Deck app: Invalid tag color is accepted by API and breaks frontend UI
HackerOneNextcloud2026-10-20
Web, API, Cloud
Low
BUG BOUNTY WRITEUPS
Business logic writeups
Bugs scanners can't find. Price manipulation, payment bypasses, coupon abuse and workflows that skip a step they shouldn't.
91 reports and writeups from 2024 to 2026. 58 carry a severity from the disclosing platform, 8 of them rated High or Critical. Last updated 2026-10-30.
Latest Business logic reports
Search and filter all writeupsApplication Data Hiding via Invalid `iconName` Causing Frontend Crash in Nextcloud Tables
HackerOneNextcloud2026-10-20
Web, Cloud
Low
Critical Business Logic Vulnerability in E-commerce Checkout
Medium2026-10-13
Web
Not rated
The Tiny Project Logic Bug That Unlocked Enterprise
Medium2026-09-30
Web
Not rated
Web
Not rated
Missing applicability validation allows non-applicable HTTPS RR to reach ECH processing
HackerOnecurl2026-09-26
Web
Medium
Improper input validation in emoji field leads to sidebar UI denial of service
HackerOneNextcloud2026-09-20
Web, Cloud
Low
Approval app's file-freshness check can be bypassed by omitting the etag parameter, allowing approval of unreviewed file changes
HackerOneNextcloud2026-09-17$150 bounty
Web, Cloud
Medium
Authenticated `unsigned_txset` change spoof lets a malicious hot wallet steal cold-signer change
HackerOneMonero2026-09-16
Web3
High
Payment Bypass Flaw in TechPSC HUB
InfoSec Write-ups2026-09-08
Web
Not rated
Missing Duplicate Check allowing Multiple Retention Rules per System Tag
HackerOneNextcloud2026-09-05
Web, Cloud
Low
monero:// deeplink parsing accepts tx_amount=(all) and can trigger send-all transaction mode
HackerOneMonero2026-08-20
Android, Web3
Medium
Loss of multisig funds through single malicious participant's deliberate deception
HackerOneMonero2026-08-20
Web3
Medium
`check_reserve_proof` counts duplicate entries: one output can inflate `total`
HackerOneMonero2026-08-05
Web3
Medium
Exceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation process
HackerOneSingleStore2026-07-01
Web
Low
CVE-2026-8932: incomplete mTLS config matching in conn reuse
HackerOnecurl2026-06-24
Web
Low
curl/libcurl vulnerable to TLS truncation attacks
HackerOnecurl2026-06-10
Web
Medium
Proxy CONNECT response poisoning via authentication retry in cf-h1-proxy.c (libcurl)
HackerOnecurl2026-06-03
Web
Medium
TLS peer-verification bypass via mid-transfer ssl_config mutation
HackerOnecurl2026-05-19
Web
Not rated
CURLOPT_PROXY_CAINFO_BLOB silently activates native CA store on Apple builds
HackerOnecurl2026-05-19
Web
Not rated
TLS verifyhost bypass in rustls, mbedTLS, and wolfSSL when verifypeer=0
HackerOnecurl2026-05-19
Web
Not rated
Schannel custom-CA path skips Extended Key Usage enforcement
HackerOnecurl2026-05-19
Web
Not rated
cookie: case-insensitive path comparison in replace_existing() allows cookie eviction across distinct paths
HackerOnecurl2026-05-18
Web
Not rated
rustls backend silently ignores CURLOPT_CRLFILE when native CA store is active
HackerOnecurl2026-05-18
Web
Not rated
Trailing-dot IPv4 URL bypasses IP-address guard, allows wildcard DNS SAN match
HackerOnecurl2026-05-17
Web
Not rated
Non-premium user can disable Ads in japanese version of dic.pixiv.net
HackerOnepixiv2026-04-27$3,000 bounty
Web
High
Password Strength Policy Bypass via Server-Side Validation Flaw
HackerOneTucows (VDP)2026-03-27
Web
Low
Business Logic Bypass Allows Setting “Read Access” Role Without Pro Plan Subscription
HackerOneLovable VDP2026-03-16
Web
Medium
Authorization Bypass in Starknet Snap via enableAuthorize parameter leads to unauthorized transaction signing
HackerOneMetaMask2026-03-13$350 bounty
Web
Medium
Unlimited Reuse of Coupon Code Allows Free Shipping on All Orders on ██████████
HackerOneAWS VDP2026-02-09
Web, Cloud
Low
Create account without auth via response manipulation
HackerOneU.S. Dept Of Defense2026-01-12
Web
Low
PROTOCOL-LEVEL: Persistent UDP Amplification and Cache Poisoning via Alt-Svc Logic Flaw
HackerOnecurl2026-01-02
Web
High
WebSocket Logic Error: Control Frame (PING/PONG) Starvation causes Connection Drop (DoS) during large transfers
HackerOnecurl2025-12-28
Web
Medium
A logic error in detect_proxy caused truncation of environment variable names for long protocol schemes.
