BUG BOUNTY WRITEUPS

Browse by bug type

Pick a vulnerability class or platform to see every public report and writeup we've indexed for it, newest first. The numbers show how many are in each.

Vulnerability types

Broken access control 452XSS 310Information disclosure 298RCE 204Authentication bypass 171Memory corruption 162Denial of service 143IDOR 124Path traversal and LFI 112Business logic 91Account takeover 89SSRF 82SQL injection 77Command injection 67Exposed secrets and API keys 49OAuth and SSO 46CSRF 42Race conditions 422FA and OTP bypass 41Insecure deserialization 37Open redirect 36Subdomain takeover 25GraphQL 25HTTP request smuggling 25Prompt injection and AI 18Web cache poisoning 17File upload 17XXE 12Server-side template injection 8CORS misconfiguration 8

Platforms

Cloud 271API 194AI and LLM 53Web3 44Android 28iOS 7

Updated 2026-10-30. 2,810 writeups indexed from HackerOne disclosures, Pentester.land, Medium and researcher blogs.