Acknowledgments

We would like to thank the valuable contributors who support us with their insights in making our systems safer. Our thanks go to:

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0-9

A

Aakash Kumar - facebook.com/Sscript.kiddie: Reported Clickjacking vulnerabilities.
Aakash Madaan ( Godsky ) https://www.linkedin.com/in/aakashmadaan13 - Reported Security misconfiguration.
Aamir Khan - www.hacking-articles.blogspot.com - www.fb.com/aamir9795734: Reported xss vulnerabilities.
Aarafa Zakaria - https://www.facebook.com/Zyo3506/, https://x.com/D_Zayko36, https://www.linkedin.com/in/zakaria-aarafa-b31372284/ - Reported Multiple Vulnerabilities.
Aaron Costello - ie.linkedin.com/in/aaron-costello-226858a7 - Reported Information Disclosure.
Aarshit Mittal: Reported XSS vulnerabilities.
Aashutosh Devkota - https://np.linkedin.com/in/aasutoshdevkota - Reported Information Disclosure.
Aasmant Laxmikant Patil - LinkediIn: https://www.linkedin.com/in/aasmant-laxmikant-patil-01a644203 - Reported Information Disclosure.
Aatman Saifi/0x4141 -Twitter: www.twitter.com/jobaa23 - Reported Default login, Possible DoS Attack, Remote Code Execution (RCE), Broken Authentication and Cross-site request forgery (CSRF) vulnerabilities.
Abolfazl Fahimi - https://x.com/Af4himi - Reported "Full admin panel access".
Abdallah Mahrous https://www.linkedin.com/in/abdallah-mahrous-09712aa4/ - Reported Missing rate limit.
Abdennour Chakifi - https://twitter.com/dazaii111 - Reported Cross-site scripting (XSS).
Abdeslam Elyaalaoui linkedin.com/in/abdeslam-elyaalaoui-801592145/ - Reported Cross-site scripting (XSS).
Abdiwahab Ahmed Omar - https://www.facebook.com/0x1h3r/ - Reported HTTP header, Reported Information Disclosure.
Abdlallah Mohammed- https://twitter.com/1bdool492 - Reported Server-side request forgery (SSRF).
Abdul Azeez Alaseeri - linkedin.com/in/0xx777 - Reported Cross-site scripting (XSS).
Abdul Haq Khokhar - https://twitter.com/ Abdulhaqkhokhar: Reported Policy Framework vulnerabilities and Missing SPF.
Abdul Mazid - https://x.com/0zidmaz?s=11
Abdul Rehman - @facebook.com/shadowcreator: Reported host header vulnerabilities.
Abdullah Rahmatullah - Twitter: twitter.com/abd_4fg - Reported Cross-site scripting (XSS).
Abdulrahman Badawi - https://twitter.com/zikolasec?t=nx1TAITxMlZ6ykoVZFhNNA&s=09 - Reported Information Disclosure.
Abdulelah BinAqeel - Reported XSS (Reflected) vulnerabilities.
Abdullah Fares Muhanna - https://www.facebook.com/AbedullahFares - Reported outdated and vulnerable software.
Abdullah Fares Muhanna - https://www.facebook.com/AbedullahFares - Reported a use of a vulnerable version of software.
Abdullah Hussam - @Abdulahhusam: Reported XSS vulnerability.
Abdulrahman Kamel https://www.linkedin.com/in/abdulrahman-kamel/- Reported Cross-site scripting (XSS) / Reported Cross-site scripting (XSS) vulnerabilities / Reported Information Disclosure and Unsecured communication.
Abdulsalam M olamilekan - X: https://x.com/olamdeen
Abdelrahman Ibrahim Farg - https://www.linkedin.com/in/abdelrahman-ibrahim-978423116 - Reported Other.
Abdessamad DHASSI - URL: https://www.root-me.org/abdou358, Twitter: https://twitter.com/darlate - Reported XSS vulnerabilities.
Abelrhman Adel - twitter.com/k3r1it0 - Gefundene SQL Injection.
Abhibandu Kafle - http://nepsecurity.org - @kabhi_kav: Reported Clickjacking vulnerability.
Abhijeth Dugginapeddi - http://abhijeth.com: Reported multiple vulnerabilities.
Abhinav Karnawat - (\/ w4rri0r \/) - http://www.w4rri0r.com: Reported XSS Vulnerability.
Abhinav Porwal https://www.linkedin.com/in/abhinavporwal6 - Reported Clickjacking.
Abhishek Bundela - Twitter: twitter.com/abhibundela: Reported self XSS vulnerabilities.
Abhishek Maurya - https://in.linkedin.com/in/abhiishsec - Reported Cross-site scripting (XSS).
Abolfazl Fahimi - https://x.com/af4himi - Reported Cross-site scripting (XSS).
Abubakar Ahmad Sheu - Instragam: https://www.instagram.com/theencryptedsage - Reported Information Disclosure.
Ace Candelario https://0xspa.de - Reported Cross-site scripting (XSS).
Achim Hoffmann - Atropaia GmbH - atropaia.de - Reported Cross-site scripting (XSS).
Achmad Marzuki Abdulloh - https://id.linkedin.com/in/achmadabdullah - Reported Authentication Bypass.
Adam AL MUSAWE - https://x.com/madocdaloc - Reported RCE.
Adam Willard - https://www.linkedin.com/pub/adam-willard/20/575/30b/@aw7684512: Reported HTML manipulation vulnerability.
Adam Ziaja - http://adamziaja.com: Reported SSL weakness.
ADARSH VS https://twitter.com/adarshvs_ - Reported Data manipulation.
Adegbola Kehinde Peter - Facebook: https://www.facebook.com/Kennygold.404 - Reported Disclosure of Secrets, Content Injection.
Adel Mahmoud - https://www.facebook.com/mohappaaa - Reported XSS (Reflected) vulnerabilities.
Adil Faizi - fb.com/adil.faizi.94 RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Aditya Dixit - http://fb.com/aditya008 - http://hackthedevil.blogspot.com: Reported DOM based XSS vulnerabilities.
Aditya Jadhav - www.securecyberfuture.com - Reported XSS vulnerabilities.
Aditya Singh - https://www.linkedin.com/in/aditya-singh-b78111169/ - Reported Account Takeover Vulnerability.
Aditya Singh - linkedin.com/in/aditya-singh4180/ - Reported Vulnerability: Email HTML Injection via name Parameter on Register Page and Sensitive JWT Token Exposure.
Adrian Siefer - Reported "Exposed Brand Dialog API documentation".
Agustín Doménech - https://twitter.com/robotshelld - Reported Information Disclosure.
Ahmad Alassaf - https://www.facebook.com/theviperxx/ - Reported Information Disclosure.
Ahmad Ashraff - @yappare: Reported path disclosure.
Ahmad Halabi (Cyber Ironclad) - hackerone.com/ahmd_halabi - Reported Information Disclosure.
Ahmad Karim Dahrouj - https://www.linkedin.com/in/ahmad-karim-dahrouj-51bb49259 - Reported Possible DoS Attack.
Ahmad Qaramany (@qaramany0x01) - twitter.com/qaramany0x01 - Reported Information Disclosure.
Ahmed Aaish - https://parallel.solutions - Reported JavaServer Faces vulnerabilities.
Ahmed Alsanosi - facebook.com/01alsanosi - twitter.com/ahmed_alsanosi - Reported Unsecured communication.
Ahmed Adel Abdelfattah - https://www.facebook.com/00SystemError00/ - Reported XSS vulnerabilities.
Ahmed Ehab - https://twitter.com/HeBo117 - Reported Server-side request forgery (SSRF).
Ahmed El-Desoky - LinkedIn: www.linkedin.com/in/ahmed-eldesoky-982051227 - Reported Cross-site scripting (XSS) / reported HTTP header vulnerabilities.
Ahmed Elsadat - https://bugcrowd.com/GENERAL-SADAT / https://www.facebook.com/mido.gamal.9674 - Reported XSS vulnerabilities.
Ahmed Fahim - Reported Information Disclosure.
Ahmed Ismail linkedin.com/in/ahmed-ismail-38901168 twitter.com/MrOz1l facebook.com/AhmedOzil10 - Subdomain Takeover / Reported Broken Access Control vulnerabilities.
Ahmed Jumani - LinkedIn: https://www.linkedin.com/in/ahmedjumani/ Reported Exposed Google Maps API Key vulnerabilities.
Ahmed Lotfy (doctor X) - https://x.com/Ahmed846737825 - Reported Detailed Server Configuration Page
Ahmed Max - https://www.facebook.com/profile.php?id=100004971255687; Twitter: @404NotF39672584- Reported content/text injection.
Ahmed Nazmy - Reported Remote Code Execution (RCE).
Ahmed Qaramany - https://twitter.com/qaramany0x01, https://www.facebook.com/qaramany0x01 - Reported Information Disclosure.
Ahmed Salah Abdalhfaz https://twitter.com/Elsfa7110 - Reported Information Disclosure.
Ahmed Sayd - https://www.instagram.com/8l242 - Reported Command Injection Vulnerability.
Ahmed Shawky @lnxg33k: Meldung von SQL Injection.
Ahmed Sherif- https://twitter.com/sherif_ninja - Reported Server-side request forgery (SSRF).
Ahmed sultan (0x4148) linked in :https://eg.linkedin.com/in/0x4148 - Reported SQL Injection.
Ahmed Usama (vulnera) - https://twitter.com/0xvulnera / facebook.com/0xvulnera - Reported Cross-site request forgery (CSRF).
Ahmed Waheed - @ia7m4d0z: Reported XSS vulnerabilities.
Ahmed Y. Elmogy - Twitter: mogyhacker - Reported anti-CSRF/XSS vulnerabilities.
Ahmet Demirci - https://www.facebook.com/ahmet.demirc.17 and https://m-i-a.cf - Reported XSS (Reflected) vulnerabilities.
Ahmet Gurel - twitter.com/ahmettgurell - Reported Cross-site scripting (XSS) / reported SQL injection vulnerabilitie.
Ahmet SUNA - linkedin.com/in/ahmet-suna-ab3ba9116 - Reported Information Disclosure, Host header injection, Cross-site scripting (XSS), Open Redirect and Database backup critical Information Disclosure
Ahmet Ümit BAYRAM - www.ahmetumitbayram.com - @ahmetumitbayram - Reported XSS (Reflected) vulnerabilities.
Ai Ho - https://twitter.com/j3ssiejjj - Reported Information Disclosure.
Aishwarya KC https://twitter.com/aiswar_ya - Reported Subdomain takeover.
Ajay Anand - www.ctgsecuritysolutions.com: Reported XSS vulnerability.
Ajay Singh Negi - @AjaySinghNegi & Prashant Negi - @_prashantnegi & Mahipal Singh Rajpurohit - www.websecresearch.com: Reported Brutforce vulnerabilities.
Akalanka Ekanayake - https://twitter.com/ceo_akalanka - Reported Mixed Content Vulnerability.
Akash Kumar - https://www.linkedin.com/in/akash-kumar-2b9a9a213/ - Reported "Misconfigured cloud storage exposure".
Akash Sarkar - https://twitter.com/0xhunster - Reported Information Disclosure.
Akash Saxena - https://m.facebook.com/akash.saxena.9421 - Loophole in registration functionality.
Akash Shukla - facebook.com/hybridakash at www.rmar.in: Cookie Disclosure.
Akhil Reni - @akhil_reni: Refelcted XSS.
Akincibor - https://hackerone.com/akincibor?type=user - Reported Server-side request forgery (SSRF).
Alan Roy - https://www.linkedin.com/in/alan-roy-0225a125 https://www.facebook.com/alanroy.thomas.7- Reported Clickjacking.
Akshay Ravi(copycat) - https://www.linkedin.com/in/C09YC47 - Reported several Information Disclosure
Alexandar Thangavel - https://twitter.com/ValluvarSploit - Reported Other.
Alexander Anisimov und Yakov Shmelev (Eun014 Team) - https://twitter.com/rack2009 - Reported security misconfiguration.
Alexander Karl – Alexander 'twink0r' Karl – Subdomain Takeover.
Alex Birsan - https://twitter.com/alxbrsn - Reported Remote Code Execution (RCE).
Alexey Sabadash - www.linkedin.com/in/asabadash - Reported multiple vulnerabilites.
Alfido Osdie - https://www.linkedin.com/in/alfido-osdie-857343224/ - Reported / Reported SSRF vulnerabilities.
Ali Abdalalh - Twitter: https://www.linkedin.com/in/ali-0x11 - Reported Cross-site scripting (XSS).
ali azhar - https://www.linkedin.com/in/ali-azhar-b1a17b20b/ - Reported Clickjacking.
Ali Hasan Ghauri - alihassanpenetrationtester.blogspot.com - @alihasanghauri: Reported GIT Information Disclosure and XSS Vulnerabilities.
Ali Medd/0x097 - https://www.linkedin.com/in/0x097/ - Meldet Open Redirect Sicherheitslücke
Alisha Sheikh - in.linkedin.com/in/alisha-sheikh-96059615a - Reported Security misconfiguration.
Al-Khateeb BI N-khalid - fb.com/kkhateebali RMAR Technologies Pvt. Ltd. (www.rmar.in) - Reflected XSS.
Alvin Ferdiansyah - linkedin.com/in/alvinferd - Reported "DOM XSS".
Alvyn McQuitty - twitter.com/alvynmcq - Reported Server-side request forgery (SSRF).
Alwaleed Alfayez - Reported SSRF vulnerability.
Aly Khaled (0x41ly) - linkedin.com/in/aly-khal3d - hackerone.com/0x41ly?type=user - bugcrowd.com/0x41ly - twitter.com/Aly_Khal3d - Reported Possible DoS Attack, Reported Open Redirect, Cross-site scripting (XSS), Open Redirect, Broken Access Control / Reported HTTP header.
Aman Kumar - https://twitter.com/amykr777 - Reported User Enumeration / Reported Information Disclosure / Reported Cross-site scripting (XSS), Open Redirect, Information Disclosure and Path traversal.
Aman Rawat - https://www.linkedin.com/in/theamanrawat/ - Reported Information Disclosure.
Amar Shankar & Piyush Malik: Reported XSS vulnerabilities.
Amaranath Moger - https://www.linkedin.com/in/amaranath-moger/ - Reported Broken Access Control.
Amaranath M - https://www.linkedin.com/in/amaranath-moger/ - Reported Broken Access Control.
Ameer Assadi - @AmeerAssadi, fb.me/Amirh4ck, http://linkedin.com/in/ameerassadi - Reported XSS vulnerabilities.
Ameya Andhare - https://www.linkedin.com/in/ameya-andhare-ab839b1a5/ / https://twitter.com/AmeyaAndhare - Reported Clickjacking and Information Disclosure .
Amin Achour - www.th-online.ch - Reported XSS vulnerabilities.
Amir Habeeb - https://www.linkedin.com/in/amir-habeeb-5a0aba259/ - Reported "Sensitive Information Disclosure".
Amit Sohana - https://www.facebook.com/amit.sohara: Reflected XSS.
Amol Bhola - Reported Clickjacking vulnerability.
Amr Al Hallak - Reported Cross-site scripting (XSS).
Amr Khaled (0x37U) - https://www.facebook.com/Amr.v7 /
https://twitter.com/0x37U - Reported Missing rate limit.
Amr Salama - LinkedIn: https://www.linkedin.com/in/amrsalama23 / Reported Broken Authentication and Session Management Vulneranbility.
Anand M - https://twitter.com/anandm47: XSS Vulnerability
Anant Mudgal - https://www.varutra.com // Twitter: https://twitter.com/anantmudgal - Reported sensitive information disclosure.
Anar ilqarli - https://www.linkedin.com/in/anar-ilqarli-987aa022a - Reported Information Disclosure.
Anas Bousselham - Twitter : https://twitter.com/BousselhamAnas / LinkedIn : https://www.linkedin.com/in/anas-bousselham/ - Reported Cross-site scripting (XSS).
Anas Laabab - www.linkedin.com/in/anas-laabab/ - Reported an Out-of-Band XXE vulnerability.
Anas_loul - https://x.com/loul__0, https://www.facebook.com/profile.php?id=100071430164120&mibextid=LQQJ4d - Reported Open Redirect.
Anas Mahmood - @CyberTiger https://www.twitter.com/AnasIsHere - Reported Cross Site Scripting vulnerabilities.
Andrea Santese - Reported clickjacking vulnerability.
Andreas Kurtz - @aykay - http://www.andreas-kurtz.de: Reported vulnerabilities in a Mobile Application.
Andr. Ess - Reported Broken Authentication.
André Zingsheim: Reported XSS vulnerabilities.
Andrei Smolkin: Reported SQL Injection, xss and information disclosure vulnerabilities.
Andrey Leonov @4lemon https://twitter.com/4lemon - Reported Remote Code Execution (RCE).
Ángel Carballo - https://www.linkedin.com/in/%C3%A1ngel-carballo-82a6a318a/ - Reported Open Redirect.
Angkan Chanda ( nightcr4wl3r ) - nightcr4wl3r.blogspot.com – Report of a configuration vulnerability.
Aniket Deshmane https://twitter.com/AniketDeshmane9?s=08 - Reported Default login.
Aniket Pratap Singh - www.facebook.com/kotarockers/: Reported File Information Disclosure vulnerabilities.
Anis Haboubi - https://twitter.com/HaboubiAnis - Reported Information Disclosure.
Ankit Bharathan - fb.me/dibbu.bhadav: Reported XSS vulnerability.
Ankit Singh - https://www.facebook.com/AnkitCuriosity , LinkedIn: https://www.linkedin.com/in/AnkitSingh1579- Reported Open Redirect & XSS vulnerabilities.
Ankit Sood - facebook.com/ankit.sood.501 - Reported Cross-site scripting (XSS).
Ankit Yadav - Hack Safe Indore: Reported user credential vulnerabilities.
Anil Kumar Behara: Reported XSS vulnerability.
Anirudh Kulkarni: Reflected XSS.
An Phuoc Trinh - @_tint0 - Reported unauthenticated RCE Injection.
An Phuoc Trinh - @_tint0 - Reported five RCE vulnerabilities.
Ansar Uddin, X Handel - https://x.com/Ansar0047 - Reported Broken Access Control and Weak Password Policy.
Ansh Jain - website : https://sudoark.tk - Reported Cross-site scripting (XSS) / Reported Server-side request forgery (SSRF) vulnerabilities.
Ansh kr jha - https://www.linkedin.com/in/ansh-kumar-jha-b5188a249 - Reported HTML/CSS injection and Broken Access Control.
Anurag Srivastava - http://fb.com/anurag424242 - www.rmar.in<http://www.rmar.in>: Reflected XSS.
Anusha Deekonda - twitter.com/KeerthiCrackers - Reported Cross-site scripting (XSS).
aqib shah - twitter.com/aqibshah - Reported Stored Cross-site scripting (XSS) and reflected Cross-site scripting (XSS) .
Aria Akhavan - https://facebook.com/aria.stefano: Reported xss vulnerabilities.
Ariel Rachamim & Omri Inbar - https://www.linkedin.com/in/ariel-rachamim/ - Reported Subdomain takeover.
Arifin - LinkedIn: https://www.linkedin.com/in/ipsss/ , Blog: https://pureheartdad.substack.com/ - Reported "Unauthenticated Access to API Endpoints".
Arjun Singh http://linkedin.com/in/arjun-singh-33924018b - Reported Open Redirect.
Arpit Borawake https://linkedin.com/in/rpt - Reported Cross-site scripting (XSS) and Path traversal vulnerabilities / Reported Subdomain takeover vulnerabilities
Arpit Kubadia - https://twitter.com/aksquaretech - Reported several Information Disclosure / Reported Cross-site scripting (XSS) / Reported Default login / Reported Server-side request forgery (SSRF) vulnerabilities / Reported Default login.
Ariq Ahmad - https://www.facebook.com/near.ardor: Reflected XSS.
Arndt Adler: Reported XSS vulnerabilities.
Aron Binoy - https://www.linkedin.com/in/aron-binoy-6438792a9 - Reported Unauthenticated Access to AWS Access Keys and Secret Keys via GraphQL Asset Enumeration / reported "Unvalidated Redirects and Forwards" vulnerability.
Arsiadi Sriyanto - @donrookie: Reported XSS vulnerability.
Artur Shutov - Reported Application Logic Bypass.
Arun K Mishra - https://twitter.com/arun_2512 - Reported clickjacking vulnerability.
Aryan Rohit - https://www.linkedin.com/in/aryan-rohit/ - Reported Information Disclosure.
Aryawardhan Singh - https://x.com/0x2458 - Reported Open Redirect.
Ashesh Kumar - http://facebook.com/ashesh1708 - Reported XSS vulnerabilities.
Ashish Kunwar - @D0rkerDevil - Reported security misconfiguration vulnerability / Reported Server-side request forgery (SSRF).
Ashutosh Nath Rimal (KhukuriRimal) - https://in.linkedin.com/in/ashutosh-nath-rimal-534690137 - Reported Information Disclosure.
Ashutosh Singh - facebook.com/ashu.singboy - RMAR Technologies Pvt. Ltd. - www.rmar.in: Reflected XSS.
Ashutosh Singh Chauhan - linkedin.com/in/ashutosh-iot - Reported Security misconfiguration.
Asif_ack4 - Instagram: https://www.instagram.com/tam_ilcode420 - Reported Missing rate limit.
Asif Hossain - https://x.com/0x0asif - Reported Cross-site request forgery (CSRF).
Asif Showkat wani and Muneeb Shah: Reported xss vulnerabilities.
Asim Delalic https://www.linkedin.com/in/asimd/- Reported several Information Disclosure.
Ataberk Yavuzer- https://0xsaiyajin.github.io/ - Reported XML-RPC vulnerability / WEB/LINKEDIN/TWITTER/FB - Reported Information Disclosure.
Aung Myat Thu - twitter.com/xai_yak - Reported XSS vulnerabilities.
Avi Chakravarti https://www.linkedin.com/in/avi-chakravarti-276881193/ - Reported Clickjacking.
Aviv Yahav - https://www.linkedin.com/in/aviv-yahav-3b87a414b - Reported several vulnerabilities.
Avram Marius Gabriel - www.randosmtorm: Reported XSS vulnerabilities.
Aydin Bektasoglu - Reported "Unauthorized Public Access to Open Telekom Cloud OBS Bucket Exposing Internal Assets" / Reported "Public Access to Open Telekom Cloud OBS Dataset Bucket Exposing Client-Associated Training Data".
Ayoub Nait Lamine - https://www.facebook.com/profile.php?id=100004407498249e: Reported host header injection and Open Redirect vulnerabilities.
Ayoub SAFA - https://www.linkedin.com/in/ayoub-safa-2a443938/ - Reported default credentials
Ayush Mangal - https://www.linkedin.com/in/ayush-mangal-48a168110/ - Reported Security misconfiguration / Reported Open Redirect, Reported Missing rate limit.
Ayush Shrestha - www.linkedin.com/in/ayushxtha - Reported Cross-site scripting (XSS).
Ayush Singh (https://in.scanfactory.io) https://twitter.com/glatisantbeast - Reported Default login.
Aytaç Kalıncı - https://www.linkedin.com/in/aytackalincii/ - Reported Cookie Information Disclosure.
Ayudya Fitri - https://www.linkedin.com/in/ayudya-f-5b61b6113 - Reported Information Disclosure.
Ayyoub Lahlali - https://www.linkedin.com/in/ayyoublahlali - Reported "Open Redirect though URL".

