跳到正文

本頁有簡體中文版。

切換到簡體中文

This page is available in English.

Switch to English
TGbox
隨機漂流瓶
返回頻道導航
提交收錄

Bug Bounty ChannelTelegram 開發編程頻道

@bug_bounty_channel

直達

Bug Bounty Channel（@bug_bounty_channel）是 TGbox 收錄的 Telegram 開發編程頻道，目前有 14,656 名訂閱者，創建於 2016年8月20日，活躍度為非常活躍，內容以英文為主。

頻道簡介與描述自動翻譯

所有的Bug bounties在這裡。

在 App 中打開網頁版 t.me

訂閱
14,656
創建時間
收錄時間
活躍度
非常活躍

成員趨勢

– ·7 次採樣

近 7 天
−28
近 30 天
−102
14,78714,656

最近消息平均閱讀 263閱讀率 1.8%

  1. 274 次瀏覽

    🏦 MariaDB Report ⚡ Title: Connector/C++ ignores allowMultiQueries and injects savepoint names into SQL 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: SQL Injection └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 11:40:48 UTC └ 📝 Created: 2026-07-26 00:59:38 UTC

    展開全文

  2. 248 次瀏覽

    🏦 MariaDB Report ⚡ Title: Connector/C++ aborts client process on server session-tracking packet via std::stoi 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Uncontrolled Resource Consumption └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 11:40:31 UTC └ 📝 Created: 2026-07-26 01:30:04 UTC

    展開全文

  3. 218 次瀏覽

    🏦 MariaDB Report ⚡ Title: Connector/C++ string escaper re-escapes its own output, enabling SQL injection 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: SQL Injection └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 11:39:07 UTC └ 📝 Created: 2026-07-26 00:20:07 UTC

    展開全文

  4. 197 次瀏覽

    🏦 MariaDB Report ⚡ Title: Connector/ODBC: MADB\_Stmt::ArrayOffset is not reset when an exception unwinds out of MADB\_StmtExecute, so the next paramset reads out of bounds 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Out-of-bounds Read └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:36:47 UTC └ 📝 Created: 2026-08-06 09:50:59 UTC

    展開全文

  5. 189 次瀏覽

    🏦 MariaDB Report ⚡ Title: Connector/ODBC: SqlwcsOctetLen sizes UTF-16 with a byte-oriented helper, reading past the caller's buffer and sending client memory to the server 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Out-of-bounds Read └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:36:07 UTC └ 📝 Created: 2026-08-06 09:45:22 UTC

    展開全文

  6. 195 次瀏覽

    🏦 MariaDB Report ⚡ Title: r2dbc-mariadb: server message accepted with no command in flight desynchronises the connection and serves one user's rows to another 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Information Disclosure └ 🔢 CVE: CVE-2026-55859, CVE-2026-55860 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:35:53 UTC └ 📝 Created: 2026-08-06 09:42:36 UTC

    展開全文

  7. 209 次瀏覽

    🏦 MariaDB Report ⚡ Title: Connector/ODBC injects unquoted column names into positioned DELETE and UPDATE via MADB\_DynStrGetWhere 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: SQL Injection └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:35:31 UTC └ 📝 Created: 2026-07-26 19:08:35 UTC

    展開全文

  8. 266 次瀏覽

    🏦 MariaDB Report ⚡ Title: Connector/ODBC SQLGetDescRec treats descriptor handle as statement handle, heap OOB write on every call 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Type Confusion └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:35:06 UTC └ 📝 Created: 2026-07-26 14:26:05 UTC

    展開全文

  9. 309 次瀏覽

    🏦 MariaDB Report ⚡ Title: Stack buffer overflow in 9 of 10 Connector/ODBC catalog functions via unbounded name 🔍 Reporter: fg0x0 (Yalguun Tumenkhuu) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Stack Overflow └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 12:34:42 UTC └ 📝 Created: 2026-07-26 14:18:40 UTC

    展開全文

  10. 317 次瀏覽

    🏦 MariaDB Report ❓ Title: Connector/C TLS auth-switch bypass exposes plaintext password on hostname verification failure 🔍 Reporter: mschorm (Michal Schorm) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Not Specified └ 🎯 CWE: Improper Certificate Validation └ 🔢 CVE: CVE-2026-107819 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 17:31:54 UTC └ 📝 Created: 2026-07-28 15:19:54 UTC

    展開全文

  11. 359 次瀏覽

    🏦 MariaDB Report ❓ Title: Connector/C Out-of-bounds read from unterminated GSSAPI SPN in \`parse\_server\_packet\(\)\` 🔍 Reporter: mschorm (Michal Schorm) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Not Specified └ 🎯 CWE: Out-of-bounds Read └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-04 17:31:34 UTC └ 📝 Created: 2026-07-28 15:47:37 UTC

    展開全文

  12. 319 次瀏覽

    🏦 Weblate Report ⚡ Title: CPU-based Denial of Service in translation-finder via O\(N²\) per-result wildcard mask matching 🔍 Reporter: robin-sabhaya (Robin) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Uncontrolled Resource Consumption └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 09:51:14 UTC └ 📝 Created: 2026-10-05 17:39:11 UTC

    展開全文

  13. 299 次瀏覽

    🏦 WordPress Report ⚠️ Title: Unauthenticated private CSV export of Meetup organizer PII via broken authz check in WordCamp Reports 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 13:59:32 UTC └ 📝 Created: 2026-07-18 02:44:52 UTC

