ZeroToBug
Открыть в Telegram
From zero to bug hunters — collaborate, share, and level up your skills!
БольшеСтрана не указанаТехнологии и приложения21 798
3 761
Подписчики
Нет данных24 часа
-87 дней
+3130 дней
Загрузка данных...
Похожие каналы
Нет данных
Возникли проблемы? Пожалуйста, обновите страницу или обратитесь к нашему support-менеджеру .
Облако тегов
Входящие и исходящие упоминания
---
---
---
---
---
---
Привлечение подписчиков
октябрь '26окт. '26
октябрь '26
+49
в 1 каналах
сентябрь '26
+75
в 1 каналах
Get PRO
август '26
+175
в 1 каналах
Get PRO
июль '26
+424
в 2 каналах
Get PRO
июнь '26
+165
в 4 каналах
Get PRO
май '26
+381
в 3 каналах
Get PRO
апрель '26
+708
в 2 каналах
Get PRO
март '26
+757
в 1 каналах
Get PRO
февраль '26
+319
в 1 каналах
Get PRO
январь '26
+820
в 1 каналах
Get PRO
декабрь '25
+18
в 0 каналах
Get PRO
ноябрь '250
в 0 каналах
Get PRO
октябрь '25
+15
в 0 каналах
Get PRO
сентябрь '25
+22
в 0 каналах
Get PRO
август '250
в 0 каналах
Get PRO
июль '25
+10
в 0 каналах
Get PRO
июнь '250
в 0 каналах
Get PRO
май '25
+19
в 0 каналах
Get PRO
апрель '250
в 0 каналах
Get PRO
март '25
+18
в 1 каналах
| Дата | Привлечение подписчиков | Упоминания | Каналы | |
| 09 октября | +1 | |||
| 08 октября | +3 | |||
| 07 октября | 0 | |||
| 06 октября | +1 | |||
| 05 октября | +1 | |||
| 04 октября | +1 | |||
| 03 октября | +3 | |||
| 02 октября | +1 | |||
| 01 октября | +38 |
Посты канала
Pre-Auth Arbitrary File Read CVE-2026-21589 🤯🔥
👨💻 watchTowr Team
🔗 https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/
| 2 | $15,000 HackerOne Bug Bounty 🤑
IDOR allows user to access report details via reference.json endpoint 🤯🔥
👨💻 sm41ldrag0n_mbbank (h1/sm41ldrag0n_mbbank )
🔗 https://hackerone.com/reports/3862641
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 023 |
| 3 | $1,500 Cloudflare Public Bug Bounty 🤑
HTTP Request Smuggling via Unsanitized Hop-by-Hop Headers by Quan Le 🤯🔥
👨💻 Quan Le (h1/1nsomnia1102)
🔗 https://hackerone.com/reports/3622877
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 350 |
| 4 | 🔗 https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452 | 742 |
| 5 | Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?) by watchTowr Team 🤯🔥
👨💻 Sina Kheirkhah (x/sinsinology)
🔗 https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/
🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-8452 | 740 |
| 6 | A Practical Guide to Connecting Burp Suite to Claude Code via MCP by Abhishek 👾🔥
👨💻 Abhishek Meena (x/aacle_)
🔗 https://medium.com/@Aacle/a-practical-guide-to-connecting-claude-code-to-burp-suite-via-bmcp-9a6a4a3a8302 | 760 |
| 7 | $150,000 Apple Bug Bounty 🍎
[CVE-2026-20685] Beyond Prompt Injection: Hacking Apple's Private Cloud Compute 🤯🔥
🔗 https://blog.sentry.security/beyond-prompt-injection-hacking-apples-private-cloud-compute/
🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-20685 | 951 |
| 8 | $12,000 Mozilla Bug Bounty 🤑
Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where) by Griffin 🤯🔥
👨💻 Griffin (x/aussinfosec)
🔗 https://hackerone.com/reports/3782701
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 322 |
| 9 | 0.25 XMR Monero Bug Bounty 🤑
relay_tx wallet-rpc skips --restricted-rpc guard and lets any caller corrupt wallet state via attacker-controlled pending_tx by Beni Saprulah 🤯🔥