B

Babar Khan Akhunzada @babar1337khan - Reported Apache Tomcat/6.0.24.
Baburao Kittur - https://twitter.com/bk_cipher / https://in.linkedin.com/in/baburao-kittur - Reported Privilege escalation for server/application.
Bagas Prananda - linkedin.com/in/bagasprananda97 - Reported Clickjacking / reported Server-side request forgery (SSRF) vulnerabilities.
Balogun Ismail Ayokunle - https://x.com/irebamiji11 - Reported Email Hyperlink Injection / Path Listing
Bao Bui (@0xd0ff9) - twitter.com/Jok3rDb - Reported Privilege escalation for server/application.
Bao Chau - https://www.linkedin.com/in/nhubaochau/ - Reported Open Redirect.
Batee5a - hackerone.com/batee5a - Reported Local File Inclusion.
Battal Faik Aktaş - twitter.com/BattalFaikAktas - Reported Open Redirect and several Server-side request forgery (SSRF) vulnerabilities / Reported Remote Code Execution (RCE) vulnerabilities / Reported Information Disclosure, Cross-site scripting (XSS), Default login vulnerabilities.
B. Caller - WEB/LINKEDIN/TWITTER/FB - Reported Remote Code Execution (RCE).
Ben Chinoy - https://www.linkedin.com/in/benchinoy - Reported Broken Access Control.
Benjamin Kunz Mejri (Evolution Security GmbH - Vulnerability Laboratory) www.vulnerability-lab.com - twitter.com/vuln_lab - Reported XSS (Stored) vulnerability, SQLi, Exec
Bhanu Teja - twitter.com/bh4nut3j4 - Reported Subdomain takeover / Reported Unauthenticated Local File Read / Reported Cross-site scripting (XSS) / Reported User Enumerations / Reported Information Disclosure.
BHARAT CHOUDHARY - https://twitter.com/iambharat18 - Reported Information Disclosure and Open Redirect.
Bhavesh Naik: Reported XSS vulnerability.
Bhuwan Bhetwal - https://twitter.com/yamarajislitaf - Reported Information Disclosure.
Bibek Shah - @noobibek - Reported several Information Disclosure.
Bijesh Debbarma: Sqil & Path Disclosure.
Bilal Teke - https://luckywiki.org - Reported XSS vulnerabilities.
Bill Ben Haim - https://www.linkedin.com/in/bill-ben-haim-b6775a48/ - Reported default credentials.
Bipul Jaiswal - https://twitter.com/r3curs1v3_pr0xy. - Reported Information Disclosure.
BITCOMSEC - http://bitcomsec.org - http://twitter.com/bitcomsec - Reported Remote Command Execution vulnerability.
Björn Peeters: Reported CSRF/XSS vulnerabilities.
Björn Peeters: Reported xss vulnerabilities.
Blessing Akaso (Azabat) https://linkedin.com/in/blessingakaso
Bodgan Calin: Reported time based SQL injection.
Brijesh Prajapati - https://twitter.com/Sherloc88271414?s=09 - Reported other vulnerabilities.
Bruno Nunes Bittencourt (Eldruin) - www.linkedin.com/in/bruno-nunes-bittencourt/ - Reported Open Redirect.
Bryan Galao - Facebook: https://www.facebook.com/xbryan.galao - Reported Clickjacking, content spoofing & Information Disclosure vulnerabilities.
bsysop - twitter.com/bsysop - Reported Security misconfiguration. / Reported Information Disclosure.
BUDURU NAVEEN - www.linkedin.com/in/buduru-naveen-4916172b4 - Reported "Cross-Site Scripting (XSS)" / Reported Account Update Possible After Logout Using Replayed Request / Reported "Sensitive Information Disclosure" and "HTML Injection" and "Sensitive Data Exposure" / Reported "Insecure Direct Object References (IDOR)"/ Reported "Publicly Accessible .htaccess File", Info Disclosure. / Reported Unauthenticated Access
Bughunter Emmedy - Twitter: https://x.com/olamdeen - Reported Account Takeover vulnerabilities, Reported Unauthorized File Upload.
Bugsgalore - https://x.com/BugsgaloreSec - Reported "Session fixation.
Burak Ünal @_d4rkbrain - twitter.com/_d4rkbrain - Reported Information Disclosure.
Bytes_Knight, https://bugcrowd.com/h/Bytes_Knight, Open redirection, CORS Misconfiguration.

C

Cale Anderson - Reported Broken Authentication.
Can Karacan - https://www.linkedin.com/in/can-karacan-69ba09b8/ - Reported Information Disclosure, Open Mail Relay and Cross-site scripting (XSS) vulnerabilities.
Cara Sharma - https://www.facebook.com/SharmaCara - https://twitter.com/Sharma_Cara - Reported Insecure Cross Domain and CSRF vulnerabilities.
Carl-Theodor Geilhufe – www.carl.geilhufe.de - Reported information disclosure.
Carlos Cardoso - https://websecauditors.com | facebook.com/cmscardoso - Reported misconfigured DNS records.
Cernica Ionut Cosmin: Reported Directory Listing vulnerabilties.
Charlie Briggs - @Charlie_N_B: Reported XSS vulnerabilities & SQL injection.
Chetan - linkedin.com/in/chetan-00 - Reported Information Disclosure.
Chetan Gulhane - http://varutra.com: Reported xss vulnerabilities.
Chiheb Chebbi - twitter.com/chihebchebbi201 - Reported Remote Code Execution (RCE) / Reported Security misconfiguration.
Chilik Tamir - @_coreDump: Reported IOS App vulnerability.
chippa vijay kumar- https://twitter.com/vijay922 - Reported Information Disclosure.
Chinmay Barbade - https://www.linkedin.com/in/chinmay-barbade-a36400162/ - Reported Broken Access Control.
Chinmohan Nayak - @nayakchinmohan – http://securityonair.blogspot.in/: Reported information disclosure.
Chinmoy Guho - https://www.facebook.com/chinmoy.guho.2025 - Reported CSRF Vulnerability / reported path traversal vulnerability.
Chinmoy Mukherjee chinmoy.info - Reported Information Disclosure.
Chinmoy Pratim Borah - http://facebook.com/cpb2013: Reported XSS vulnerabilities.
Chirag Artani - https://twitter.com/chirag99artani https://3rag.com/chirag-artani - Reported Open Redirect / Reported HTML/CSS injection /Reported Information Disclosure/ reported Cross-site scripting (XSS) vulnerabilities.
Chirag Goyal - https://www.facebook.com/goyal.chirag23 - Reported XSS vulnerabilities.
Chris Green - @chris_t_green - Reported XSS vulnerabilities.
Chris McGowen – http://badcoding.net - @chrismcgowen: Reported DOM-based XSS vulnerability
Christ Bowel Bouchuen - https://christbowel.com - User Enumeration via REST API.
Christian Galeone - https://thefacebook.com/christian.galeone.1: Reported xss vulnerabilities.
Christian Lopez Martin - insertco.in: Reported url redirection vulnerabilities.
Cristopher Busch - Meldung von Information Disclosure Schwachstellen.
Christopher Simmelink -https://www.linkedin.com/in/christophersimmelink/ - Reported "Access-control vulnerabilities".
Clifford Trigo - twitter: @mrtrizaeron: Reflected XSS.
Coastline Cybersecurity - https://coastlinecyber.com, https://x.com/CoastlineCyber - Reported Server-side request forgery (SSRF).
Codermak https://twitter.com/arshadkazmi42 - Reported Information Disclosure.
Cody R Ward - www.risker.com.au / www.facebook.com/le.pandanator - Reported XSS vulnerabilities.
collinsmarra - https://twitter.com/CollinsMarra - Reported Information Disclosure.
Coltuneac Alexandru: Reported XSS vulnerabilities.
Cotic Madalin - Reported XSS vulnerabilities.
Craig Young - Web: https://secur3.us/ Twitter: https://twitter.com/craigtweets - Reported RCE.
Cristi Vlad - https://twitter.com/CristiVlad25 - Reported Cross-site scripting (XSS).
Cyber Chutiya Attacker (Randi ka pilla): Reported CCS Injection vulnerabilities and privilege escalation for server/application.