    展開全文

  14. 286 次瀏覽

    🏦 WordPress Report ⚡ Title: WordCamp Meta gpre: password-protected event RSVP list readable without password via /gpre/v1/.../rsvp-responses 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 14:18:33 UTC └ 📝 Created: 2026-09-14 20:40:59 UTC

    展開全文

  15. 339 次瀏覽

    🏦 WordPress Report ⚠️ Title: wordpress.org Rosetta: invite stores unvalidated role — Editor can assign site Administrator despite editable\_roles 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 14:18:24 UTC └ 📝 Created: 2026-08-15 16:39:03 UTC

    展開全文

  16. 385 次瀏覽

    🏦 WordPress Report ⚠️ Title: Instamojo CampTix: fail-open MAC + webhook Credit without binding payment to order 🔍 Reporter: 0xbs0d27 (0xBS0D27) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 14:18:06 UTC └ 📝 Created: 2026-08-15 04:52:27 UTC

    展開全文

  17. 373 次瀏覽

    🏦 WordPress Report ⚠️ Title: Unauthenticated Disclosure of Private, Draft, and Password-Protected Post Content via Core Read-Permission Bypass in SCF Reference Fields 🔍 Reporter: 0x200notfound (0x200) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: High └ 🎯 CWE: Information Disclosure └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-05 19:56:29 UTC └ 📝 Created: 2026-10-28 05:28:00 UTC

    展開全文

  18. 281 次瀏覽

    🏦 AWS VDP Report ⚡ Title: Unescaped consent-prompt renderer \(HTML\(\)\) enables concealed-approval OS command injection in strands-agents/tools use\_computer — RCE 🔍 Reporter: hope_no_dupe (peeker) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: OS Command Injection └ 🔢 CVE: CVE-2026-18733 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-06 14:33:16 UTC └ 📝 Created: 2026-10-02 03:00:22 UTC

    展開全文

  19. 180 次瀏覽

    🏦 Weblate Report ⚡ Title: Billion laughs entity expansion in Qt .ts discovery: a crafted ~950 KB file forces ~55 MB of XML expansion per parse, cost scales with crafted file c 🔍 Reporter: sumit-sabhaya (0xsumit) 📋 Details: └ 📊 Status: resolved └ ⚡ Severity: Medium └ 🎯 CWE: XML Entity Expansion └ 🔢 CVE: CVE-2026-62326 ⏰ Timeline: └ 🔓 Disclosed: 2026-11-07 07:46:29 UTC └ 📝 Created: 2026-10-07 16:46:52 UTC

    展開全文

  20. 20 次瀏覽

    🏦 curl Report ⚠️ Title: curl 8.23.0 keeps sending requests to an HTTP/3 backend after Alt-Svc: clear 🔍 Reporter: arizonya (Aaron Johnstone) 📋 Details: └ 📊 Status: informative └ ⚡ Severity: High └ 🎯 CWE: Improper Access Control - Generic └ 🔢 CVE: None ⏰ Timeline: └ 🔓 Disclosed: 2026-11-07 22:37:27 UTC └ 📝 Created: 2026-11-06 10:51:03 UTC

    展開全文
在 t.me 查看更多消息

相關頻道推薦

Telegram Contests

在這裡,我們宣佈了Android Java、iOS Swift、JS、C/C++中的Telegram編碼比賽。

BotNews

關於 Telegram Bot API 的官方消息來源. https://core.telegram.org/bots

Linuxgram 🐧

來自Linux世界的新聞和信息 linuxgr4m@gmail.com 如果你想支持Linuxgram❤️ - BTC: 15aVLQeNY18VAaoBXPgLFA4wfwJnecbjC1

Demo Store

這個測試商店擁有最異國情調的想像性商品,沒有錢可以買到,所以你可以測試Telegram Payments 2.0如何工作,而不花一分錢。

VPS信號旗播報

VPS新聞頻道，VPS信號旗是即時發佈簡要訊息的小組織，關注VPS和通信自由。為你甄選最具價值的信息，提供業界熱點新聞調查。 🌞 討論群組：https://t.me/vpsxinhaoqi 🏛 評論規則：https://t.me/xhq_rule 🙋 投稿交談：https://t.me/PandasChatBot

相關群組推薦

海外華人聚樂部✨

​歡迎加入【海外華人聚樂部】！這裡聚集了各地優質華人資源，旨在搭建合規、高效的資訊與資源共享平臺。 ​規則：禁止發佈任何違法違規、電詐、網賭等不良廣告。讓我們攜手打造正規、誠信的海外華人圈子。

Kali / BlackArch Linux 中文交流

Every day, we change the world. 本群提倡有意義的發言，分享有價值的信息，例如技術討論、安全資訊、新手教程等。 無用消息將被刪除，離題請適度。 禁止交易、招募、求師收徒，提防上當受騙； 禁止社工、黑產、廣告、政治、開車等，包括用戶名和簡介； 禁止 有問題不直接問、在嗎有人嗎有大佬嗎、求求帶帶、拉我加我、懂的來、打招呼 等糟粕用語和行為； 禁止隨意私聊他人； 禁止濫用機器人。 如有違反，將刪除、警告或封禁。謝謝配合。 通用水群： @coder_ot

AdGuard 【中文】

adguard.com 官方網站鏈接。AdGuard信息反饋意見。中文！ 報告錯誤： agrd.io/report AdGuard微博：https://weibo.com/u/7457831289 加入AdGuard官方群！(最新消息、官方公告、更新發布時間等等) 請大家注意！ 請勿使用外語, 中文群僅使用漢語。 嚴禁NSFW、廣告、灰產、政治話題等。 入群請提前私聊 @WatchdogVerifyBot 驗證