Acknowledgments

We would like to thank the valuable contributors who support us with their insights in making our systems safer. Our thanks go to:

A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0-9

A

Aakash Kumar - facebook.com/Sscript.kiddie: Reported Clickjacking vulnerabilities.
Aakash Madaan ( Godsky ) https://www.linkedin.com/in/aakashmadaan13 - Reported Security misconfiguration.
Aamir Khan - www.hacking-articles.blogspot.com - www.fb.com/aamir9795734: Reported xss vulnerabilities.
Aarafa Zakaria - https://www.facebook.com/Zyo3506/, https://x.com/D_Zayko36, https://www.linkedin.com/in/zakaria-aarafa-b31372284/ - Reported Multiple Vulnerabilities.
Aaron Costello - ie.linkedin.com/in/aaron-costello-226858a7 - Reported Information Disclosure.
Aarshit Mittal: Reported XSS vulnerabilities.
Aashutosh Devkota - https://np.linkedin.com/in/aasutoshdevkota - Reported Information Disclosure.
Aasmant Laxmikant Patil - LinkediIn: https://www.linkedin.com/in/aasmant-laxmikant-patil-01a644203 - Reported Information Disclosure.
Aatman Saifi/0x4141 -Twitter: www.twitter.com/jobaa23 - Reported Default login, Possible DoS Attack, Remote Code Execution (RCE), Broken Authentication and Cross-site request forgery (CSRF) vulnerabilities.
Abolfazl Fahimi - https://x.com/Af4himi - Reported "Full admin panel access".
Abdallah Mahrous https://www.linkedin.com/in/abdallah-mahrous-09712aa4/ - Reported Missing rate limit.
Abdennour Chakifi - https://twitter.com/dazaii111 - Reported Cross-site scripting (XSS).
Abdeslam Elyaalaoui linkedin.com/in/abdeslam-elyaalaoui-801592145/ - Reported Cross-site scripting (XSS).
Abdiwahab Ahmed Omar - https://www.facebook.com/0x1h3r/ - Reported HTTP header, Reported Information Disclosure.
Abdlallah Mohammed- https://twitter.com/1bdool492 - Reported Server-side request forgery (SSRF).
Abdul Azeez Alaseeri - linkedin.com/in/0xx777 - Reported Cross-site scripting (XSS).
Abdul Haq Khokhar - https://twitter.com/ Abdulhaqkhokhar: Reported Policy Framework vulnerabilities and Missing SPF.
Abdul Mazid - https://x.com/0zidmaz?s=11
Abdul Rehman - @facebook.com/shadowcreator: Reported host header vulnerabilities.
Abdullah Rahmatullah - Twitter: twitter.com/abd_4fg - Reported Cross-site scripting (XSS).
Abdulrahman Badawi - https://twitter.com/zikolasec?t=nx1TAITxMlZ6ykoVZFhNNA&s=09 - Reported Information Disclosure.
Abdulelah BinAqeel - Reported XSS (Reflected) vulnerabilities.
Abdullah Fares Muhanna - https://www.facebook.com/AbedullahFares - Reported outdated and vulnerable software.
Abdullah Fares Muhanna - https://www.facebook.com/AbedullahFares - Reported a use of a vulnerable version of software.
Abdullah Hussam - @Abdulahhusam: Reported XSS vulnerability.
Abdulrahman Kamel https://www.linkedin.com/in/abdulrahman-kamel/- Reported Cross-site scripting (XSS) / Reported Cross-site scripting (XSS) vulnerabilities / Reported Information Disclosure and Unsecured communication.
Abdulsalam M olamilekan - X: https://x.com/olamdeen
Abdelrahman Ibrahim Farg - https://www.linkedin.com/in/abdelrahman-ibrahim-978423116 - Reported Other.
Abdessamad DHASSI - URL: https://www.root-me.org/abdou358, Twitter: https://twitter.com/darlate - Reported XSS vulnerabilities.
Abelrhman Adel - twitter.com/k3r1it0 - Gefundene SQL Injection.
Abhibandu Kafle - http://nepsecurity.org - @kabhi_kav: Reported Clickjacking vulnerability.
Abhijeth Dugginapeddi - http://abhijeth.com: Reported multiple vulnerabilities.
Abhinav Karnawat - (\/ w4rri0r \/) - http://www.w4rri0r.com: Reported XSS Vulnerability.
Abhinav Porwal https://www.linkedin.com/in/abhinavporwal6 - Reported Clickjacking.
Abhishek Bundela - Twitter: twitter.com/abhibundela: Reported self XSS vulnerabilities.