HackerOnecurl2025-12-21
Web
Low
Lack of minimum value bid wheel verification on customer_bid in Rental Trips
HackerOneBykea2025-11-20
Web
Low
Customer can cancel a individual booking in a batch, causing locking of partner.
HackerOneBykea2025-11-20
Web
Medium
Improper sanitisation of input in the settings could cause DoS
HackerOneRevive Adserver2025-11-19
Web
Low
Exceeding the limit of Workspaces via Race Condition
HackerOneSingleStore2025-10-06
Web
Medium
Exposing debug.log file leads to server full path disclosure
HackerOneNextcloud2025-09-29
Web, Cloud
Medium
Business Logic Error – Bypass of OTP Verification During Signup on hover.com
HackerOneTucows (VDP)2025-09-02
Web
Not rated
Order More Than Maximum Allowed Quantity
HackerOneMars2025-09-02
Web
Not rated
IDOR - Scheduled data leak to other accounts By "projectID"
HackerOneSingleStore2025-08-12
Web
Medium
Exceed the maximum number of subscribers using Race Condition
HackerOneSingleStore2025-08-12
Web
Low
curl ASSERTs when accessing an LDAP URL
HackerOnecurl2025-07-22
Web
Not rated
Not a Vuln: Race Condition Allows Creation of Multiple Organizations with the Same Name
HackerOneWakaTime2025-07-14
Web
Not rated
curl --continue-at confusion
HackerOnecurl2025-07-07
Web
Medium
Unlock underage blocked app without support interaction using airplane mode
HackerOneTools for Humanity2025-06-30$300 bounty
Web
Low
Making transfer v2 channel unupgradable through the forwarding
HackerOneCosmos2025-06-30
Web
Low
Replacing ICA active channel during the upgrade and a bit more
HackerOneCosmos2025-06-30
Web
Low
Bypassing Bronze Partner Wallet Restriction to Accept Trips with Negative Balance
HackerOneBykea2025-06-13
Web
Medium
Race condition on add 1 free domain
HackerOneAutomattic2025-05-09
Web
Medium
Race Condition in Folder Creation Allows Bypassing Folder Limit
HackerOneDust2025-04-29
Web
Medium
User Limit Bypass via Pending Invitations in Workspace System
HackerOneDust2025-04-29
Web
Medium
Bypass Email verification for monitoring at `monitor.mozilla.org`
HackerOneMozilla2025-01-22
Web
Medium
Availability Impact from Exploiting Project Name Vulnerabilities
HackerOneDoppler2024-11-13$250 bounty
Web
Low
CVE-2024-9681: HSTS subdomain overwrites parent cache entry
HackerOnecurl2024-11-06
Web
Low
When curl uses Schannel as TLS backend, it fails to enforce TLS 1.3 cipher suite selections correctly
HackerOnecurl2024-11-04
Web
Medium
Bypassing HackerOne 2FA due to race condition
HackerOneHackerOne2024-10-30
Web
Medium
Change phone number OTP flaw leads to any phone number takeover
HackerOneinDrive2024-10-09$2,000 bounty
Web
Critical
Logic Flaw: I Can Block You from Accessing Your Own Account
Medium2024-09-13
Web
Not rated
“Like” Bypass on Customer Reviews — €500 bounty
Medium2024-08-26$500 bounty
Web
Not rated
Race Condition About The User Version and Ignored
Medium2024-08-06
Web
Not rated
Interesting Business Logic Error leads to Pre-Account Takeover via Verification bypass on GoogleVRP
MediumGoogle2024-07-30
Web
Not rated
Exposure of shopify employee summit page allows anonymous user to place orders for free books
HackerOneShopify2024-07-29
Web
Not rated
Minor security issue with Hackerone Invitations from sandbox program
HackerOneHackerOne2024-07-22
Web
Low
Exploitable live argument in onClick Function leads to Data Leakage of Inactive/Suspended Products
HackerOneTikTok2024-07-19$1,000 bounty
Web
Medium
2FA requirement bypass when claiming bounty
HackerOneHackerOne2024-07-11
Web
Not rated
Business Logic error leads to bypass 2FA requirement
HackerOneHackerOne2024-07-11
Web
High
File sizes may be manipulated into negative numbers when uploading
HackerOneLY Corporation2024-07-10$500 bounty
Web
Medium
Unlimited fake rate to the passenger in city to city, Affected endpoint `/api/v1/reviews/ride/ /driver`
HackerOneinDrive2024-07-02
Web, API
Medium
Attacker can add two free bags offered by the site at the same time.
