uz
Feedback

Firibgarlarga uchmang! Telemetrio bunday kanallarni topadi va belgilaydi πŸ‘‰ Belgini koβ€˜rmoqchi boβ€˜lsangiz, obuna boβ€˜ling πŸ‘ˆ

ZeroToBug

ZeroToBug

Kanalga Telegram’da oβ€˜tish

From zero to bug hunters β€” collaborate, share, and level up your skills!

Ko'proq ko'rsatish
Mamlakat belgilanmaganTexnologiyalar & Aralashmalar21 798
3 761
Obunachilar
Ma'lumot yo'q24 soatlar
-87 kun
+3130 kun

Ma'lumot yuklanmoqda...

O'xshash kanallar
Ma'lumot yo'q
Muammo bormi? Iltimos, sahifani yangilang yoki bizning qo'llab-quvvatlash boshqaruvchimizga murojaat qiling>.
Taglar buluti
bounty20
bypass10
idor8
takeover5
tinopreter5
kuiri4
raj4
zuksh4
abd3
attack3
csrf3
cyx3
escalation3
gupta3
host3
infrastructure3
j4k3l0ng3
privilege3
telnet3
mohsin2
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Okt '26
Oktabr '26
+49
1 kanalda
Sentabr '26
+75
1 kanalda
Get PRO
Avgust '26
+175
1 kanalda
Get PRO
Iyul '26
+424
2 kanalda
Get PRO
Iyun '26
+165
4 kanalda
Get PRO
May '26
+381
3 kanalda
Get PRO
Aprel '26
+708
2 kanalda
Get PRO
Mart '26
+757
1 kanalda
Get PRO
Fevral '26
+319
1 kanalda
Get PRO
Yanvar '26
+820
1 kanalda
Get PRO
Dekabr '25
+18
0 kanalda
Get PRO
Noyabr '250
0 kanalda
Get PRO
Oktabr '25
+15
0 kanalda
Get PRO
Sentabr '25
+22
0 kanalda
Get PRO
Avgust '250
0 kanalda
Get PRO
Iyul '25
+10
0 kanalda
Get PRO
Iyun '250
0 kanalda
Get PRO
May '25
+19
0 kanalda
Get PRO
Aprel '250
0 kanalda
Get PRO
Mart '25
+18
1 kanalda
Sana
Obunachilarni jalb qilish
Esdaliklar
Kanallar
09 Oktabr+1
08 Oktabr+3
07 Oktabr0
06 Oktabr+1
05 Oktabr+1
04 Oktabr+1
03 Oktabr+3
02 Oktabr+1
01 Oktabr+38
Kanal postlari
ZeroToBug
Pre-Auth Arbitrary File Read CVE-2026-21589 🀯πŸ”₯ πŸ‘¨β€πŸ’» watchTowr Team πŸ”— https://labs.watchtowr.com/you-wont-hear-about-these
Pre-Auth Arbitrary File Read CVE-2026-21589 🀯πŸ”₯ πŸ‘¨β€πŸ’» watchTowr Team πŸ”— https://labs.watchtowr.com/you-wont-hear-about-these-even-in-myths-atlassian-jira-confluence-and-more-pre-auth-arbitrary-file-read-cve-2026-21589/