Abhishek Maurya - https://in.linkedin.com/in/abhiishsec - Reported Cross-site scripting (XSS).
Abolfazl Fahimi - https://x.com/af4himi - Reported Cross-site scripting (XSS).
Abubakar Ahmad Sheu - Instragam: https://www.instagram.com/theencryptedsage - Reported Information Disclosure.
Ace Candelario https://0xspa.de - Reported Cross-site scripting (XSS).
Achim Hoffmann - Atropaia GmbH - atropaia.de - Reported Cross-site scripting (XSS).
Achmad Marzuki Abdulloh - https://id.linkedin.com/in/achmadabdullah - Reported Authentication Bypass.
Adam AL MUSAWE - https://x.com/madocdaloc - Reported RCE.
Adam Willard - https://www.linkedin.com/pub/adam-willard/20/575/30b/@aw7684512: Reported HTML manipulation vulnerability.
Adam Ziaja - http://adamziaja.com: Reported SSL weakness.
ADARSH VS https://twitter.com/adarshvs_ - Reported Data manipulation.
Adegbola Kehinde Peter - Facebook: https://www.facebook.com/Kennygold.404 - Reported Disclosure of Secrets, Content Injection.
Adel Mahmoud - https://www.facebook.com/mohappaaa - Reported XSS (Reflected) vulnerabilities.
Adil Faizi - fb.com/adil.faizi.94 RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Aditya Dixit - http://fb.com/aditya008 - http://hackthedevil.blogspot.com: Reported DOM based XSS vulnerabilities.
Aditya Jadhav - www.securecyberfuture.com - Reported XSS vulnerabilities.
Aditya Singh - https://www.linkedin.com/in/aditya-singh-b78111169/ - Reported Account Takeover Vulnerability.
Aditya Singh - linkedin.com/in/aditya-singh4180/ - Reported Vulnerability: Email HTML Injection via name Parameter on Register Page and Sensitive JWT Token Exposure.
Adrian Siefer - Reported "Exposed Brand Dialog API documentation".
Agustín Doménech - https://twitter.com/robotshelld - Reported Information Disclosure.
Ahmad Alassaf - https://www.facebook.com/theviperxx/ - Reported Information Disclosure.
Ahmad Ashraff - @yappare: Reported path disclosure.
Ahmad Halabi (Cyber Ironclad) - hackerone.com/ahmd_halabi - Reported Information Disclosure.
Ahmad Karim Dahrouj - https://www.linkedin.com/in/ahmad-karim-dahrouj-51bb49259 - Reported Possible DoS Attack.
Ahmad Qaramany (@qaramany0x01) - twitter.com/qaramany0x01 - Reported Information Disclosure.
Ahmed Aaish - https://parallel.solutions - Reported JavaServer Faces vulnerabilities.
Ahmed Alsanosi - facebook.com/01alsanosi - twitter.com/ahmed_alsanosi - Reported Unsecured communication.
Ahmed Adel Abdelfattah - https://www.facebook.com/00SystemError00/ - Reported XSS vulnerabilities.
Ahmed Ehab - https://twitter.com/HeBo117 - Reported Server-side request forgery (SSRF).
Ahmed El-Desoky - LinkedIn: www.linkedin.com/in/ahmed-eldesoky-982051227 - Reported Cross-site scripting (XSS) / reported HTTP header vulnerabilities.
Ahmed Elsadat - https://bugcrowd.com/GENERAL-SADAT / https://www.facebook.com/mido.gamal.9674 - Reported XSS vulnerabilities.
Ahmed Fahim - Reported Information Disclosure.
Ahmed Ismail linkedin.com/in/ahmed-ismail-38901168 twitter.com/MrOz1l facebook.com/AhmedOzil10 - Subdomain Takeover / Reported Broken Access Control vulnerabilities.
Ahmed Jumani - LinkedIn: https://www.linkedin.com/in/ahmedjumani/ Reported Exposed Google Maps API Key vulnerabilities.
Ahmed Lotfy (doctor X) - https://x.com/Ahmed846737825 - Reported Detailed Server Configuration Page
Ahmed Max - https://www.facebook.com/profile.php?id=100004971255687; Twitter: @404NotF39672584- Reported content/text injection.
Ahmed Nazmy - Reported Remote Code Execution (RCE).
Ahmed Qaramany - https://twitter.com/qaramany0x01, https://www.facebook.com/qaramany0x01 - Reported Information Disclosure.
Ahmed Salah Abdalhfaz https://twitter.com/Elsfa7110 - Reported Information Disclosure.
Ahmed Sayd - https://www.instagram.com/8l242 - Reported Command Injection Vulnerability.
Ahmed Shawky @lnxg33k: Meldung von SQL Injection.