D

Dan Fabro - https://dnx.zone - Reported Stored XSS, Reflected XSS, Self-XSS, Open Redirect, External SSRF and Clickjacking vulnerabilities..
Danijel Maksimovic - @maxon3: Reported URL redirection vulnerability.
Daksh Patel - @Dakshxss: Reported Login Issues.
Dale James - https://www.linkedin.com/in/dale-james-b7294b36 - Reported Sensitive Data Exposure.
Dan Kelley - dak@thesecure.be - Reported Information Disclosure.
Daniel Bakker - https://twitter.com/jackds1986 - Reported Information Disclosure.
Daniel Blindu - https://twitter.com/eblindudaniel - Reported Server-side request forgery (SSRF).
Daniel Ferreira - https://ferreiraklet.github.io - Reported "Subdomain Takeover"
Daniel H - Reported Security misconfiguration.
Danil Wacker - https://www.linkedin.com/in/danil-wacker-624aa2272 - Reported Missing server checks.
Daoud Youssef - https://www.facebook.com/daoud.youssef.7 - Possible DDoS attack.
Darija Ivanovic - Web Develeper (Brcko Distrikt): Reported SQL Injection.
Darius Petrescu - twitter.com/@akkiliON_: Reflected XSS.
David Eckhardt: Reported "Full Path Disclosure“ and XSS vulnerabilities.
David Hoyt Hoyt LLC - http://xss.cx: Reflected XSS.
David Lassig - https://twitter.com/d_lassig / https://www.linkedin.com/in/davidlassig - Reported Information Disclosure.
Debarghya Sahoo - linkedin.com/in/debarghyasahoo - Reported Cross-site scripting (XSS).
Deekonda Vinod - twitter.com/vinod_deekonda - Reported Information Disclosure.
Deepak Kumar ( CipherEra) - vedixera.com - Reported Information Disclosure / Reported User Enumeration.
Deepanker Chawla - www.deepanker.in - @deepankerchawla: Reported XSS vulnerabilties.
Denis Bazur - argv500@gmail.com: Reported XSS vulnerabilities.
Deniz Işık / bursali - Administrator - www.bursali.eu: Reported CSS and LFI vulnerabilities in Deutsche Telekom Message Boards.
Denis Werner – www.nobbd.de, @nobbd - Reported SQL injection vulnerabilities.
Dennis Mwanzia - https://www.linkedin.com/in/dennis-mwanzia-b5b243283/ - Reported Information Disclosure / Reported Broken Access Control.
Devesh bhatt #deveshbhatt11: Reported Enumeration in login page.
Devjeet Singh: Sqli & Path Disclosure.
Dharmik Fichadiya - https://twitter.com/shelby67051949/ - Reported Broken Access Control.
Dhaffa Nurfahriansyah - https://linkedin.com/in/dhaffanurfahriansyah - Reported Information Disclosure.
Dhinu Ramachandran www.linkedin.com/in/dhinu-ramachandran-76683b206 - Reported HTTP header.
Dhrumil Patel - https://dhrumilpatel1209.netlify.app/ - https://www.linkedin.com/in/dhrumilpatel99/ : Reported Sensitive Information Disclosure / Improper Access Control.
Dhruvi Pandya - Reported Information Disclosure.
Diego Bernal Adelantado - https://www.linkedin.com/in/diego-bernal-adelantado/ - Reported Subdomain takeover.
Dimpal Jadhav - https://www.linkedin.com/in/dimpal-jadhav-79a4231a3 - Reported "Hardcoded Credentials in Application".
Dmitry Ivanof - Reported XSS (Reflected) vulnerabilities.
Dipu Singh - https://www.linkedin.com/in/dipu-singh-40832b2a9/ - Reported "Server Security Misconfiguration".
Divakar - https://www.facebook.com/kd.divakar: Reported XSS vulnerabilities.
Djaballah Mohamed Taher - https://www.facebook.com/djaballah.mohamedtaher - Reported XSS vulnerabilities.
Djaber Djoukhrab - http://www.facebook.com/djroot.dz - Reported XSS vulnerabilities.
D. Jaya Shankar - https://twitter.com/MrJayashankar - Reported Information Disclosure.
doctor X - https://x.com/Ahmed846737825 - Reported Detailed Server Configuration Page.
Dominik Schlöpke - https://de.linkedin.com/in/dominik-schl%C3%B6pke-7ab1791a2 - Reported "Subdomain Takeover".
Dr. Sebastian Schrittwieser - www.fhstp.ac.at & Peter Kieseberg - www.sba-research.org: Static code analysis of mobile applications
Duc Nguyen Huu - @peterjson - https://twitter.com/peterjson - Reported Remote Code Execution (RCE).

E

Ebrahim Hegazy - twitter.com/Zigoo0: Reported XSS and SQL Injection vulnerabilities.
Edis Konstantini - twitter.com/ediskonstantini: Reported XSS vulnerabilities (flash based).
Eeshwar Dronavalli https://www.linkedin.com/in/eeshwar-dronavalli-5a16ba16a - Reported Missing Rate Limit.
Ehraz Ahmed - www.twitter.com/securityexe: Reported XSS vulnerabilities.
El Sayed Mohamed - www.linkedin.com/in/shai7a0x - Reported Cross-site scripting (XSS).
Elvin Nuruyev - https://www.linkedin.com/in/elvin-nuruyev - Reported Missing Rate Limiting on Login Page
Emad Shanab - Twitter: https://twitter.com/Alra3ees - Reported RCE, XSS and information disclosure vulnerabilities.
Emad Youssef - twitter.com/Sy3Omda - Reported XSS, SSRF, Cross Site Tracing, Server Misconfiguration, Privilege escalation for server/application, multiple Open Redirect vulnerabilities and multiple reports of Cross-site scripting (XSS) / reported Information Disclosure vulnerabilities.
Enzo Freitas - https://www.linkedin.com/in/enzo-freitas-095607182/ - Reported Server-side request forgery (SSRF)/ Reported add Cross-site scripting (XSS) vulnerabilities.
Erchiqui Azzeddine - @zertox1: Information Disclosure.
Ereshwari Valmik - https://www.linkedin.com/in/ereshwari-valmik-28b376137 - Reported Information Disclosure / Reported Information Disclosure.
Eric Flokstra - www.linkedin.com/pub/dir/Eric/Flokstra: Reported xss vulnerabilities.
Erick Fernando Xavier de Oliveira - https://x.com/erickfernandox - Reported Path traversal.
Erik van Oosbree - www.erikvanoosbree.nl: Reported XSS vulnerabilities.
eslamXxX https://www.linkedin.com/in/eslam-sayed-842770160 - Reported Open Redirect.
Eslam Abu Bakr - https://x.com/eabubakr21 - Reported several Information Disclosure vulnerabilities / Reported Cross-site scripting (XSS) / Reported Information Disclosure vulnerabilities / Reported Unauthenticated Remote Code Execution
Eslam Kamal - https://www.linkedin.com/in/eslam-kamal/https://www.facebook.com/StrikerHacker33 - Reported / Reported Possible DoS Attack.
Eugen Füchsle - http://fyx.li: Reported XSS vulnerabilities.
Eusebiu Blindu - Reported XSS vulnerabilities, Nagios Weak Credentials
Evan Ricafort - @robinhood0x00 (www.twitter.com/robinhood0x00): Reported XSS vulnerabilities.

F

Fabian Henneke - https://hen.ne.ke / @fhenneke- Reported DOM XSS vulnerabilities.
Fabian Mucke- https://twitter.com/HerrFabs - Reported Subdomain takeover, Information Disclosure.
Fabian Patrik - fpatrik / https://websafe.hu/ - Reported XSS vulnerabilities.
Fabian Troisdorf - Reported Privilege Escalation and Information Disclosure.
Fady Othman - twitter.com/fady_othman - Reported Cross-site scripting (XSS).
Faisal Ait Hamou - https://facebook.com/Faissal.AitHamou: Reflected XSS.
Faisal Shadab Yazdani - fb.com/fsyazdani RMAR Technologies Pvt. Ltd. (www.rmar.in): Reflected XSS.
Faissal Assakkach - https://www.linkedin.com/in/faissalassakkach/ - Reported Sensitive Data Exposure.
Faiz Ahmed - https://www.linkedin.com/in/faizzaidi/ - Reported outdated security mechanisms.
Faraz Ali - twitter.com/FarazAli94 - Reported Cross-site scripting (XSS).
Fares Djghmoune - https://twitter.com/ImoJOnDz - Reported Remote Code Execution (RCE).
Farhin Malek - https://www.linkedin.com/in/farhin-malek28 - Reported Clickjacking.
Fatih GUREL - linkedin.com/in/fatihgurel/ - Reported CORS, Information Disclosure.
Fatma Elzahraa Mohamed Salam - https://www.linkedin.com/in/fatmaelzahraa-salam-2a38813b3/ - Reported "Unauthenticated Access and Enumeration to Pre-Production Object Storage Bucket"
Fayas S - https://www.linkedin.com/in/fayas--s/ - Reported Exposed pprof endpoint leaking VictoriaMetrics Admin Keys.
Felipe Gabriel Renzi - https://www.linkedin.com/in/felipe-gabriel-renzi - Reported Information Disclosure and Cross-site scripting (XSS) vulnerabilities..
Filippos Mastrogiannis - @filipposmastro - Reported XSS vulnerability.
Florian Kunushevci - https://www.facebook.com/florianx00 - Reported multiple XSS vulnerabilities.
Florian Thie - https://florian-thie.de - Reported a CSRF vulnerability.
Florin Carja - @Quistertow – http://rstforums.com: Reported information disclosure.
Florindarck - http://twitter.com/QuisterTow: Reported path disclosure vulnerabilities.
Foysal Ahmed Fahim - hackerone.com/foysal1197 twitter.com/foysal1197 - Reported Information Disclosure, Subdomain takeover, Broken Access Control and HTTP header vulnerabilities / Reported Cross-site scripting (XSS) / reported HTML/CSS injection vulnerabilities / Reported Server-side request forgery (SSRF), Reported Path traversal.
Francisco Correa - panchocosil.blogspot.com - @panchocosil: Reported sql vulnerabilities.
Francisco Palma - https://twitter.com/1c3t0rm - Reported Default login.
Frank B. Vickers - https://www.linkedin.com/in/frank-vickers-199109a - Reported webservice misconfiguration
Frans Rosén - Detectify (https://detectify.com): Reported XSS vulnerabiltiy.
Frederik Werner - instagram: werner.frederik - Reported Broken Authentication.
Fredrik Nordberg Almroth: Tilde vulnerability.

G

G Bharath kalyan - Whttps://www.linkedin.com/in/bharath-kalyan-476a651ba - Reported Cross-site scripting (XSS) / Reported Information Disclosure vulnerabilities / Reported Security misconfiguration / Reported Missing rate limit.
Gaurang maheta https://www.linkedin.com/in/gaurang-mehta-35515a162- Reported Information Disclosure, Broken Access Control.
GAURAV R NAIK - https://www.linkedin.com/in/gaurav-r-naik - Reported Cross-site scripting (XSS).
glatisant - https://twitter.com/glatisantbeast - Reported Open Redirect.
George Adel Sami Salib https://www.linkedin.com/in/george-adel-5ab77a1b9 - Reported Information Disclosure.
Gia Bui Dai - @yabeow from VNG Corporation - Reported Information Disclosure.
Gineesh George - gineesh-george: Reported XSS vulnerabilities.
Gokuleshwaran Bharathkumar - https://www.linkedin.com/in/gokuleswaranb-ethacker/ - Reported "Sensitive Data Exposure".
Gozie - Twitter: twitter.com/g0ziem - Reported Cross-site scripting (XSS).
Greg Long with hack0xchet - Reported Cross-site scripting (XSS).
Guifre Ruiz – https://guif.re – Reported Information Disclosure
Guillermo Gregorio https://twitter.com/bsysop - Reported Server-side request forgery (SSRF).
Gurjant Singh Sadhra - http://hackerdesk.com @GurjantSadhra: Multiple vulnerabilities and SQL Injection, reported XSS vulnerabilities.
Guru Prasad Pattanaik (TH3N00BH4CK3R) - https://www.linkedin.com/in/guru-prasad-pattanaik - Reported HTML/CSS injection.

H

Halil Ahmad https://twitter.com/Halilahmadd - Reported XSS (Reflected) vulnerabilities.
Halil Arı - https://www.linkedin.com/in/halilari/ - Reported Information Disclosure.
Hammad Shamsi - https://sh3ifu.com: Reported XSS vulnerabilities.
Hanno Böck - https://hboeck.de/ - https://twitter.com/hanno - Reported Information Disclosure, Reported RCE; Report Outdated Software vulnerabilitie.
Hans-Martin Münch, Mogwai Security - SQL Injection and RCE Vulnerabililty.
H@ck3r h!t3sh - www.sriyaan.com: Reported XSS vulnerabilities.
Happiness Oribhunuebho (Herthiqal) - https://www.linkedin.com/in/herthiqal - Reported Hyperlink Injection.
Hardik Gupta - https://www.linkedin.com/in/hardik-gupta-136644225/ - Reported Open Redirect.
Hardik Tailor - @iamhardiktailor: Reported XSS vulnerabilities.
Harendra yadav - linkedin.com/in/harendra-kumar-b4b510214 - Reported Missing rate limit.
Harikrishnan Dhandapani - https://www.linkedin.com/in/harikrishnan-d - Reported Broken Access Control.
Hari Krishnan - Facebook.com/c.hari1997: Reported clickjacking vulnerabilities.
Harinder Singh (S1N6H) - https://www.linkedin.com/in/lambardar - Reported Information Disclosure and Clickjacking.
Haris Ahmed - https://www.linkedin.com/in/haris-ahmed-ethical-hacker/ / Haris Ahmed (@HarisAhmed95) / Twitter- Reported Clickjacking.
Haris Mamoun - Reported Remote Code Execution.
Hasibul Hasan Rifat - twitter.com/rifatsec - Reported Information Disclosure.
Hasibul Hasan Shawon - saiyan0x01.com - Reported Sensitive Data Exposure vulnerabilities.
Harry Schreiner - http://schreinerit.de/?sites=penetrationtest: Reported XSS vulnerabilities.
Harsh Bhanushali - http://linkedin.com/in/harshbhanushali - Reported User Enumeration.
Harsh maheta - https://www.linkedin.com/in/harsh-maheta-7057542a9?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=android_app - Reported Information Disclosure.
Harsh Parekh https://www.linkedin.com/in/harshparekh11- Reported Remote Code Execution (RCE); Reported Information Disclosure.
Harsha Vardhan Boppana - @hvboppana: Reported cross site scripting.
Harshil Parikh https://www.linkedin.com/in/harshil-parikh-945bb8201 - Reported Clickjacking.
Harshit Shukla - http://facebook.com/lords001: Reported HTML Injection Vulnerability.
Hasan Aliyev - https://www.linkedin.com/in/hasan-aliyev-560723338 - Reported Cross-site scripting (XSS).
Hasan Al Mahmud - https://www.linkedin.com/in/m4hmud404/ - Reported "Unauthenticated firmware distribution leading to supply chain compromise".
Hasan Basri Elisert - https://www.linkedin.com/in/hasanelisert - Reported Unsecured communication.
Hassan Badran - badranh.github.io - Reported Cross-site request forgery (CSRF).
Hassan Tijani - LinkedIn: https://www.linkedin.com/in/h-t-345124-k-v/ Reported "unauthenticated Gitea instance exposing internal OTC infrastructure data"; Reported Unauthenticated Dashboard & Gadget Config Disclosure
hatim chabik https://twitter.com/H_chabik - Reported Cross-site scripting (XSS).
Hazem Mohamed - twitter.com/hazem0x - Reported XSS (Reflected) vulnerabilities.
heiye007 - WEB/LINKEDIN/TWITTER/FB - Reported Information Disclosure.
Herman Francisco - https://www.linkedin.com/in/herman-francisco-30560a1b3/ - Reported Other.
Hemant Kashyap - https://www.linkedin.com/in/hemant-kashyap-714564199 - Reported Server-side request forgery (SSRF).
Hilal Khan - https://www.linkedin.com/in/hilal-khan-8a56ba321/ Vulnerability Name: Disclosure of credentials
Himanshu - Reported Security misconfiguration.
Himanshu Sondhi - Reported Cross-site scripting (XSS) and Broken Access Control.
Hip - insight-labs.org: Reported Content Spoofing and CSRF vulnerabilities.
Hoang Quoc Thinh - @g4mm4 of CyberJutsu.IO - Reported RCE / Reported add Server-side request forgery (SSRF) vulnerabilities.
Honc (章哲瑜）- honcbb@gmail.com - Reported Open Redirect.
Horatau Marius - http://www.hackyard.net: Reported cross site scripting.
H SARDAR - https://www.instagram.com/_.sardar07?igsh=MThvbGRjcHNkY3dobg== - "Reported Stored Cross Site Scripting"
Hsu Myat Noe - https://www.linkedin.com/in/hsumyatno3: Reported Path disclosure.
Huy Kha - www.linkedin.com/in/huykha - Reported deprecated ciphers.
Huzaifa Khattak - www.linkedin.com/in/huzaifa-k-6321b2361 - Reported "Unauthenticated Information Disclosure".
Huzaifa Shaikh - https://www.linkedin.com/in/huzaifa-shaikh8901?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=android_app - Reported Subdomain takeover.
Hzllaga (宋昕岳) - hzllaga@gmail.com - Reported Other.