2
$15,000 HackerOne Bug Bounty πŸ€‘ IDOR allows user to access report details via reference.json endpoint 🀯πŸ”₯ πŸ‘¨β€πŸ’» sm41ldrag0n_
$15,000 HackerOne Bug Bounty πŸ€‘ IDOR allows user to access report details via reference.json endpoint 🀯πŸ”₯ πŸ‘¨β€πŸ’» sm41ldrag0n_mbbank (h1/sm41ldrag0n_mbbank ) πŸ”— https://hackerone.com/reports/3862641 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 023
3
$1,500 Cloudflare Public Bug Bounty πŸ€‘ HTTP Request Smuggling via Unsanitized Hop-by-Hop Headers by Quan Le 🀯πŸ”₯ πŸ‘¨β€πŸ’» Quan L
$1,500 Cloudflare Public Bug Bounty πŸ€‘ HTTP Request Smuggling via Unsanitized Hop-by-Hop Headers by Quan Le 🀯πŸ”₯ πŸ‘¨β€πŸ’» Quan Le (h1/1nsomnia1102) πŸ”— https://hackerone.com/reports/3622877 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 350
4
πŸ”— https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
πŸ”— https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-PreAuth-RCE-CVE-2026-8452
742
5
Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?) by watchTowr Team 🀯πŸ”₯ πŸ‘¨β€πŸ’» Sina Kheirkhah (x/sinsinology) πŸ”— https://labs.wa
Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?) by watchTowr Team 🀯πŸ”₯ πŸ‘¨β€πŸ’» Sina Kheirkhah (x/sinsinology) πŸ”— https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/ πŸ”— https://nvd.nist.gov/vuln/detail/CVE-2026-8452
740
6
A Practical Guide to Connecting Burp Suite to Claude Code via MCP by Abhishek πŸ‘ΎπŸ”₯ πŸ‘¨β€πŸ’» Abhishek Meena (x/aacle_) πŸ”— https:/
A Practical Guide to Connecting Burp Suite to Claude Code via MCP by Abhishek πŸ‘ΎπŸ”₯ πŸ‘¨β€πŸ’» Abhishek Meena (x/aacle_) πŸ”— https://medium.com/@Aacle/a-practical-guide-to-connecting-claude-code-to-burp-suite-via-bmcp-9a6a4a3a8302
760
7
$150,000 Apple Bug Bounty 🍎 [CVE-2026-20685] Beyond Prompt Injection: Hacking Apple's Private Cloud Compute 🀯πŸ”₯ πŸ”— https://
$150,000 Apple Bug Bounty 🍎 [CVE-2026-20685] Beyond Prompt Injection: Hacking Apple's Private Cloud Compute 🀯πŸ”₯ πŸ”— https://blog.sentry.security/beyond-prompt-injection-hacking-apples-private-cloud-compute/ πŸ”— https://nvd.nist.gov/vuln/detail/CVE-2026-20685
951
8
$12,000 Mozilla Bug Bounty πŸ€‘ Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where) by Grif
$12,000 Mozilla Bug Bounty πŸ€‘ Unauthenticated RCE in Taskcluster web-server via GraphQL filter argument (sift $where) by Griffin 🀯πŸ”₯ πŸ‘¨β€πŸ’» Griffin (x/aussinfosec) πŸ”— https://hackerone.com/reports/3782701 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 322
9
0.25 XMR Monero Bug Bounty πŸ€‘ relay_tx wallet-rpc skips --restricted-rpc guard and lets any caller corrupt wallet state via a
0.25 XMR Monero Bug Bounty πŸ€‘ relay_tx wallet-rpc skips --restricted-rpc guard and lets any caller corrupt wallet state via attacker-controlled pending_tx by Beni Saprulah 🀯πŸ”₯ πŸ‘¨β€πŸ’» Beni Saprulah (h1/benisprlh) πŸ”— https://hackerone.com/reports/3687543 πŸ”— https://github.com/monero-project/monero/pull/10434 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 376
10
From Deep Link to Shell: Easy $3000 Android Crits by tinopreter 🀯πŸ”₯ πŸ‘¨β€πŸ’» cTino (x/tinopreter) πŸ”— https://medium.com/the-fir
From Deep Link to Shell: Easy $3000 Android Crits by tinopreter 🀯πŸ”₯ πŸ‘¨β€πŸ’» cTino (x/tinopreter) πŸ”— https://medium.com/the-first-digit/from-deep-link-to-shell-easy-3000-android-crits-866f2a002a3c
1 164
11
$1,500 AI System Prompt Leak: Using this Burp Suite Configuration by cTino 🀯πŸ”₯ πŸ‘¨β€πŸ’» cTino(x/tinopreter) πŸ”— https://medium.c
$1,500 AI System Prompt Leak: Using this Burp Suite Configuration by cTino 🀯πŸ”₯ πŸ‘¨β€πŸ’» cTino(x/tinopreter) πŸ”— https://medium.com/@tinopreter/1-500-ai-system-prompt-leak-using-this-burp-suite-configuration-e1cb6ab27dc5
1 463
12
Enumerable Lead ID Exposes Millions of Car-Buyer Records and Lets Anyone Overwrite Their Contact Details by Marius du Preez οΏ½