Ahmed Sherif- https://twitter.com/sherif_ninja - Reported Server-side request forgery (SSRF).
Ahmed sultan (0x4148) linked in :https://eg.linkedin.com/in/0x4148 - Reported SQL Injection.
Ahmed Usama (vulnera) - https://twitter.com/0xvulnera / facebook.com/0xvulnera - Reported Cross-site request forgery (CSRF).
Ahmed Waheed - @ia7m4d0z: Reported XSS vulnerabilities.
Ahmed Y. Elmogy - Twitter: mogyhacker - Reported anti-CSRF/XSS vulnerabilities.
Ahmet Demirci - https://www.facebook.com/ahmet.demirc.17 and https://m-i-a.cf - Reported XSS (Reflected) vulnerabilities.
Ahmet Gurel - twitter.com/ahmettgurell - Reported Cross-site scripting (XSS) / reported SQL injection vulnerabilitie.
Ahmet SUNA - linkedin.com/in/ahmet-suna-ab3ba9116 - Reported Information Disclosure, Host header injection, Cross-site scripting (XSS), Open Redirect and Database backup critical Information Disclosure
Ahmet Ümit BAYRAM - www.ahmetumitbayram.com - @ahmetumitbayram - Reported XSS (Reflected) vulnerabilities.
Ai Ho - https://twitter.com/j3ssiejjj - Reported Information Disclosure.
Aishwarya KC https://twitter.com/aiswar_ya - Reported Subdomain takeover.
Ajay Anand - www.ctgsecuritysolutions.com: Reported XSS vulnerability.
Ajay Singh Negi - @AjaySinghNegi & Prashant Negi - @_prashantnegi & Mahipal Singh Rajpurohit - www.websecresearch.com: Reported Brutforce vulnerabilities.
Akalanka Ekanayake - https://twitter.com/ceo_akalanka - Reported Mixed Content Vulnerability.
Akash Kumar - https://www.linkedin.com/in/akash-kumar-2b9a9a213/ - Reported "Misconfigured cloud storage exposure".
Akash Sarkar - https://twitter.com/0xhunster - Reported Information Disclosure.
Akash Saxena - https://m.facebook.com/akash.saxena.9421 - Loophole in registration functionality.
Akash Shukla - facebook.com/hybridakash at www.rmar.in: Cookie Disclosure.
Akhil Reni - @akhil_reni: Refelcted XSS.
Akincibor - https://hackerone.com/akincibor?type=user - Reported Server-side request forgery (SSRF).
Alan Roy - https://www.linkedin.com/in/alan-roy-0225a125 https://www.facebook.com/alanroy.thomas.7- Reported Clickjacking.
Akshay Ravi(copycat) - https://www.linkedin.com/in/C09YC47 - Reported several Information Disclosure
Alexandar Thangavel - https://twitter.com/ValluvarSploit - Reported Other.
Alexander Anisimov und Yakov Shmelev (Eun014 Team) - https://twitter.com/rack2009 - Reported security misconfiguration.
Alexander Karl – Alexander 'twink0r' Karl – Subdomain Takeover.
Alex Birsan - https://twitter.com/alxbrsn - Reported Remote Code Execution (RCE).
Alexey Sabadash - www.linkedin.com/in/asabadash - Reported multiple vulnerabilites.
Alfido Osdie - https://www.linkedin.com/in/alfido-osdie-857343224/ - Reported / Reported SSRF vulnerabilities.
Ali Abdalalh - Twitter: https://www.linkedin.com/in/ali-0x11 - Reported Cross-site scripting (XSS).
ali azhar - https://www.linkedin.com/in/ali-azhar-b1a17b20b/ - Reported Clickjacking.
Ali Hasan Ghauri - alihassanpenetrationtester.blogspot.com - @alihasanghauri: Reported GIT Information Disclosure and XSS Vulnerabilities.
Ali Medd/0x097 - https://www.linkedin.com/in/0x097/ - Meldet Open Redirect Sicherheitslücke
Alisha Sheikh - in.linkedin.com/in/alisha-sheikh-96059615a - Reported Security misconfiguration.
Al-Khateeb BI N-khalid - fb.com/kkhateebali RMAR Technologies Pvt. Ltd. (www.rmar.in) - Reflected XSS.
Alvin Ferdiansyah - linkedin.com/in/alvinferd - Reported "DOM XSS".
Alvyn McQuitty - twitter.com/alvynmcq - Reported Server-side request forgery (SSRF).
Alwaleed Alfayez - Reported SSRF vulnerability.