I

lalka - https://twitter.com/0x01alka - Reported XSS vulnerability.
ibrahim_0x - https://x.com/ibrah1m_0x - Reported User Enumeration.
Ibrahim M.El-Sayed - the_storm: Reported SQL Injection vulnerabilities.
Ibrahim Raafat - @RaafatSEC - www.starware.net: Reported XSS vulnerabilities and Critical Information Disclosure.
Ibrahim Saud M - linkedin.com/in/ibrahim-saud-38a338139 - twitter.com/ibrahimsaudm?s=08 - Reported Default login.
Idowu Sodiq (Cybersecurity specialist) - https://www.facebook.com/roheeez - Reported Information Disclosure Vulnerability.
Iem Prog - www.facebook.com/IEMPROG: Reported XSS vulnerabilities.
Ifrah Iman - www.ifrahiman.com / twitter.com/IfrahIman_ - Reported XSS vulnerabilities.
Ilamparithi Imayavaramban - https://ilam.page - https://www.linkedin.com/in/ilamparithi-i - Reported Business Logic Vulnerability.
Ilca Lucian: Reported XSS vulnerabilities.
İlyas ORAK - tr.linkedin.com/in/ilyasorak - INNOVERABT - (2x) Reported XSS (Reflected) vulnerabilities.
Ilyes Medjedoub - https://linkedin.in/in/ilyes-medjedoub - Reported XSS.
Imen Essoussi: Reported SQL injection vulnerabilities.
Imran Hosssain, X Handel - https://x.com/s41n1k - Reported Broken Access Control.
Indresh Verma - https://twitter.com/Jester0x01 - Reported Information Disclosure.
Infoziant Security - https://in.linkedin.com/company/infoziant-security - Reported HTTP header.
Intrigue team - www.intrigue.io - Reported Information Disclosure.
Ishan Anand - @Zer0-Access: Reported XSS vulnerabilities.
ISHAN VYAS https://twitter.com/_snak3_/ - Reported Broken Access Control.
iskhaled nassar twitter.com/knassar702 - Reported User Enumeration, Cross-Site Scripting (XSS), Information Disclosure.
Ismael Hasan - https://www.facebook.com/ismaieil - Reported XSS vulnerabilities.
İsmail BÜLBÜL - Uluslararası Siber Güvenlik Federasyonu - Reported an XSS vulnerability.
Ismail Hossain - Twitter: https://twitter.com/cmsajib, Web: https://eesec.org - Reported an text injection vulnerability.
İsmail Taşdelen - https://linkedin.com/in/ismailtasdelen - Reported missing security mechanisms, clickjacking, information disclosure and other vulnerabilities, Reported Cross-site scripting (XSS), Reported HTTP header vulnerabilities, Reported Security misconfiguration / Reported Server-side request forgery (SSRF) vulnerabilities /
Issam Rabhi - https://sites.google.com/site/issrabhi/: Reported XSS vulnerability.

J

JAAT Gaurav (@webcipher101) - https://www.linkedin.com/in/gaurav-dalal-0434821b5/ - Reported Information Disclosure.
Jacob Soo Lead Re, @Gunther_AR: Reported xss vulnerabilities.
Jagadeesh - https://www.linkedin.com/in/jagadeesh-jd-79308b93/ - Reported clickjacking vulnerabilities.
Jai Kumar B linkedin.com/in/jai-kumar-835a54183 - Reported Information Disclosure.
Jake Reynolds | www.depthsecurity.com | https://twitter.com/depthsecurity - Reported XXE vulnerabilities.
Jakub Zoczek - http://zoczus.blogspot.com: Stored XSS.
Jamal Eddine El Hadjeui - @jamalc0m: Reported vulnerabilities.
Jamal Eddine El Hadjeui – www.paytabs.co: Reported Open URL Redirection vulnerability
Jamshid Baghban https://bugforlife.com/ - Reported HTTP header.
Janhavi Rajendra Sonatkar - www.linkedin.com/in/janhavi-sonatkar-42a76418b - Reported HTML/CSS injection.
Jan Markus Schütz- Reported Broken Authentication.
Jannick Oursin - facebook.com/jannick.oursin - Reported Information Disclosure.
Jan-Peter Rauschning - https://Rauschning.me - Critical Personal Data Information Disclosure.
Javid Hussain - @javidhussain21: Reported XSS vulnerabilities.
Jayshree Bhattacharya - linkedin.com/in/jayshree-bhattacharya-4a399a135 - Reported Broken Authentication.
Jeet Pal - https://www.linkedin.com/in/jeet-pal-22601a290 - Reported SQL injection / Reported Stored Cross Site Scripting (XSS).
Jens Müller - hacking-printers.net – CORS misconfiguration.
Jeroen Hensen - Online Handle: 0xLumpy Website: 0xlumpy.cc
Jesus Maria Bermudez Serrano - twitter:@JesusBermudez32 - Reported Path traversal.
J. Francisco Bolivar - x.com/JFran_cbit - Reported Information Disclosure.
Jigar Thakkar (Akhani) - www.infobittechnologies.com - @jigarthakkar39: Reported Clickjacking and Information Disclosure vulnerabilities.
Jignesh Mistry: Reflected XSS.
Jim Rush - https://jimrush.me - Reported Remote Code Execution.
Jitendra Jaiswal - @Facebook/desihack @twitter/jeetjaiswal22: Reported xss vulnerabilities.
Joel Chang - https://x.com/joelchanggg - Reported Default login.
Joel Marco Özpinar - https://jmo740.com: reported Reflected cross site scripting vulnerability.
Johannes Bluhm - Reported Information Disclosure.
John Kronenberg - https://www.linkedin.com/in/johnkronenberg/- Reported Information Disclosure.
Jon Bitquark – https://bitquark.co.uk: Reported open redirect vulnerability.
Jon Bitquark - open redirect: XSS and SQLi vulnerabilities.
Jordan Glover - LinkedIn https://www.linkedin.com/in/jordan-g-ab835550 - Reported Security misconfiguration.
Jose Carlos Exposito Bueno - https://www.linkedin.com/in/josecarlosexposito - Reported Cross Site Scripting vulnerabilities.
José Rabal Sastre: Reflected XSS.
Joseph Thacker - rez0.blog - twitter.com/rez0__ - Reported Information Disclosure.
jub0bs - https://twitter.com/jub0bs - Reported Subdomain Takeover.
JubaBaghdad - https://x.com/JubaBaghdad - Reported Information Disclosure
@JubaBaghdad - https://x.com/JubaBaghdad. - Reported Information Disclosure.
Julien Ahrens - @MrTuxracer (www.rcesecurity.com): Reported cross-site scripting.
Junaid Farhan - www.facebook.com/junaid.farhan.54 - Reported a clickjacking vulnerability.

K

k3mlol - https://x.com/k3mlol - Reported Default login.
K Mohammed Danish faraz - linkedin.com/in/danish-faraz-70555bb9 - twitter.com/DanishKakingare?s=09 - Reported Default login.
KHAN mamun - https://twitter.com/mamunwhh - Reported Information Disclosure.
Kahu Labs - https://kahulabs.com / https://www.linkedin.com/company/kahulabs - Reported Authentication Bypass and PII Leakage/Exposure.
Kamil Jarosiński - https://twitter.com/ja_sec - Reported Cross-site scripting (XSS).
Kamil Sevi - @kamilsevi: Reported XSS vulnerability.
Kamil Sienicki - https://blog.sienicki.eu- Reported Cross-site scripting (XSS).
Kamrul Hassan, https://www.linkedin.com/in/kamrul-hassan-x64, Sensitive Data Exposure
Kapil S. Kulkarni - Facebook: kapil.kulkarni.587 , Twitter: @kapilkulkarni91 , LinkedIn: https://www.linkedin.com/in/kapil-kulkarni-oscp-ceh-chfi-5a333763/ - Reported content spoofing vulnerability.
Karan Rathod https://www.linkedin.com/in/karan-rathod-35aa951b1: Reported Remote Code Execution, Reported Subdomain Takeover, Reported Information Disclosure.
Karim Mohamed Ahmed - https://www.facebook.com/X.TiGeR.K: Reported XSS vulnerabilities.
Kashif Shoukat https://www.linkedin.com/in/kashif-shoukat-1o1/ - Reported Other.
kasme_memon_aya_tha - Reported Remote Code Execution (RCE).
Kasper Karlsson - Reported Cross-site scripting (XSS).
Kaushik Sardar - https://www.facebook.com/kaushiksardar.22 - Reported Host Header Vulnerabilities.
Kazam Chaudhary aka p3n73st3r - www.twitter.com/p3n73st3r - Reported XSS vulnerabilities.
Kenneth Billones - https://twitter.com/k3nziy - Reported open redirect vulnerabilities.
Kevin Yehezkiel Gurning - https://www.linkedin.com/in/vinzel/ - Reported Open Redirect, Cross-site scripting (XSS).
Keyur Mehta - linkedin.com/in/keyur-mehta4455 - Reported Clickjacking, Reported Default login.
Khaled Abdelaziz Youssef - Reported Broken Access Control and Broken Authentication vulnerabilities, Reported Broken Access Control, Reported Information Disclosure.
khaled nassar - https://twitter.com/knassar702 - Reported Server-side request forgery (SSRF).
Khaled Essam Nassar - https://www.facebook.com/profile.php?id=100015121337012 - Reported XML-RPC vulnerability.
Khaled Mohamed [xElkomy] - xelkomy.github.io - twitter.com/0xelkomy - Reported several Cross-site scripting (XSS).
Khan Janny - https://www.facebook.com/bossjannykhan- Reported Multiple Vulnerabilities.
Khôi Dương - Viettel Cyber Security - Reported IDOR vulnerability.
killua_21 - https://www.facebook.com/profile.php?id=100020497173263 - Reported Missing rate limit.
Kiran Chettri - twitter.com/kiranchettri_?s=09 - Reported User Enumeration, several Security misconfiguration and Possible DoS Attack; Reported HTML/CSS injection; Broken Access Control.
Kishan Kumar - https://twitter.com/hst_kishan?s=09 - Reported Clickjacking vulnerability.
Klaus @klaus_dev - Reported Information Disclosure.
KoF2002 & Sr33h4r!: Reported URL Redirection vulnerabilities.
Kolozsi András https://twitter.com/bugh101 - Reported XSS vulnerabilities, SQLi, Information Disclosure, CSFR
Koulick Ghosh- https://www.linkedin.com/in/koulick-ghosh-732458205/ - Reported Cross-site request forgery (CSRF).
Koutrouss Naddara: Reported XSS vulnerability.
kr1shna4garwal - https://www.linkedin.com/in/kr1shna4garwal - Reported User Enumeration / Reported Information Disclosure.
Krishna Chaitanya N - linkedin.com/in/n-krishna-chaitanya-27926aba - Reported Information Disclosure.
Kuldeep Soni (c1ph3r) - https://www.linkedin.com/in/kuldeep-s-49108798/ - Reported Broken Access Control and Open Redirect vulnerabilities.
Kunal Bahl - Twitter: https://twitter.com/KunalBahl3, Facebook: https://www.facebook.com/kunal.bahl59 - Reported an Information Disclosure vulnerability.

L

Laburity - https://www.linkedin.com/company/laburity - Reported Information Disclosure.
⛧ L∆₣₮M₳₦ ⛧ - https://x.com/08xDof20784
Lalith Rallahabandi - @Lalithr95: Reported XSS vulnerability.
Lars Heckner - mail@larsheckner.de: Log4j
Lars Morgenroth - @krankoPwnz: Reported Open Redirect and SQL Injection vulnerabilities.
Laurent De Vos: Reported XST vulnerabilities.#
Leo Starcevic - Reported Subdomain takeover vulnerabilities, reported Information Disclosure, Cross-site scripting (XSS), Unsecure communication.
Leo Switness – reportet SQL vulnerabilities.
Leonid Hartmann - https://twitter.com/_harleo - Reported Authentication Bypass and RCE vulnerabilities.
Leonid Krolle - twitter.com/KrolleLeonid - Reported information disclosure.
Lifeawa lifeawa@163.com- Reported Cross-site scripting (XSS).
LifeJiggy - GitHub: https://github.com/LifeJiggy, X: https://x.com/ArkhLifeJiggy - Reported "Sensitive Data Exposure".
LINDAN TRI SAPUTRA - https://www.linkedin.com/in/lindantri - Reported Race Condition in Resend Email Feature causing OTP Spam
Lingaiah Gadam - @LingaihY - Reported Security misconfiguration / Reported Information Disclosure.
Lion Nagenrauft, Msg Systems AG - https://www.linkedin.com/pub/lion-nagenrauft/ - Reported Information Disclosure vulnerability.
Lokesh Bhade - https://www.linkedin.com/in/Lokeshbhade/ - Reported Clickjacking.
Lorepoint - linkedin.com/company/lorepoint - Reported Information Disclosure.
Lorenzo Toti (sp1nn4k3r) - https://www.linkedin.com/in/lorenzo-toti-b0a939163 - Reported Server-side request forgery (SSRF) / reported Information Disclosures vulnerabilities.
love yadav - linkedin.com/in/love-yadav-5159611a3 - Reported Possible DoS Attack and Missing rate limit vulnerability / reported User Enumeration vulnerabilities / reported Information Disclosures vulnerabilities / reported Other vulnerabilities.
Lucas Carvalho - www.linkedin.com/in/lucascarvalho-/ - Reported Open Redirect.
Lukman Abdulrauf - https://x.com/bughun33er - Account takeover using default login credentials.