👨💻 Beni Saprulah (h1/benisprlh)
🔗 https://hackerone.com/reports/3687543
🔗 https://github.com/monero-project/monero/pull/10434
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 376 |
| 10 | From Deep Link to Shell: Easy $3000 Android Crits by tinopreter 🤯🔥
👨💻 cTino (x/tinopreter)
🔗 https://medium.com/the-first-digit/from-deep-link-to-shell-easy-3000-android-crits-866f2a002a3c | 1 164 |
| 11 | $1,500 AI System Prompt Leak: Using this Burp Suite Configuration by cTino 🤯🔥
👨💻 cTino(x/tinopreter)
🔗 https://medium.com/@tinopreter/1-500-ai-system-prompt-leak-using-this-burp-suite-configuration-e1cb6ab27dc5 | 1 463 |
| 12 | Enumerable Lead ID Exposes Millions of Car-Buyer Records and Lets Anyone Overwrite Their Contact Details by Marius du Preez 🤯🔥
👨💻 Marius du Preez (mdpsec.com)
🔗 https://mdpsec.com/reports/auto-lead-platform-enumerable-id-unauth-idor-pii/ | 1 312 |
| 13 | $42,751 Ubiquiti Inc. Bug Bounty 🤑
Pre-Auth RCE in UniFi OS - CVE-2026-34909: One Request to Root Behind Seven Products by Catchify Security 🤯🔥
👨💻 Abdulaziz Almadhi (Catchify Security)
🔗 https://www.catchify.sa/post/pre-auth-rce-unifi-os-one-request-to-root
CVEs
🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-34909
🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-50747
🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-50748 | 1 325 |
| 14 | IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years 🤯🔥
👨💻 Nebula Security
🔗 https://nebusec.ai/research/ionstack-part-2/
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 187 |
| 15 | "How I Found Open-Source 0-days with an LLM Multi-Agent Workflow" by Hyunseo Shin 🤯🔥
👨💻 Hyunseo Shin (se1en)
🔗 https://blog.cykor.kr/2026/02/How-I-Found-Open-Source-0-days-with-an-LLM-Multi-Agent-Workflow
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 408 |
| 16 | 0.5 XMR (175 USD) Monero Bug Bounty 🤑
ZMQ RPC Log Injection and Untrusted Payload Persistence by redlobsterz 🤯🔥
👨💻 redlobsterz (h1/redlobsterzzz)
🔗 https://hackerone.com/reports/3621606
🔗 https://github.com/monero-project/monero/pull/10388
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 313 |
| 17 | $1,337 8x8 Bug Bounty 🤑
connect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability by Ferreira 🤯🔥
👨💻 Kauã Ferreira (x/0xkyotozx)
🔗 https://hackerone.com/reports/3800870
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 574 |
| 18 | Bypassing LFI (Local File Inclusion) by Yadav 👾💥
👨💻 Abhishek Yadav (x/abhishekY495)
🔗 https://medium.com/@abhishekY495/bypassing-lfi-local-file-inclusion-ebf4274e7027
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 501 |
| 19 | $1,600 Shopify Bug Bounty 🤑
Reflected XSS in AI Chat Bot Greetings at help.shopify.com via Markdown Image Rendering by saltymermaid 🤯🔥
👨💻 saltymermaid
🔗 https://hackerone.com/reports/2509022
🔗 https://t.me/ZeroToBug
🔗 https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p | 1 477 |
| 20 | PoC:
[CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core 👾💥
- https://github.com/0xsha/wp2shell
- https://github.com/Icex0/wp2shell-poc
- https://github.com/sergiointel/wp2shell-poc
- https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core/
- https://nvd.nist.gov/vuln/detail/CVE-2026-60137
- https://nvd.nist.gov/vuln/detail/CVE-2026-63030 | 1 359 |