HackerOneMars2024-06-25
Web
Medium
Notes app can be tricked into using a received share created before the user logged in
HackerOneNextcloud2024-06-19
Web, Cloud
Medium
Attackers can *Upgrade and claim offer* on the Premium Trial Subscription with a total price of *IDR0.00* from the original *IDR7,022,061.82*
HackerOneLinkedIn2024-06-18
Web
High
Abusing auto mail responders to access internal workplaces
Medium2024-06-08$1,000 bounty
Web
Not rated
Any user could upload attachments to pentest scoping form they don't have access to
HackerOneHackerOne2024-05-15
Web
High
Cloud Computer Hackerone Triager can be Accessible for everyone [h1_analyst_lucas+view@wearehackerone.com] computer
HackerOneHackerOne2024-05-10
Web, Cloud
Not rated
Incorrect logic when buy one more license which may lead to extend the expire date of existing license
HackerOnePortSwigger Web Security2024-04-16
Web
Not rated
Bypassing x profile verification to receive instant blue checkmark and unlimited profile changes
HackerOneX / xAI2024-03-26$250 bounty
Web
Low
Bypassing the block of Security Domain Restriction and normally invite blocked domains with special characters “İ”
HackerOneFrontegg2024-03-20
Web
Medium
CSP Bypass and escalation of https://hackerone.com/reports/2279346
HackerOnePortSwigger Web Security2024-02-23
Web
High
Ability to getting Twitter Blue verified badge without purchase it
HackerOneX / xAI2024-02-22
Web
Medium
weird bug using fake id via photoshop worth $***
Medium2024-02-17
Web
Not rated
How I found a simple bug in Facebook events without any Test
Researcher blogMeta / Facebook2024-01-30
Web
Not rated
CVE-2023-5480: Chrome new XSS Vector
Researcher blogGoogle (Chrome & Chromium)2024-01-25$16,000 bounty
Web
Not rated
Response Manipulation Lead To Premium Feature By Normal User Reward of $500
Medium2024-01-24$500 bounty
Web
Not rated
How I Bypassed A.i. Based Facial Detection Restriction With An Intended Feature On A Photo Sharing App ?
Medium2024-01-20
Web, AI
Not rated
Non-admin users can reset app allowlist to the default
HackerOneNextcloud2024-01-18
Web, Cloud
Medium
Accessing deleted comment for $$: A Bug Bounty Writeup
Medium2024-01-17
Web
Not rated
1 Program, 4 Business Logic Bugs and Cashing in 2300$.
InfoSec Write-ups2024-01-17$2,300 bounty
Web
Not rated
How I Earned My First Bug Bounty Reward of $600
Medium2024-01-11$600 bounty
Web
Not rated
Bypassing Payments In Apple For Free Trails For Lifetime
MediumApple2024-01-09
Web
Not rated
Every entry links to the original report or article. Secure Hyperloop doesn't copy the content. Severity comes from the disclosing platform (HackerOne). Writeups without a platform rating show "Not rated". The index has 2,810 items in total.