M

m0ssser - https://github.com/m0ssser: Reported Information Disclosure
Maciej Wojtasik - https://www.linkedin.com/in/maciej-wojtasik-b7386b208/, https://billtech.pl/ - Reported Broken Access Control.
Magashwarahan A - www.linkedin.com/in/magashwarahan-a-036775293/ - Reported Other.
Magrabur Alam Sofily, @masofily, www.linkedin.com/in/magrabur-sofily - Reported Remote Code Execution (RCE).
Mahesh - LinkedIn: https://www.linkedin.com/in/f50c1e7y/ - Reported several Information Disclosure/ Reported Default login vulnerabilities.
Mahesh Raykar - www.linkedin.com/in/maheshraykar1997 - Reported XSS vulnerability.
MAHIN VM - linkedin.com/in/mahin-vm-57413315a - Reported Clickjacking.
Mahmoud El-Said El-Naggar (Starware) - www.starware.net: Reported Stored XSS vulnerabilities.
Mahmoud Hegazy - https://twitter.com/Hegzous - Reported XSS (Reflected) vulnerabilities.
Mahmoud NourEldin - https://tamatah.medium.com, https://www.linkedin.com/in/nureldin/ - Reported "Rate Limit Bypass", "DOM XSS".
Mahmud Hasan Sizan - https://twitter.com/mr_g_007 - Reported Server-side request forgery (SSRF).
M. Akif SAYIN ~ DedCrowd - https://www.linkedin.com/in/dedcrowd - Reported "Unauthenticated Information Disclosure".
Maksym Bendeberia - Linkedin: /in/jogspokoen, Website: websafetyninja.com - Reported Information Disclosure.
Malkit Singh - Reported Reflected XSS.
@mamunwhh: https://twitter.com/mamunwhh?s=07 - Reported Information Disclosure.
Mandeep – Reported SSL vulnerability.
Mangesh Muley - https://www.linkedin.com/in/mangesh-muley-877a26229 - Reported Subdomain Takeover.
maniac - https://www.cnblogs.com/piaomiaohongchen - Reported Cross-site scripting (XSS).
Manikanta Simgamsetti - https://www.linkedin.com/in/manikanta-simgamsetti-19bb20140/ - Reported Cross-site scripting (XSS).
Manish Bhandarkar - @leosecure: Cookie disclouser vulnerability
Manish Bhattacharya - http://twitter.com/umenmactech: Reported Clickjacking Attack, Clickjacking with SQLI.
Manoj Kumar: Reported XSS vulnerabilities.
Manole V. Eduard - https://tiktok.com/@itistulcool / https://eduardvasile.ro - Reported Sensitive Data Exposure.
Marc Ströbel – phroxvs: Reported SQL Injection.
Marc-Oliver Munz - https://munz4u.de / https://x.com/marcolivermunz - Reported several Broken Access Control.
Marcel Bilal - wslab.de/#MarcelBilal - Reported a configuration vulnerability.
Marinko Ruzic - https://www.linkedin.com/in/marinko-ru%C5%BEi%C4%87-45162322/
Markus Krell - https://www.friendly-intruder.de/ - Reported XSS vulnerability.
Martin https://hackerone.com/mit0z - Reported several Information Disclosure / Reported Cross-site scripting (XSS) vulnerabilities / Reported Information Disclosure
Martijn B - https://hacksclusive.com https://twitter.com/x1m_martijn - Reported Possible DoS Attack.
Martijn Baalman - hacksclusive.com - twitter.com/hacksclusive - Reported Cross-site scripting (XSS).
Martin - https://twitter.com/martinbydefault - Reported Subdomain Takeover vulnerabilities.
Martin - hackerone.com/mit0z - Reported Security misconfiguration.
Martin "maride" Dessauer - Reported Critical Information Disclosure.
Martin Thirup Christensen - https://twitter.com/MThirup: Reported sql and xss vulnerabilities.
Martin van Wingerden - https://www.linkedin.com/in/martinvw/ - Reported "Unauthenticated DNS zone transfer (AXFR)".
Marvin Heyder - www.heyder-net.de - Reported Security Misconfiguration.
Marwan Idrees Hasan nheli - https://www.facebook.com/marwannheli - Reported Clickjacking vulnerabilities.
Mateusz Goik - aliantsoft.pl: Reported XSS vulnerabilities.
Mathias Karlsson - https://detectify.com: Repored XSS vulnerabilties.
matrixm0x1 - https://x.com/matrixm0x1 - https://www.linkedin.com/in/matrixm0x1: Reported Stored Cross-Site Scripting (XSS) vulnerabilities.
Matthias Fetzer - https://de.linkedin.com/in/matthias-fetzer-2b930b9a: Reported SQL Injection
Matthias Marx - Reported Information Disclosure.
Matthias Ungethuem - Prof. Pentesting, unnex.de: Reported CSRF vulnerability in the context of email address handling.
Maulik Shah: HTTP Header Injection.
Maulik Vaidh - Twitter: @Maulik1827 - Reported clickjacking vulnerability.
Maurice Woitzyk – mauricewoitzyk.de/ twitter.com/Maurice_Woitzyk – stored XSS
Maverick Vi - Reported XSS vulnerabilities.
Maxime Ropelewski - Reflected XSS via Client Side Template Injection.
Max Maaß - https://blog.maass.xyz - Reported Multiple Vulnerabilities.
Max Prietzel: Reported XSS and information disclosure vulnerabilities.
Maxim Rupp: Reported XSS vulnerabilities.
Mayank Bhatodra - http://www.linkedin.com/pub/mayank-bhatodra/7b/82/887: Reported XSS and ‘bypass of HTTPS on exceptional flow‘ vulnerability.
Mayank Kapoor - @wHys0SerI0s: Reported Clickjacking Attack, multiple vulnerabilities and SQL Injection.
Mayuri Suhas Gaikwad: Reported Access Policy Misconfiguration.
Mazen Gamal Mesbah @MazenGamal - www.facebook.com/love.rasolallh: Reported persistent XSS.
MD Abdul Salam: Reported XSS vulnerability.
Md Asif Hossain - https://0x0asif.com - Reported Server-side request forgery (SSRF).
Md. Nur A Alam Dipu - fb.com/nuraalam.dipu2 - Reported XSS vulnerabilities.
Md Rasel Bhuyan - LinkedIn: https://www.linkedin.com/in/rasel-bhuyan/ - Reported Cross-Site-Scripting.
Md Sadat Tamzit - Twitter: https://x.com/SadatTamzit - Reported Cross Site Scripting.
Md Sameull Soykot - @S0yk0t / fb.com/remixx.soykot - Reported XSS vulnerabilities.
Mehdi Elyassa - www.twitter.com/kalimer0x00 - Reported RCE and Privilege Escalation, reported Remote Code Execution
Mehedi Hasan Remon - twitter.com/remonsec - Reported Information Disclosure.
Mehmet Can GÜNEŞ twitter.com/mehmetcangunes - Reported Open Redirect.
Mehtab Zafar https://twitter.com/0xmzfr - Reported Cross-site scripting (XSS) und Editace a čtení dat jiných uživatelů.
Mehul Bharat Lunagariya - TWITTER: https://twitter.com/Mrrain_1996 and LinkedIn: https://www.linkedin.com/in/mehul-lunagariya-bb5b29194/ - Reported clickjacking vulnerabilities.
Melardev (@melardev) - Reported Privilege escalation for server/application.
Memon_Aya_Tha - Reported Information Disclosure.
memon_chodpray - Reported Data manipulation.
Merlin Mayr - Reported XSS-Flaw.
Mert Daş linkedin.com/in/mertdas - Reported Privilege escalation for server/application.
Maximilian Kretschmer - https://maximiliankretschmer.de Reported SSRF (Server-Side Request Forgery) and XSS vulnerabilities.
Michal Brygidyn - https://www.linkedin.com/in/michalbrygidyn/ - Reported Information Disclosure.
Michael Schwarz - @bidde: Reported XSS vulnerabilities.
Miguel Corral - https://twitter.com/mcorral74 - Reported Information Disclosure.
Miguel Llamazares - https://www.linkedin.com/in/mllamazares/ - Reported Information Disclosure.
Miguel Segovia Gil - https://www.linkedin.com/in/miguelsegoviagil - Reported Server-side request forgery (SSRF).
MIHIR MISTRY - mdmmistry@ymail.com: Reported XSS vulnerabilities.
Milad Safdari - @thesafdari0x - Reported Cross-site scripting (XSS).
Milan jain - linkedin.com/in/milan-jain-50a738213 - Reported Missing rate limit / Reported HTML/CSS injection vulnerabilities.
Milan Kyselica - Twitter: https://twitter.com/milan_kyselica - Reported XSS and open redirect vulnerabilities.
Milivoj R. - linkedin.com/in/milivoj-r-8b925bb5 - Reported Cross-site request forgery (CSRF).
Missoum SAID - https://twitter.com/missoum1307: Reported XSS vulnerabilities.
Missoum SAID - @gmail.com - Reported outdated Telekom DNS-entry pointing to an external, vulnerable site.
Missoum SAID - http:// missoum1307.blogspot.com – Reported vulnerable Drupal implementation
Mitulkumar Soni - HACKSTOCk: Reported XSS vulnerability.
moein abas AKA mosec - www.linkedin.com/in/mosec-k - Reported Server-side request forgery (SSRF).
MOGWAI LABS GmbH - Reportes SQLi vulnerabilities.
Mohamed Abdelfatah - https://www.facebook.com/X.Vector1 / https://github.com/X-Vector - Reported multiple (reflected) XSS vulnerabilities.
Mohamed Aborehab - https://twitter.com/MOOHAM33D - Reported Missing rate limit vulnerabilities.
Mohamed AbouElkhir https://x.com/AbouElkhir_isme
Mohamed Ayman - twitter: https://twitter.com/0xA1MN - Reported Information Disclosure.
Mohamed Dief https://twitter.com/DemoniaSlash - Reported Information Disclosure/ Reported CRLF injection vulnerabilities.
Mohamed Elbadry - https://twitter.com/_melbadry9 / https://linkedin.com/in/melbadry9 - Reported CRLF Injection / Cross-site scripting (XSS) and Open Redirect vulnerabilities.
Mohammed Abdelbaset Elnoby - @SymbianSyMoh (W3Pwn.com): Information disclosure, Multiple XSS vulnerabilities.
Mohamed Elkhayat - Mohamed Elkhayat (@Mohamed87Khayat) / Twitter - Reported Cross-site scripting (XSS).
Mohamed Abdelhady - Linkedin https://www.linkedin.com/in/mohamed-abdelhady-0b890420b/
- Twitter https://twitter.com/Mohamed_A_R_1 - Reported Information Disclosure.
Mohamed Gasem (mirror_sec) - http://www.linkedin.com/in/mohamed-gasem-214a20351 - https://hackerone.com/mirror_sec - Reported Sensitive Data Exposure.
Mohammed Ahmed Nassar - FB.COM/Mohammed.Ahmed.Nassar: Reported XSS vulnerabilities.
Mohammed Amer - twitter.com/0nlymohammed - Reported Information Disclosure.
Mohamed amine kerrich - LinkedIn: linkedin.com/in/mohamed-amine-kerrich - Reported Broken Access Control.
Mohamed Elsayed Maati - @MSM_1sT: Reported XSS vulnerability.
Mohamed Ibrahim - twitter.com/mOhamedd7w - Reported Information Disclosure.
Mohamed Naoui - https://www.facebook.com/profile.php?id=100093004897221&mibextid=ZbWKwL - Reported Possible DoS Attack.
Mohamed Nowisar - https://www.linkedin.com/in/mohamed-nowisar-073964327 - Reported "Grafana XSS + Open Redirect".
Mohamed Ragab - www.facebook.com/mohammed.ragab.562 - Reported XSS (Reflected) vulnerabilities.
Mohamed Taha - https://www.facebook.com/mohamedtaha2001 - Reported Information Disclosure.
Mohammed F. Al-Barbari - https://twitter.com/m4dm0e - Reported Cross-site scripting (XSS), Cross-site request forgery (CSRF).
Mohammed Fayez Albanna - www.facebook.com/bana2313: Reported XSS vulnerabilities.
Mohammed Israil - https://twitter.com/mdisrail2468: Reported Access Policy Misconfiguration.
Mohammed Kamal Darwish (Algorithmic) - https://mkalgorithmic.blogspot.com/ - facebook.com/Mohammed.Kamal.Darwish - Reported unsecured communication and Information Disclosure.
Mohammed Magdi Shafig https://twitter.com/mohammedmagdi77 https://www.facebook.com/mohammedmagdishafig smartech.sd - Reported Information Disclosure.
Mohammed Mido - https://www.facebook.com/Mr.notron - Missing rate limit.
Mohammed Nafeed - https://www.linkedin.com/in/mohammed-nafeed-62a716250 - Reported "Sensitive Data Exposure".
Mohammed Sami facebook.com/Jizen0x01 - Reported vulnerabilities.
Mohammed Shine - https://twitter.com/mohammedshine8 - Reported Host Header Injection.
Mohammed Yasin https://twitter.com/DeogoYasin - Reported Broken Access Control.
Mohamed Sakr - facebook.com/X3rrOR - Reported XSS (Reflected) vulnerabilities.
Mohamed R. Serwah - @serwazzito0 - Reported Stored XSS and Reflected XSS vulnerabilities / Reported Cross-site scripting (XSS).
@mohammadhdg1 web: https://infogazine.com - Reported SSL Poodle vulnerabilities.
Mohd Asif Khan - linkedin.com/in/mohd-asif-khan-✪-5228a9179 - Reported Security misconfiguration.
Mohit Kumar - linkedin.com/in/mohit-kumar-4ab6b3bb - Reported Information Disclosure.
Mohit Sahu - @mohitnitrr: Reported Content Spoofing.
Mohsin Khan https://twitter.com/mokhansec - Reported Information Disclosure.
Monendra Sahu - indishell: Reported Content Spoofing.
Mostafa Aboelnour - https://www.linkedin.com/in/maboelnour12/ - Reported Information Disclosure.
Mr!dul Vohra - https://www.linkedin.com/in/mridulvohra - Reported Possible DoS Attack.
Mr.AnonDeek (Abedalrahman aldeek) - facebook.com/Mr.AnonDeek - Reported XSS (Reflected) vulnerabilities and CSRF vulnerabilities.
Mr.AnonDeek (Abedalrahman aldeek) - http://www.facebook.com/Mr.AnonDeek - Reported Missing rate limit vulnerabilities.
msion - msion@foxmail.com - Reported Cross-site scripting (XSS).
Muhammad Afaq Abid- https://www.linkedin.com/in/afaq/ - Reported Information Disclosure.
Muhammad Billadilathof - facebook.com/ToflaXploit - Reported Cross-site scripting (XSS).
Muhammad Haris Aftab - linkedin.com/in/muhammad-haris-aftab-6693201a4 - Reported Security misconfiguration.
Muhammad Julfikar Hyder https://thejulfikar.xyz - Reported Information Disclosure.
Muhammad Sharief - https://www.linkedin.com/in/muhammad-sharief/ - Reported Unauthenticated API Endpoints & Misconfigurations in Production.
Muhammad Waseem — https://www.linkedin.com/in/muhammadwaseem11/ — Remote Code Execution.
Muhammed Sadettin KARATAŞ - Reported Information Disclosure and Cross Site Scripting.
Muhammed Shahmeer (Maads Security) - https://www.facebook.com/Shahmeer.1994: Reported XSS vulnerabilities.
Muskan Shaikh - https://www.linkedin.com/in/muskan-shaikh-a77b801b2 - Reported Security misconfiguration.
بسم الله الرحمن الرحيم - MuslimSec.com - Reported Information Disclosure.
Mustafa Adam - https://www.linkedin.com/in/wadgamaraldeen/ - Reported Other.
Mustafa Can IPEKCI - nukedx.com - Reported Subdomain Takeover vulnerability.
Mustafa Diaa - @c0braBaghdad1 - Reported XML-RPC, Information disclosure, SSTI, SSL/TLS Authentication Gap, Local File Disclosure and Source Code Disclosure vulnerabilities and also usage of outdated and vulnerable software, Insecure Certificates, Configuration Files Disclosure, Cross-Site Tracing (XST) and Full Path Disclosure/ Reported Information Disclosure vulnerabilities.
Muzaffer Satiroglu: https://www.linkedin.com/in/muzaffer-satiroglu-8558541a5 - Reported Broken Authentication.