Enumerable Lead ID Exposes Millions of Car-Buyer Records and Lets Anyone Overwrite Their Contact Details by Marius du Preez 🀯πŸ”₯ πŸ‘¨β€πŸ’» Marius du Preez (mdpsec.com) πŸ”— https://mdpsec.com/reports/auto-lead-platform-enumerable-id-unauth-idor-pii/
1 312
13
$42,751 Ubiquiti Inc. Bug Bounty πŸ€‘ Pre-Auth RCE in UniFi OS - CVE-2026-34909: One Request to Root Behind Seven Products by C
$42,751 Ubiquiti Inc. Bug Bounty πŸ€‘ Pre-Auth RCE in UniFi OS - CVE-2026-34909: One Request to Root Behind Seven Products by Catchify Security 🀯πŸ”₯ πŸ‘¨β€πŸ’» Abdulaziz Almadhi (Catchify Security) πŸ”— https://www.catchify.sa/post/pre-auth-rce-unifi-os-one-request-to-root CVEs πŸ”— https://nvd.nist.gov/vuln/detail/CVE-2026-34909 πŸ”— https://nvd.nist.gov/vuln/detail/CVE-2026-50747 πŸ”— https://nvd.nist.gov/vuln/detail/CVE-2026-50748
1 325
14
IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years 🀯πŸ”₯ πŸ‘¨β€πŸ’» Nebula Security
IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years 🀯πŸ”₯ πŸ‘¨β€πŸ’» Nebula Security πŸ”— https://nebusec.ai/research/ionstack-part-2/ πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 187
15
"How I Found Open-Source 0-days with an LLM Multi-Agent Workflow" by Hyunseo Shin 🀯πŸ”₯ πŸ‘¨β€πŸ’» Hyunseo Shin (se1en) πŸ”— https://
"How I Found Open-Source 0-days with an LLM Multi-Agent Workflow" by Hyunseo Shin 🀯πŸ”₯ πŸ‘¨β€πŸ’» Hyunseo Shin (se1en) πŸ”— https://blog.cykor.kr/2026/02/How-I-Found-Open-Source-0-days-with-an-LLM-Multi-Agent-Workflow πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 408
16
0.5 XMR (175 USD) Monero Bug Bounty πŸ€‘ ZMQ RPC Log Injection and Untrusted Payload Persistence by redlobsterz 🀯πŸ”₯ πŸ‘¨β€πŸ’» redl
0.5 XMR (175 USD) Monero Bug Bounty πŸ€‘ ZMQ RPC Log Injection and Untrusted Payload Persistence by redlobsterz 🀯πŸ”₯ πŸ‘¨β€πŸ’» redlobsterz (h1/redlobsterzzz) πŸ”— https://hackerone.com/reports/3621606 πŸ”— https://github.com/monero-project/monero/pull/10388 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 313
17
$1,337 8x8 Bug Bounty πŸ€‘ connect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability by Ferreira 🀯πŸ”₯ πŸ‘¨β€πŸ’» KauΓ£ Ferreira (
$1,337 8x8 Bug Bounty πŸ€‘ connect.8x8.com/api/v1: JWT Algorithm Confusion Vulnerability by Ferreira 🀯πŸ”₯ πŸ‘¨β€πŸ’» KauΓ£ Ferreira (x/0xkyotozx) πŸ”— https://hackerone.com/reports/3800870 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 574
18
Bypassing LFI (Local File Inclusion) by Yadav πŸ‘ΎπŸ’₯ πŸ‘¨β€πŸ’» Abhishek Yadav (x/abhishekY495) πŸ”— https://medium.com/@abhishekY495/
Bypassing LFI (Local File Inclusion) by Yadav πŸ‘ΎπŸ’₯ πŸ‘¨β€πŸ’» Abhishek Yadav (x/abhishekY495) πŸ”— https://medium.com/@abhishekY495/bypassing-lfi-local-file-inclusion-ebf4274e7027 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 501
19
$1,600 Shopify Bug Bounty πŸ€‘ Reflected XSS in AI Chat Bot Greetings at help.shopify.com via Markdown Image Rendering by salty
$1,600 Shopify Bug Bounty πŸ€‘ Reflected XSS in AI Chat Bot Greetings at help.shopify.com via Markdown Image Rendering by saltymermaid 🀯πŸ”₯ πŸ‘¨β€πŸ’» saltymermaid πŸ”— https://hackerone.com/reports/2509022 πŸ”— https://t.me/ZeroToBug πŸ”— https://whatsapp.com/channel/0029VbCTM6RDp2QAFE8r140p
1 477
20
PoC: [CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core πŸ‘ΎπŸ’₯ - https://github.com/0xsha/wp2shell - http
PoC: [CVE-2026-63030/CVE-2026-60137] Pre Authentication RCE in WordPress Core πŸ‘ΎπŸ’₯ - https://github.com/0xsha/wp2shell - https://github.com/Icex0/wp2shell-poc - https://github.com/sergiointel/wp2shell-poc - https://slcyber.io/research-center/wp2shell-pre-authentication-rce-in-wordpress-core/ - https://nvd.nist.gov/vuln/detail/CVE-2026-60137 - https://nvd.nist.gov/vuln/detail/CVE-2026-63030
1 359
Barcha postlarni koβ€˜rish