10-02 03:00:22 UTC

    展开全文

  19. 180 次浏览

    🏦 Weblate Report ⚡ Title: Billion laughs entity expansion in Qt .ts discovery: a crafted ~950 KB file forces ~55 MB of XML expansion per parse, cost scales with crafted file c 🔍 Reporter: sumit-sabhaya (0xsumit) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: XML Entity Expansion └ 🔢 CVE: CVE-2026-62326 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-07 07:46:29 UTC └ 📝 Created: 2026-10-07 16:46:52 UTC

    展开全文

  20. 20 次浏览

    🏦 curl Report ⚠️ Title: curl 8.23.0 keeps sending requests to an HTTP/3 backend after Alt-Svc: clear 🔍 Reporter: arizonya (Aaron Johnstone) 📋 Details: └ 📊 Status: informative └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-07 22:37:27 UTC └ 📝 Created: 2026-11-06 10:51:03 UTC

    展开全文
在 t.me 查看更多消息

相关频道推荐

Telegram Contests

在这里,我们宣布了Android Java、iOS Swift、JS、C/C++中的Telegram编码比赛。

BotNews

关于 Telegram Bot API 的官方消息来源. https://core.telegram.org/bots

Linuxgram 🐧

来自Linux世界的新闻和信息 linuxgr4m@gmail.com 如果你想支持Linuxgram❤️ - BTC: 15aVLQeNY18VAaoBXPgLFA4wfwJnecbjC1

Demo Store

这个测试商店拥有最异国情调的想象性商品,没有钱可以买到,所以你可以测试Telegram Payments 2.0如何工作,而不花一分钱。

VPS信号旗播报

VPS新闻频道，VPS信号旗是即时发布简要讯息的小组织，关注VPS和通信自由。为你甄选最具价值的信息，提供业界热点新闻调查。 🌞 讨论群组：https://t.me/vpsxinhaoqi 🏛 评论规则：https://t.me/xhq_rule 🙋 投稿交谈：https://t.me/PandasChatBot

相关群组推荐

海外华人聚乐部✨

​欢迎加入【海外华人聚乐部】！这里聚集了各地优质华人资源，旨在搭建合规、高效的资讯与资源共享平台。 ​规则：禁止发布任何违法违规、电诈、网赌等不良广告。让我们携手打造正规、诚信的海外华人圈子。

Kali / BlackArch Linux 中文交流

Every day, we change the world. 本群提倡有意义的发言，分享有价值的信息，例如技术讨论、安全资讯、新手教程等。 无用消息将被删除，离题请适度。 禁止交易、招募、求师收徒，提防上当受骗； 禁止社工、黑产、广告、政治、开车等，包括用户名和简介； 禁止 有问题不直接问、在吗有人吗有大佬吗、求求带带、拉我加我、懂的来、打招呼 等糟粕用语和行为； 禁止随意私聊他人； 禁止滥用机器人。 如有违反，将删除、警告或封禁。谢谢配合。 通用水群： @coder_ot

AdGuard 【中文】

adguard.com 官方网站链接。AdGuard信息反馈意见。中文！ 报告错误： agrd.io/report AdGuard微博：https://weibo.com/u/7457831289 加入AdGuard官方群！(最新消息、官方公告、更新发布时间等等) 请大家注意！ 请勿使用外语, 中文群仅使用汉语。 严禁NSFW、广告、灰产、政治话题等。 入群请提前私聊 @WatchdogVerifyBot 验证