N

n9h3ch0_2935 - https://x.com/nadhn011194 - Reported Default login.
Naman shah - https://www.twitter.com/naman_1910 - Reported Broken Access Control / Reported HTTP header vulnerabilities.
Name – snop. – rabbitz.org: Reported XSS vulnerabilities.
Naresh Chowdary, twitter.com/knc331 - Reported Privilege escalation for server/application.
Nasim Mostakim - https://www.linkedin.com/in/ontu404 - Reported Default Credentials Usage.
Nasreldeen Yousif Osman - LinkedIn: https://www.linkedin.com/in/nasryousif/ - Twitter: https://twitter.com/nasreldeenusif - Reported Cross-site scripting (XSS).
nav1n - https://twitter.com/nav1n0x, https://www.nav1n.com - Reported Cross-site scripting (XSS).
Navreet - https://www.linkedin.com/in/navreet-singh-rnns142500/ - Reported Cross-site request forgery (CSRF).
Nayab keshodwala - : https://www.linkedin.com/in/nayab-keshodwala-994b1198 – Reported an XSS vulnerability
N B Sri Harsha - nbsriharsha.blogspot.in: Content Spoofing Bug.
Neha Bhatt - https://www.linkedin.com/in/neha-b-3b7006217 - Reported Open Redirect.
Nehal Pillai - https://www.linkedin.com/in/nehal-pillai-02a854172 - Reported Security misconfiguration and Broken Authentication vulnerability.
Nguyễn Trung Kiên (anhchangmutrang) - https://www.linkedin.com/in/anhchangmutrang - Reported Other.
Nick Kelley - Reported Full Path Disclosure vulnerability.
Nicolas Armua - instagram.com/thedragoncompany / https://facebook.com/DTSRECORD - Reported Cross-site scripting (XSS).
Nicolas Thumann - n-thumann.de Reported Bypassing two Captchas / Enumeration Attack / Reported Access Policy Misconfiguration / Reported Open Redirect / Reported XSS (Reflected) vulnerabilities / Reported multiple instances of Sensitive Information Disclosure /reported information, open redirect vulnerability/ disclosure vulnerability and other vulnerabilities /reported Insufficient Access Control, Information Disclosure, XSS, Account Existence Check / Host Header Injection and DoS Attack / DOM-XSS via File Input / Cross-site scripting (XSS) / Domain Ownership Validation Bypass /Reported Open Redirect vulnerabilities/ Possible DoS Attack.
Nijat Alizada - https://www.linkedin.com/in/nicataliyevh/ - Reported Email Bombing and Bouncing vulnerability.
Nikhil Kumar - https://in.linkedin.com/in/nikhil-kumar-4b9443166: Open Redirect / Reported Information Disclosure.
Nikhil Rane - linkedin.com/in/nikhil-rane-31733a217 - Reported Information Disclosure.
Nikola Kojic - http://ras-it.rs/ - Reported Open Redirect and XSS vulnerabilities.
Nikolozi Mardaleishvili - https://github.com/nmardaleishvili - Reported Open Redirect and Improper URI Scheme Validation issue.
Nikunj Chandak - LinkedIn URL : https://www.linkedin.com/in/nikunj-chandak-486367203/ - Reported Missing rate limit.
NILESH AGRAWAL KOYO - https://twitter.com/koyohere - Reported Other.
Nipun Somani (twitter: https://twitter.com/nipunsomani) - Reported possible Privilege Escalation.
Niraj Modi - Reported Other.
nishan4203@icloud.com - https://x.com/mrkali176442?s=21 - Reported .
Nishant Bhagat - https://x.com/nishant57 - Reported Subdomain takeover.
Nishan Shill, https://x.com/mrkali176442?s=11, Broken access control
Nitin Santosh Gavhane - twitter.com/Nitin34627556?s=09 - linkedin.com/in/nitin-gavhane-949b69179 - Missing rate limit.
NoBountyForThis - Twitter: https://twitter.com/akincibor1 - Reported Server-side request forgery (SSRF).
Noman patel - https://www.linkedin.com/in/nomanpatel01?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=ios_app - Reported Subdomain takeover.
Noth (沈彧璿) - zxc7528064@gmail.com - Reported Cross-site scripting (XSS).
Nurullah Demir – ndemir.com - Reported XSS vulnerabilities.

O

Ocnwh - https://x.com/RemonAdnan2 - Reported Reflected XSS.
Olawale Hassan - https://linkedin.com/in/olawaleh, @wallehazz - Reported RCE.
Oliver Müller - https://www.linkedin.com/in/oliver-m%C3%BCller-771b7767/ - Reported Authentication Bypass.
Olivier beg - www.olivierbeg.nl: Reported XSS vulnerabilities.
Omar Badraan - omarmohamedsc.github.io - Reported CSRF vulnerabilities.
Omar ElSayed - fb.me/bxrr23 - Reported Missing rate limit, Security misconfiguration, Other, User Enumeration, Server-side request forgery (SSRF), Cross-site request forgery (CSRF), Cross-site scripting (XSS), Reported Privilege escalation for server/application / Reported Security misconfiguration / Reported Information Disclosure and Open Redirect vulnerabilities / Reported Information Disclosure vulnerabilities / Reported HTML/CSS injection and Broken Access Control vulnerabilities / Reported Unrestricted file upload and Broken Authentication / Reported Clickjacking vulnerabilities / Reported Path traversal vulnerabilities, Reported Remote Code Execution (RCE).
ome_mishra - Reported Remote Code Execution (RCE).
Omur UGUR - omurugur.com - Reported DOM-based XSS vulnerability.
O-RANGE CYBERSECURITY TRAINING & SERVICES LTD - https://o-rangecybersecurity.com/ - Reported Information Disclosure.
Ori Levi - https://www.linkedin.com/in/orilevicyber - Reported Directory Listing, HTTP header, Clickjacking, HTML/CSS injection, Path traversal.
Osama Ansari - www.twitter.com/ansariosama10: Reported DOM Based XSS vulnerability.
Osama Khan - facebook.com/KhanOsama775 - Reported Cross-site request forgery (CSRF).
Osanda Malith Jayathissa - @OsandaMalith: Reported vulnerable version of software.
Owais Mehtab - https://twitter.com/kc_8002: Reported Captcha Bypass vulnerabilities.
Oyetunde Yunus - Website: https://www.coyemerald.com - Reported HTML Injection.

P

Pablo Santiago - https://www.linkedin.com/in/pablo-s-385647163/ - Reported Missing rate limit, HTTP header and Server-side request forgery (SSRF) vulnerabilities.
pallab jyoti borah https://www.linkedin.com/in/pallab-jyoti-borah-20874a181 - Reported Cross-site request forgery (CSRF).
Paradox hunt(N.u) - https://x.com/hunt_n27493 - Reported Cross-site scripting (XSS)
Paras Pilani - @cool_paras: Reported XSS vulnerability.
Parshwa Bhavsar - twitter.com/parshwa_bhavsar?s=08 - Reported HTTP header.
Parth Shukla https://www.linkedin.com/in/parthshu18 - Reported Information Disclosure.
Pascal Zenker - https://parzelsec.de - @parzel2 - Reported RCE and SSRF vulnerabilities.
Parveen Yadav: Reported XSS vulnerability.
Patrik Fehrenbach - IT-Securityguard.com @itsecurityguard: Reported XSS vulnerabilities.
Patrick Davidson Tremblay https://www.linkedin.com/in/patrick-davidson-tremblay/- Reported Default login.
Patrick Lang - linkedin.com/in/patrick-lang-707809147 - Reported Security misconfiguration / Reported Broken Authentication and Information Disclosure vulnerabilities.
Paul Seekamp - www.linkedin.com/in/paulseekamp: Reported XSS vulnerability and Cross-site scripting (XSS).
Paweł Hałdrzyński: Reflected XSS.
Pedro Cardoso - twitter.com/tvmpt - Reported Cross-site scripting (XSS).
Peter Jaric - @peterjaric (javahacker.com): Reported XSS vulnerability.
peterjson of RedTeam@VNG Corporation - Reported Remote Code Execution (RCE).
Peter Levashov - www.SeveraDAO.ai - reported Public data exposure involving OTC
Philippe Delteil @philippedelteil- Reported Possible DoS Attack and Server-side request forgery (SSRF) vulnerabilities.
phor3nsic - https://twitter.com/phor3nsic_br - Reported Server-side request forgery (SSRF).
Piotr Karolak, https://github.com/UGF0aWVudF9aZXJv - Reported Cross-site scripting (XSS) / Reported Server-side request forgery (SSRF) / reported Broken Access Control vulnerabilities.
Piyush P - linkedin.com/in/piyush-p-1b8a2312b - Reported Cross-site scripting (XSS).
Pritam Dash - https://www.linkedin.com/in/pritam-dash-116931171/ - Reported Information Disclosure, Security Misconfiguration, User Enumeration.
Pobereznicenco Dan - danyweb09 - rstforums.com - Reflected XSS.
Pradeep Jairamani: Reported security vulnerabilities.
Prajit Sindhkar (SAPT) https://www.linkedin.com/in/prajit-sindhkar-3563b71a6/ - Reported Information Disclosure.
Prakash - @1lastBr3ath - Reported Server-side request forgery (SSRF).
Prakash Dhatti - https://www.linkedin.com/in/prakash-dhatti-53201167/ - Reported CORS vulnerabilities.
Pralhad Chaskar - @c0d3xpl0it: Reported Clickjacking Attack and XSS vulnerability.
Pramod.P Sargar - linkedin.com/in/impramodsargar - twitter.com/impramodsargar - Reported Clickjacking.
Prashant Rajput - fb.com/HACKDIVE RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Praveen N Air & Simone Memoli (Simon90_Italy): Reported XSS vulnerability.
Praveenarsh - https://www.instagram.com/cybersec_praveenarsh?igsh=MWp1M2E4dWZ6dHdmbQ== - Reported Unsecured communication.
Pranjal Singhal - https://www.facebook.com/pranj.4.u - Reported XSS vulnerabilities.
Prashant Khare - https://www.linkedin.com/in/prashantkhare001- Reported Content Injection vulnerabilities.
Pratama Aji Prisadi - linkedin.com/in/pratamaajip - Reported Server-side request forgery (SSRF).
Prathamesh Joshi - https://twitter.com/@pr4th4m_joshi - Reported XSS vulnerabilities.
Pratik K. Tejani - https://twitter.com/tejani_pratik https://www.facebook.com/pratik.tejani.5- Reported Server-side request forgery (SSRF).
Preetham Kumar - https://www.linkedin.com/in/Preetham--Kumar/ - Reported Information Disclosure.
Prem Kumar - @iAmPr3m
Pritam Mukherjee - linkedin.com/in/pritam-mukherjee-urvil-b75ab9b9 - Reported Missing rate limit.
Priyank - fb.com/priyank3126 RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Priyanshu Upadhyay - linkedin.com/in/priyanshu-upadhyay - Reported Unsecured communication.
Priya Dharshan - https://x.com/JPD_1206 - Reported Remote Code Execution (RCE).
proabiral - https://twitter.com/proabiral- Reported Remote Code Execution (RCE).
Professor the Hunter - https://x.com/bughuntar - Reported Sensitive Data Exposure.
Przemyslaw Krysciak - Web: https://procoding.de/ LinkedIn: https://www.linkedin.com/in/przemyslaw-krysciak/ - Reported several expired certificates.
Pulkit Pandey - twitter.com/pulkitpandey92 - Reported Privilege escalation for server/application.
Purple - https://x.com/purple_colo - Reported "Broken Access Control".
PUSHKAR KUMAR - Reported Information Disclosure.

Q

R

Raafeh Ur Rehman - https://www.instagram.com/raafehr165?igsh=MXZzbTQ0NnU2eTFvOA== - Reported Security misconfiguration.
Rafael Cavalcante Zanetti - https://www.linkedin.com/in/sysraafael/ - Reported Information Disclosure.
Rafael Fedler - https://www.linkedin.com/in/rafaelfedler- Reported open-redirect vulnerability.
Rafiqul Islam - https://x.com/rirripon - Reported HTML/CSS injection.
Raghav sharma @Recon - Reported XSS vulnerabilities.
Raghuram G (GK Cyber Labs) - linkedin.com/in/raghuram--g
Rahul Maini - X Profile: https://x.com/iamnoooob.
Rahul Parmar - linkedin.com/in/rahul-parmar31 - Reported Missing rate limit / Reported Clickjacking / Reported Cross-site scripting (XSS).
Rahul Raj-@rahulr0cks Reported xss vulnerabilities
Rahul Singh: Sqil & Path Disclosure.
Rahulvenati: Reported XSS vulnerability.
Raj Sukali - twitter.com/NoTty_rAj: Reflected XSS.
Raja Ahtisham - https://www.facebook.com/profile.php?id=100009347250717 - Reported Hyperlink Injection vulnerabilities.
Rajesh Mondal - facebook.com/r4j3sh
Rajesh Patil - Reported Cross-site scripting (XSS).
Rajesh Sagar- https://www.linkedin.com/in/rajesh-sagar-95619524b - Reported Missing rate limit.
Rajnish Kumar Gupta - linkedin.com/in/geekyrajnish - Reported Clickjacking.
Rakesh Singh & Harish kumar & Sandeep Sodhi - https://twitter.com/zerodayguys: Reported HTTP header injection vulnerability
Raman Gupta - http://in.linkedin.com/pub/raman-gupta/27/66/2a0: Reported Internal Stack trace disclosure vulnerabilities.
Rameshunlocked - https://x.com/RameshKanna05 - Reported Default login.
Ramesh kanna M -Twitter account : https://twitter.com/RameshKanna05 - Reported Information Disclosure / Reported Default login vulnerabilities.
Ramkumar G - twitter: https://twitter.com/_ramkumar_g - Reported HTML/CSS injection.
Ramon Dunker - https://ramondunker.nl / https://www.linkedin.com/in/ramondunker - Reported Cross-site scripting (XSS), Clickjacking and Server-side request forgery (SSRF), Remote Code Execution (RCE) and Information Disclosure vulnerabilities / Reported Other vulnerabilities.
Randi Julianto - https://www.linkedin.com/in/randi-julianto-182b04120 - Reported Clickjacking
Ranjithkumar Mayavan - https://www.linkedin.com/in/ranjithkumar-mayavan-926738169/ https://twitter.com/ranjithbreaks - Reported Default login.
Rasel Mir - https://www.linkedin.com/in/araselmir/ - Reported "Unauthenticated Access to Management API".
Rashed Hasan – LinkedIn: https://www.linkedin.com/in/rashedhasan00 Twitter: https://twitter.com/rashed_hasan00 - Reported XSS vulnerabilities.
Raunak Gupta - https://www.linkedin.com/in/raunak-gupta-772408255/ - Reported Public OBS Buckets Expose Build Artifacts, Root Password Hash, and Internal Infrastructure
RAVI ASHOK PRAJAPATI - https://twitter.com/raviakp1004 https://www.linkedin.com/in/ravi-prajapati-346b15190 - Reported Cross-site scripting (XSS).
Ravi Pandey - https://www.linkedin.com/in/ravipandey035/ - Reported Security misconfiguration.
Ravi Pavan - linkedin.com/in/contact-pavan - Reported Information Disclosure.
Ravi Singh: Reported XSS vulnerability.
Ravinsta Antony - Reported Information Disclosure.
Ravikumar Paghdal - @_RaviRamesh: Reported Open Redirection.
redwan karmouch - sherwoodchaser.com - Reported Cross-site scripting (XSS).
Reinal Shetty - Reported outdated softeware.
Rémy Marot - https://twitter.com/r_marot - Reported RCE.
rez0 https://twitter.com/rez0__ - Reported Information Disclosure.
Riadh Benlamine - https://www.linkedin.com/in/riadh-benlamine-a35106189 / www.facebook.com/riadhbenlamineg - Reported Clickjacking vulnerabilities / Reported Cross-site request forgery (CSRF) / Reported HTML/CSS injection vulnerabilities.
Ridoy Khan - Reported Clickjacking.
Rihana Shaikh - Website: www.extremehacking.org - Reported several clickjacking vulnerabilities.
Rikson Naway - https://twitter.com/riksonnaway1 - Reported HTML/CSS injection.
Rishaan Anand - https://ctgsecuritysolutions.com/ - Reported Business Logic / Impersonation
Rishal Dwivedi - fb.com/rishaldwivedi, @rishaldwivedi & Manjot singh - @Manjotsinghg8: Reported xss vulnerabilities.
RITAJ SHARMA - linkedin.com/in/ritaj-sharma-578997199 - Reported Clickjacking.
Ritik Chaddha - twitter.com/RitikChaddha - Reported several User Enumeration; Information Disclosure
Ritwick Dadhich - linkedin.com/in/ritwickdadhich -ritwick-dadhich.github.io/profile - Reported Security misconfiguration.
Riya Nair - LinkedIn: https://www.linkedin.com/in/riya-nair-70a347202 - Reported Information Disclosure.
Rizz Shinigami - https://www.linkedin.com/in/nomanpatel01?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=ios_app - Reported Subdomain takeover.
Robert Kugler - robert.kugler10@gmail.com - Reported OpenRedirect vulnerability.
Robert Scherer - www.linkedin.com/in/robert-scherer-71901a26b - Reported Broken Access Control.
Robin Descamps - https://www.linkedin.com/in/robindescamps- Reported Broken Authentication, Server-side request forgery (SSRF).
Robin Lindner - Lindner IT - https://lindnerit.io - Reported Default login.
Rodolfo Godalle, Jr. - fb.com/junior.ns1de: Reported XSS vulnerability.
Rody Shahnazarian https://twitter.com/komradz86 - Reported Cross-site scripting (XSS).
Rohan Agarwal - linkedin.com/in/rohan-agarwal-27265a176 - Reported Security misconfiguration.
Rohan Kulkarni - https://www.linkedin.com/in/rohan-kulkarni-6a073979/ - Reported Denial of Service vulnerability.
Rohit pawar - https://www.linkedin.com/in/ethicalrohitt - Reported Chatbot Prompt Injection Vulnerability" and SSRF and "Stored Cross Site Scripting"x(2) and "Unauthorized Redirection of Email"
Ronak Nahar - Reported Information Disclosure.
Roy Jansen - https://www.facebook.com/RoyJansen01 - Reported Open Redirect vulnerability.
rskvp93 (Viettel Cyber Security) - http://vnprogramming.com - https://twitter.com/rskvp93 - Reported RCE Injection.
Rudra16 twitter.com/rudra16t - Reported Information Disclosure.
Rudra Karn - @rudra11346926 - Reported Information Disclosure.
Rupesh Tanaji Kokare - https://www.linkedin.com/in/rupesh-kokare-b63a78145/ - Reported Clickjacking vulnerabilities.

S

Şaban Göktürk - https://x.com/mxroot https://www.linkedin.com/in/sabangokturk - Reported Information Disclosure and Cross-site scripting (XSS), Reported HTML/CSS injection and Open Redirect.
Sabir Ali - https://x.com/0xSabir - Reported "Unauthenticated Exposure of User Emails and Phone Numbers"
S. Venkatesh (Shadow force), Sen Haxor, Rahul Singh(rmar.in), Manoj(Sneaker): SSL ciphers.
Sachin Rajput - fb.com/schngahlaut RMAR Technologies Pvt. Ltd. (www.rmar.in): Reflected XSS.
SADDAM HUSSAIN - https://twitter.com/wisdomfreak1 - Reported Information Disclosure.
Sadegh Ahmadzadegan: Blind SQL injection.
Saeed Kamranfar - https://www.linkedin.com/in/saeed-kamranfar-8026591a0 - Reported Server-side request forgery (SSRF).
SAFA Ayoub - Twitter: @SafaAyoub - Reported information disclosure, RCE and SQLI vulnerabilities.
Sahil Saif - @bewithsahilsaif: Clickjacking vulnerability.
Sahil Sehgal - @xXSehgalXx - breakingmesh.blogspot.com: Reported Information Disclosure Vulnerability.
SAIGANESH MARATI - https://www.linkedin.com/in/saiganesh-marati-739492214 - Reported several Clickjacking vulnerabilities / Reported Information Disclosure vulnerabilities / Reported HTTP header.
Saif Abdullah Khan Mahi - https://x.com/badhacker0x1 - Reported reflected Cross-site scripting (XSS) /Reported Other.
Sajal Verma - https://www.facebook.com/sajalpentest: Reported information disclosure vulnerability
Sajith Shetty: Reported Clickjacking und Path Disclosure vulnerabilities.
Salati Salis Luqman - https://www.facebook.com/share/1FdPy2wi8Q/, https://x.com/bash_voice - Reported Email Hyperlink Injection.
Samet Şahin - https://twitter.com/F4LCONE_/ https://www.linkedin.com/in/sametsahinn/- Reported XSS vulnerabilities.
Samprit Das - https://www.linkedin.com/in/samprit-das-9805831a2 - Reported Server-side request forgery (SSRF) / reported Cross-site scripting (XSS) vulnerabilities.
Sánchez Garcés - http://enelpc.com - @enelpc: Reported xss vulnerabilities.
Sandesh Gawai - https://www.linkedin.com/in/sandeshgg - Reported Unauthenticated pprof Endpoint Leading to Credential Exposure
Sandip Oli https://www.linkedin.com/in/sandip-olee/ https://www.facebook.com/sandip.olee - Reported Information Disclosure and Open Redirect vulnerabilities.
Sangam Goel- https://www.linkedin.com/in/sangamgoel - Reported Server version information disclosure / Confidential document leak.
SANJAY VENKATESAN - https://www.linkedin.com/in/sanjay-venkatesan-5a478220b - Reported Information Disclosure.
Sanwoola Oluwaseyi Fredrick - x.com/f_r_e_d_d_y_1 - Reported Open Redirect / reported several Clickjacking vulnerabilities.
Saphal Karki (kira) - twitter.com/k1ra__ - Reported Server-side request forgery (SSRF).
Saravana Kumar V - URL: http://linkedin.com/in/06saravana - Reported an Information Disclosure vulnerability.
Sardarescu Louis Aurel - https://www.facebook.com/sardarescu.louisaurel.7 - Reported Self-XSS vulnerabilities.
Sasi Levi @ Sasi 2103 - Reported XSS vulnerabilities.
Satheesh Raj - https://www.facebook.com/UaA3ks1: Reported XSS vulnerability.
Satish Bommisetty - http://www.securitylearn.net: Reported missing X-Frame-Options.
Sattar Jabbar - https://www.facebook.com/vipexploiter - Reported Local File Disclosure vulnerabilities.
Satyam Singh (0xm3hd)- https://twitter.com/m3hd22 - Reported Missing rate limit.
Satyasys Tech Private Limited - satyasys.com - Reported Broken Authentication.
Satyendra Prajapati - @satty032 - https://twitter.com/satty032: Reported IFrame Injection and XSS vulnerabilities.
Saurabh Siddharam Sanmane - https://twitter.com/@saurabhsanmane2 - Reported improper session handling vulnerabilities.
Saurabh Saxena - Reported XSS vulnerabilities.
Sayada Zannat Haque http://www.linkedin.com/in/sayada-zannat-haque-7a4b5a17b - Reported "Use of Default Cumulocity IoT credentials".
Sayeed Shaik - https://www.linkedin.com/in/sayeedshaik/ - https://twitter.com/sayeedm44 - Reported Other.
Sayim0x - https://x.com/sayim0x - Reported GET-Based Open Redirect.
Sebastian Feldmann - Reported HTML Injection.
Sebastian Neef - it-solutions-neef.de: Reported XSS vulnerabilities.
Sebastian Neef and Tim Schäfers - @internetwache (www.internetwache.org): Reported SQL Injection and XSS vulnerabilities.
SecuNinja - http://twitter.com/secuninja - Reported XSS vulnerabilities/ Reported XSS vulnerabilities and misconfiguration of webservers / Reported XSS (Reflected) vulnerabilities, Reported Information Disclosure, Reported Subdomain takeover.
Sergio Galán aka NaxoneZ - @NaxoneZ: Reported XST vulnerabilities.
@serWazito0 - Reported Cross-site scripting (XSS).
Severus Huy Ngo - www.linkedin.com/in/huy-ng%C3%B4-1a9b52282/ - Reported Information Disclosure.
Shady Gamal - https://twitter.com/5hady_- Reported RCE Injection.
Shahaf Levi - linkedin.com/in/shahaflevi - www.cysrc.com - Reported Cross-site scripting (XSS).
Shaikh Yaser Arafat - https://twitter.com/yaser_s - https://www.linkedin.com/in/shaikhyaserarafat/ - Reported default credentials, Access Policy Misconfiguration, Critical Information Disclosure, SubDomain Takeover, Broken Authentication.
Shailabh Singh - fb.com/shailabh2 RMAR Technologies Pvt. Ltd. (www.rmar.in): Reflected XSS.
Shailendra Singh sachan - https://www.linkedin.com/in/shailendra-singh-sachan-b8205b184 - Reported HTTP header.
Shailesh kumavat https://hackerone.com/0x240x23elu https://twitter.com/0x240x23elu - Reported Information Disclosure / Reported Server-side request forgery (SSRF) and Cross-site scripting (XSS) vulnerabilities.
Shail Patel - LinkedIn: Linkedin: https://www.linkedin.com/in/shail-patel-8b005565/, X: https://x.com/AppSecFreak - Reported Broken Access Control, Default Credentials, 2FA Bruteforce and Information Disclosure vulnerabilities, Unauthenticated Access to APIs/ reported "Disclosure of PII data".
Sharanya. M - twitter.com/@SharanyaM_99 - Reported Broken Access Control.
Shashank Dixit - Reported a misconfiguration.
Shaun Budding - https://twitter.com/pudsec - Reported Information Disclosure.
Shay ben tikva - WEB/LINKEDIN/TWITTER/FB - Reported Information Disclosure.
Shay Hagai - www.linkedin.com/in/shay-hagai - Reported Information Disclosure.
Sherin Panikar - Kerala Cyber Squad-India: Reported vulnerabilities.
Shesha Sai C - http://linkedin.com/in/shesha-sai-c-18585b125 - Reported Information Disclosure and Open Redirect.
Shivam Dhingra - https://linkedin.com/in/shivam-dhingra - Reported Other.
Shivam Kamboj Dattana - https://twitter.com/sechunt3r | https://www.linkedin.com/in/sechunt3r/ - Reported broken authentication mechanism.
Shivam Pravin Khambe - linkedin.com/in/shivam-khambe-9a982b180/ - https://twitter.com/ShivaRa42316756 - Reported Host header injection.
Shivam Shrivastav (Laalaji) - https://twitter.com/shubshrivastav?t=M-qxJ-jWbxIL2gs34FLNHA&s=09 https://www.linkedin.com/in/shivam-shrivastav-laalaji - Reported Information Disclosure, Other, Default login.
Shivang Maurya - https://www.linkedin.com/in/shivangmauryaa/ - Reported Cross-site scripting (XSS) / Reported Reflected HTML Injection.
Shivang Trivedi https://www.linkedin.com/in/shivang-trivedi-a149b2190/ - Reported Remote Code Execution (RCE).
Shobhit Gautam: Authentication issues.
shoponalom29 - https://x.com/shoponalom29 - Reported Information Disclosure.
Shpend Kurtishaj - @shpendk: Open redirect.
Shrikant Antre - @shrikant_hell: Reported Clickjacking Attack.
Shubham Garg - twitter.com/nullb0t - Reported Information Disclosure.
Shubham Singh Jijania, kush_kira, kushkira, Paypal.me/kushkira - Reported Possible DoS Attack.
Shuvo Kumar Saha (syper shuvo) - LinkedIn https://www.linkedin.com/in/syper-shuvo/ - Reported Information Disclosure.
Shwetabh Suman - @SHWETABHSUMAN11/ https://www.facebook.com/profile.php?id=100011024580051 - Reported CSP bypass vulnerability.
Sibusiso Sishi https://twitter.com/sibusisosishi - Reported Information Disclosure.
Siddharth Prasad - LinkedIn - https://www.linkedin.com/in/siddharth-prasad-3b0310151 - Reported Default login / Reported Server-side request forgery (SSRF) vulnerabilities / Reported Clickjacking vulnerabilities / Reported Unsecured communication vulnerabilities / Reported Information Disclosure and HTTP header vulnerabilities.
Siddesh Ningappa - http://linkedin.com/in/siddesh-n-609178186 - Reported Open Redirect.
Simon Bräuer - @redshark1802: Reported SQL Injection, RCEs, XSS, auth bypass, Clickjacking and Information Disclosure vulnerabilities.
Simon Michalke - Reported Security misconfiguration.
Simone Memoli twitter.com/Simon90_Italy: Reflected XSS.
Siranjeevi V - Reported Unauthenticated Access to APIs / Reported Open redirection.
Sireesha: Reported XSS vulnerability.
six2dez - six2dez.com / Six2dez (@Six2dez1) / Twitter - Reported Remote Code Execution (RCE), Server-side request forgery (SSRF), Cross-site scripting (XSS), Reported Information Disclosure.
Sönke Behrendt - Repoted vulnerability in Speedport firmware.
Soham Lad - linkedin.com/in/soham-lad-8a336020a - Reported Information Disclosure.
soman verma - twitter.com/somanverma13 - Reported Missing rate limit.
Souhaib Naceri - https://www.linkedin.com/in/souhaib-naceri - Reported Information Disclosure / Reported Default Credentials.
Souvik Mondal - https://www.linkedin.com/in/souvik-mondal-8b3a0a1b3/ - Reported Security misconfiguration.
spookhorror - Reported Broken Access Control.
Spyridon Chatzimichail - https://gr.linkedin.com/in/spyridon-chatzimichail-07467928 - Reported XSS Vulnerabilities.
Sreekanth Reddy - https://x.com/sree_appsec - Reported information disclosure.
Srikar V https://linkedin.com/in/exp1o1t9r exp1o1t9r.com - Reported Information Disclosure.
Sriram Naidu: Reported XSS vulnerability.
Ştefan Cicoş - Stefan Cicos (@StefanCicos) / Twitter - Meldung von Cross-site scripting (XSS) Schwachstellen.
Stefan Schurtz – www.darksecurity.de : Reported XSS vulnerabilities.
Steven - https://twitter.com/keritzy - Reported XSS vulnerabilities.
subhasish mukherjee https://www.linkedin.com/in/subhasish-mukherjee-40208b29/ - Reported Other.
Sudhir Gaikwad - http://facebook.com/suhas00001: Reported XSS vulnerabilities.
Sudo Apt PURPLE TEAMER MALDEV - https://x.com/Wild_Carrd - Reported "SQL Injection".
Suga - https://www.facebook.com/sugaa.mogar.1 - Reported Open Redirect.
Suhas Sunil Gaikwad - https://fb.me/suhas00001: Reported XSS vulnerabilities.
Sumit Bhadouriya - https://www.linkedin.com/in/sumit-b-1b74b8258 - Reported Missing Rate Limiting on Registration Form.
Sumit Grover - twitter.com/sumgr0 - Reported Subdomain takeover, Cross-site scripting (XSS).
Sumit Sahoo - www.facebook.com/54H00: Reported XSS und Path Disclosure vulnerabilities.
Sunil Modi: Reported Logout CSRF (Cross Site Request Forgery) vulnerabilities.
Suraj Bhosale - linkedin.com/in/suraj-bhosale-876b2937 - Reported Cross-site scripting (XSS).
Suraj Gupta - https://www.linkedin.com/in/suraj-gupta-661734273 - Reported Information Disclosure.
Suresh Mahto - https://www.linkedin.com/in/suresh0mahto - Reported CSRF vulnerability.
Suresh Nadar - https://twitter.com/snadar73 - Reported Cross-site scripting (XSS).
surg4bij4k - https://webpentester.com/ - Reported SQL injection.
Surprise Adepitan - Twitter: @catchmeifyuucan - Reported Unrestricted file upload.
Suyash Bavalekar - https://bugcrowd.com/Suyash_777 - Reported Clickjacking vulnerabilities.
Suyog Palav (S.P.) - facebook.com/suyog.palav & linkedin.com/in/suyog-palav - Reported security mechanism bypass.
Sven Großmann - twitter.com/svennergr / https://grossmann.dev - Reported Critical Information Disclosure.
Sven Morgenroth - @asdizzle_ http://asdizzle.com/ - Reported XSS vulnerabilities.
Swapneil Kumar Dash - https://in.linkedin.com/in/swapneil-dash-7256a5b0 - Cross Site Scripting.
Swapnil A. Thaware - @swapnilthaware: Reported CSRF and Clickjacking vulnerabilities.
Swathi - https://www.linkedin.com/in/pasupuleti-swathi - Reported Cross-site scripting (XSS).

T

Tahmid Islam - https://facebook.com/tahmidnil - Reported Server-side request forgery (SSRF) / Reported Authentication Bypass / Reported Broken Access Control vulnerabilities.
Taiwo Owolabi - detotowolabi.carrd.com x.com/d4rkpanth3r?s=21 ng.linkedin.com/in/otowolabi reported nginx version low finding
Talha Gunay - https://twitter.com/redStarP2 - Reported SQL injection, Cross-site scripting (XSS).
Tameem Khalid– https://www.linkedin.com/in/tameem-khalid-641a4b192/ - Vulnerability Disclosure
Tarikul Islam https://sa1tama0.com https://x.com/sa1tama0 https://www.linkedin.com/in/sa1tama0. Reported Reflected Cross-Site Scripting (XSS) due to Unhandled Exception in Login Form
Tarun Mahour - https://twitter.com/sratarun?s=09 / https://www.facebook.com/tarunhacks - Reported XSS vulnerabilities.
Tarunkant Gupta (SpyD3r) - https://twitter.com/TarunkantG - Reported Remote Code Execution (RCE).
T4 - http://twitter.com/llt4l - Reported multiple vulnerabilities.
Taufique Azad - taufique@indianhans.org (www.facebook.com/tauazad): Reflected XSS.
Tcaciuc Bogdan Vasile - https://twitter.com/xenonxesece - Reported XSS vulnerabilities.
Tejash Patel - @tejash1991: Open Redirect.
Teemu Kääriäinen - https://www.nixu.com - Reported Remote Code Execution vulnerabilities.
Th. Michael Eißele: Multiple XSS vulnerability.
Thierno Diop - Reported outdated and vulnerable software.
TightropeMonkey - https://tightropemonkey.dev/ - Reported Broken Authentication.
Tijo Davis - https://www.linkedin.com/in/tijo-davis-a906a7141 - Reported Clickjacking, Host Header Injection, HTTP connection, Session Management misconfiguration, XML-RPC vulnerabilities and CSRF vulnerabilities.
Tim Philipp Schäfers - IT Consulting Schäfers: Reported XSS vulnerabilities.
Tim Wranik - IT-EXPERT - tw@it-expert.de - Reported multiple VoIP Phone firmware vulnerabilities.
Timo Lins - www.timolins.at: Reported XSS vulnerabilities.
Tobias Augustin (STARK IT-Security GmbH) - www.stark-its.de - Reported Cross-site scripting (XSS).
Tobias Holl - https://tholl.xyz/ - Reported Cross-site request forgery (CSRF), Broken Authentication, Remote Code Execution (RCE).
Tobias Lins - @tobiaslin5: Reported XSS vulnerabilities.
Tolgahan Demirayak - https://tol.ga - Reflected Cross-Site Scripting (XSS) Vulnerability.
Tomas Labuda (Tomas.Labud@gmail.com): Reported SQL injection.
Tommy Elco Geraldi https://www.linkedin.com/in/tommyelcogeraldi/ - Reported Clickjacking, Cross-site scripting (XSS) and Information Disclosure / Reported Server-side request forgery (SSRF) vulnerabilities
Tony Tunde Obisesan - https://www.vistahand.com - Reported Broken Access Control/ reported "HTML Injection".
Tran Gia Phu - Reported Remote Code Execution (RCE).
tuo4n8 - VNG Security Response Center@VNG Corporation - https://vsrc.vng.com.vn/ - Reported Remote Code Execution (RCE).
tuo4n8 - Verichains Cyber Force - https://verichains.io - Reported Privilege escalation for server/application and Remote Code Execution (RCE).
Tushar Rajhans Kumbhare: Reported XSS vulnerability.
Tushar Sharma - https://www.linkedin.com/in/tushar-sharma-700657139/ - Reported Text Injection vulnerabilities.
Tushar Vyas - @iamtusharvyas - Reported several Information Disclosure / Reported User Enumeration / Reported HTTP header vulnerabilities / Reported path traversal vulnerabilities.
Tusuubira Emmanuel (kenjoe41) - twitter.com/kenjoe41 - Reported Information Disclosure / Reported User Enumeration.

U

Udhaya Prakash - https://www.facebook.com/udhayaprakash.isro, https://www.linkedin.com/in/udhayaisro - Reported RCE.
Umraz Ahmed - www.twitter.com/umrazahmed: Reported XSS vulnerabilities.
un_kn0wn - twitter.com/W3ld35u5W - Reported Information Disclosure / Reported Path traversal vulnerabilities.
Usama Shahzad - https://www.linkedin.com/in/usama-shahzad/
Regards - Reported Default login vulnerabilities.

V

Vaibhav Khatke- https://in.linkedin.com/in/javaibs- Reported HTML Injection.
Vaibhav Lakhani - twitter.com/vlakhani28 - linkedin.com/in/vaibhav-lakhani - Reported Clickjacking, cross-site scripting (XSS) and security misconfiguration / Reported Information Disclosure and Data manipulation / Reported Broken Access Control / Reported Information Disclosure / Reported User Enumeration / Reported User Enumeration.
Vaibhav Nitin Gaikwad - linkedin.com/in/vaibhav-gaikwad-55071b152 - Reported Information Disclosure.
Vaibhav Shinde - LinkedIn https://www.linkedin.com/in/vaibhav-shinde-28b811242 - Reported of expired certiticates.
Vaidik Pandya (h4x0r_fr34k) - linkedin.com/in/vaidikpandya - Reported Default login and Cross-site scripting (XSS) / Reported Server-side request forgery (SSRF) vulnerabilities.
Vaisha Bernard - https://www.linkedin.com/in/vaishabernard/ - Reported Authentication Bypass.
Valeriy Shevchenko https://twitter.com/Krevetk0Valeriy https://krevetk0.medium.com - Reported Remote Code Execution (RCE).
Varun Kakumani - Internshala.
Vasil A. - https://twitter.com/flexxpoint: Reflected XSS.
Vasim Shaikh - https://www.linkedin.com/in/vasim-shaikh-094507110 - https://twitter.com/Vasimsk49 - Reported multiple vulnerabilities.
Vasu Deva: Reported Full Path Disclosure vulnerabilities.
Vedachala - @vedachalaka: Reported clickjacking vulnerability.
Vedachala & Ajay Negi: Reported XSS vulnerability.
Vedant Shinde https://www.linkedin.com/in/vedantshinde15 - Reported Clickjacking.
VEDHA PRAKASH ACHARY TALLOJU - @iamvedhaprakash - Reported Clickjacking vulnerabilities / Reported HTTP Header Injection vulnerabilities.
Veli-Pekka Vainio: Reported XSS vulnerability.
Venkata Sateesh Netti - https://twitter.com/str4n63r - Reported Other.
Venkateswara Reddy Yaruva & Abhijeth D - Reported XSS vulnerabilities.
Venugopal Thotakura - @venugopalt: Reported XSS vulnerability.
Victor Curălea - https://twitter.com/VictorCuralea/ - Reported Remote Code Execution (RCE).
Vidhan thakur - LinkedIn profile: https://linkedin.com/in/vidhan-thakur -Reported Information disclosure and HTML Injection and Broken Authentication and Session Management > Failure to Invalidate Session.
Vikas Arora - fb.com/vicky.arora.756412 RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Vikash Chaudhary - URL: www.hackersera.in- Reported XSS vulnerabilities.
Vikas ShivChandra Yadav - Twitter: @iamvikasyadav: Reported clickjacking vulnerabilities.
Vikas Srivastava, India - linkedin.com/in/007vikaxh - twitter.com/007vikaxh - Reported Information Disclosure / Reported User Enumeration / Reported HTTP header and Broken Access Control and text Injection/context spoofing vulnerabilities.
Vinayak Chaturvedi - linkedin.com/in/vinayak-chaturvedi-348b071a1 - Reported Clickjacking.
Vindhyachala: CSS.
Vineet Kumar - https://bughunter.withgoogle.com/profile/80ae25f5-877d-4402-94e8-7902cacdb4b9 - Reported incorrect DNS entries.
Vinesh N. Redkar - @b0rn2pwn AVsecurity.in: Open Redirect, Click Jacking.
Vinit Lakra - linkedin.com/in/vinithacker - Reported several HTTP header, Broken Access Control, Broken Authentication vulnerabilities / Reported Clickjacking, Reported Open Redirect, Reported Broken Access Control / Reported HTTP header / Reported Missing rate limit/ Reported several Clickjacking, Reported Information Disclosure / Reported HTML/CSS injection vulnerabilities and Cross-site scripting (XSS) / Reportet Default login vulnerabilities.
Vinod Kumar Deekonda - Reported Information Disclosure.
Vinod Tiwari - @war_crack: Reported clickjacking vulnerability.
Vinod Tiwari & Sumit Shinde: Reported ClickJacking and CSRF vulnerabilities.
Vinod Tiwari & Himanshu Thakur: Reported XSS vulnerabilities.
v1nzen - https://twitter.com/2021_neo - Reported Path traversal, Reported Broken Access Control.
Virang (imwaiting18) - linkedin.com/in/rajyaguruvirang - Reported Information Disclosure.
Vishal Barot https://twitter.com/vflexo - Reported Cross-site scripting (XSS).
Vishnu Raghav - https://www.linkedin.com/in/vishnu-raghav-783162171 - Reported Open Redirect.
Vismit Sudhir Rakhecha - twitter.com/th3_druk - Reported Cross-site request forgery (CSRF).

W

Wai Yan Aung – @waiyanaun9: Reported IP-address disclosure
Wan Ikram (@rinakikun): Content Spoofing & URL Redirection.
Wang Jing - http://tetraph.com/wangjing/ - @justqdjing: Reported open redirect vulnerabilities.
Waqeeh Ul Hasan - Twitter: @dowaqeeh: xss vulnerabilities.
Wasi Qazi: Reported XSS vulnerability.
Web Security Geeks, Narendra Bhati (R00t Sh3ll) - @NarendraBhatiB: Reported directory listing vulnerability.
Wen Bin Kong - @kongwenbin / https://www.linkedin.com/in/kongwenbin - Reported XSS vulnerabilities.
Wesley Santos - https://www.linkedin.com/in/wesley-santos-34984815b/ - Reported Server-side request forgery (SSRF).
Whitesector from Serbia - URL: https://whitesector.wordpress.com, Twitter: https://twitter.com/DistrictWhit3 - Reported an open redirect vulnerability.
WSecure - We Secure IT - http://www.wsecure.de - Reported> XSS/MiTM/HSTS/CSP
wtm - http://offensi.com - Reported directory listing / information disclosure vulnerabilities.
WuXie - https://x.com/wuxie_sec - Reported Default login.

X

Xalgord - https://www.linkedin.com/in/xalgord/, https://github.com/xalgord - Reported Cross-site scripting (XSS).

Y

YAHYA JABER ALABDALI - https://www.linkedin.com/mwlite/in/yahya-alabdli - Reported Cross-site scripting (XSS).
Yakup Sait B. and Ekin Yazıcı - https://twitter.com/YakupSaitByk, https://twitter.com/yzcekin - Reported Missing rate limit.
Yanuar Yusuf, - https://www.linkedin.com/in/yanuar-yusuf/
Yaranis Fonseca - @GordonShomway01: Reported XSS vulnerabilities.
Yash kushwah - (@cyberyash951) Linkdin: https://www.linkedin.com/mwlite/in/yash-kushwah-a80449229 - Reported Information Disclosure and User Enumeration..
Yash Pandya - www.facebook.com/yash.hacking: Reported XSS vulnerabilities and Information Disclosure.
Yasir Altaf Zargar Website - www.cybercoderss.blogspot.com: Reported XSS vulnerabilities.
Yasser Eltaweel - https://x.com/Badyasseer - Reported Visible Detailed Error/Debug Page.
Yasser Ezzat - https://twitter.com/yassergersy - Reported Information Disclosure, HTTP header.
Yasser Janah https://www.linkedin.com/in/yasserjanah/- Reported Remote Code Execution (RCE).
Yebo Cao - https://www.linkedin.com/in/yebocao/ - Reported several Information Disclosure.
Yogeesh Seralathan - @y0g1337h: Reported XSS vulnerabilities.
Yogesh Modi - facebook.com/mistercracker: CSRF.
Yousef Mohamed - linkedin.com/in/yousef-mohamed-124484203 - Reported Default login and Cross-site scripting (XSS) vulnerabilities, Security misconfiguration.
Youssef ABYAA - https://twitter.com/josef0x - Reported Open Redirect vulnerabilities.
Youssef Ahmed (yghonem) - https://www.facebook.com/yghonem14 - Reported Missing rate limit vulnerabilities.
Youssef A. Mohamed - generaleg0x01.com - Reported Arbitrary File Upload.
Yousef Mohamed - linkedin.com/in/yousef-mohamed15 - Reported several Broken Authentication, Server Security Misconfiguration > Using Default Credentials, Authentication bypass
Y. Srikanth - entersoft.co.in: Reflected XSS.
Yuji Kosuga - @yujikosuga: Reported XSS vulnerability.
Yukesh Kumar [ 3th1c_yuk1 ] - Reported Information Disclosure /
Yunus AYDIN https://twitter.com/aydinnyunuss - Reported Information Disclosure / Reported SQL Injection / Reported Possible DoS Attack.
Yunus YILMAZ - https://twitter.com/ynsy34 - Reported XSS (Reflected) vulnerabilities / Reported Open Redirect / Reported Security misconfiguration.
Yusuf Abdulmalik Adeolu - Twitter: https://x.com/cybersage112?s=21 - Information Disclosure.

Z

Zachary S. Stashis @Nu11ifidian https://redseersecurity.com/ https://www.linkedin.com/in/zacharysstashis/ - Reported several Information Disclosure and several Open Redirect vulnerabilities / Reported HTTP header vulnerabilities / Reported Broken Access Control.
Zain Iqbal - https://www.linkedin.com/in/zain-iqbal-971b76254 - Reported Insecure Data Transport Link.
Zakaria Amous - https://www.linkedin.com/in/zamous - Reported XSS vulnerabilities.
Zax Asif - twitter.com/itsZ4X - Reported Information Disclosure.
Zaza Arjevanidze - https://github.com/Anhedoniczz - Reported Security misconfiguration.
Zehra Karabiber - https://twitter.com/ezehrakarabiber - Reported XSS Vulnerability.
Zeyad Azima https://www.linkedin.com/in/zeyad-abdelazim-1357911a7/ - Reported Cross-site request forgery (CSRF).
Zhenwarx - Twitter.com/ZhenwarX - Reported Information Disclosure; Open Redirect.
Zin Min Phyo - x.com/zin_min_phyo - Reported Remote Code Execution and Secret Disclosure / Reported Reflected DOM-based XSS / Reported Clickjacking/ Reported "Unauthenticated Access to Business Customer Support Data" / Reported "Error-Based SQL Injection"/ Reported "Open redirect on the logout flow of the application via a parameter", Reported "Unauthenticated PII Disclosure".
Zoltan Panczel - https://twitter.com/SilentSignalHU - Reported XXE and File Inclusion vulnerabilities.
ZSEC Red Team - https://hackerone.com/zalogroup - Reported Server-side request forgery (SSRF).
Zythop - twitter.com/HaboubiAnis - Reported Path traversal.

0-9

13ph03nix - twitter.com/13ph03nix - WEB/LINKEDIN/TWITTER/FB - Reported Cross-site scripting (XSS).
19whoami19 - https://x.com/19whoami19 - Reported Information Disclosure.

Bug bounty

Information about our bug bounty program for security vulnerabilities.

Go to the bug bounty program