Aly Khaled (0x41ly) - linkedin.com/in/aly-khal3d - hackerone.com/0x41ly?type=user - bugcrowd.com/0x41ly - twitter.com/Aly_Khal3d - Reported Possible DoS Attack, Reported Open Redirect, Cross-site scripting (XSS), Open Redirect, Broken Access Control / Reported HTTP header.
Aman Kumar - https://twitter.com/amykr777 - Reported User Enumeration / Reported Information Disclosure / Reported Cross-site scripting (XSS), Open Redirect, Information Disclosure and Path traversal.
Aman Rawat - https://www.linkedin.com/in/theamanrawat/ - Reported Information Disclosure.
Amar Shankar & Piyush Malik: Reported XSS vulnerabilities.
Amaranath Moger - https://www.linkedin.com/in/amaranath-moger/ - Reported Broken Access Control.
Amaranath M - https://www.linkedin.com/in/amaranath-moger/ - Reported Broken Access Control.
Ameer Assadi - @AmeerAssadi, fb.me/Amirh4ck, http://linkedin.com/in/ameerassadi - Reported XSS vulnerabilities.
Ameya Andhare - https://www.linkedin.com/in/ameya-andhare-ab839b1a5/ / https://twitter.com/AmeyaAndhare - Reported Clickjacking and Information Disclosure .
Amin Achour - www.th-online.ch - Reported XSS vulnerabilities.
Aminullah Habibi. - "https://x.com/wdk__23" - Vulnerability: Sensitive Information Exposure.
Amir Habeeb - https://www.linkedin.com/in/amir-habeeb-5a0aba259/ - Reported "Sensitive Information Disclosure".
Amit Sohana - https://www.facebook.com/amit.sohara: Reflected XSS.
Amol Bhola - Reported Clickjacking vulnerability.
Amr Al Hallak - Reported Cross-site scripting (XSS).
Amr Khaled (0x37U) - https://www.facebook.com/Amr.v7 /
https://twitter.com/0x37U - Reported Missing rate limit.
Amr Salama - LinkedIn: https://www.linkedin.com/in/amrsalama23 / Reported Broken Authentication and Session Management Vulneranbility.
Anand M - https://twitter.com/anandm47: XSS Vulnerability
Anandu Mohan - https://in.linkedin.com/in/anandu-mohan-69b30b13a /Unauthenticated local file read.
Anant Mudgal - https://www.varutra.com // Twitter: https://twitter.com/anantmudgal - Reported sensitive information disclosure.
Anar ilqarli - https://www.linkedin.com/in/anar-ilqarli-987aa022a - Reported Information Disclosure.
Anas Bousselham - Twitter : https://twitter.com/BousselhamAnas / LinkedIn : https://www.linkedin.com/in/anas-bousselham/ - Reported Cross-site scripting (XSS).
Anas Laabab - www.linkedin.com/in/anas-laabab/ - Reported an Out-of-Band XXE vulnerability.
Anas_loul - https://x.com/loul__0, https://www.facebook.com/profile.php?id=100071430164120&mibextid=LQQJ4d - Reported Open Redirect.
Anas Mahmood - @CyberTiger https://www.twitter.com/AnasIsHere - Reported Cross Site Scripting vulnerabilities.
Andrea Santese - Reported clickjacking vulnerability.
Andreas Kurtz - @aykay - http://www.andreas-kurtz.de: Reported vulnerabilities in a Mobile Application.
Andr. Ess - Reported Broken Authentication.
André Zingsheim: Reported XSS vulnerabilities.
Andrei Smolkin: Reported SQL Injection, xss and information disclosure vulnerabilities.
Andrey Leonov @4lemon https://twitter.com/4lemon - Reported Remote Code Execution (RCE).
Ángel Carballo - https://www.linkedin.com/in/%C3%A1ngel-carballo-82a6a318a/ - Reported Open Redirect.
Angkan Chanda ( nightcr4wl3r ) - nightcr4wl3r.blogspot.com – Report of a configuration vulnerability.
Aniket Deshmane https://twitter.com/AniketDeshmane9?s=08 - Reported Default login.
Aniket Pratap Singh - www.facebook.com/kotarockers/: Reported File Information Disclosure vulnerabilities.
Anis Haboubi - https://twitter.com/HaboubiAnis - Reported Information Disclosure.
Ankit Bharathan - fb.me/dibbu.bhadav: Reported XSS vulnerability.
Ankit Singh - https://www.facebook.com/AnkitCuriosity , LinkedIn: https://www.linkedin.com/in/AnkitSingh1579- Reported Open Redirect & XSS vulnerabilities.
Ankit Sood - facebook.com/ankit.sood.501 - Reported Cross-site scripting (XSS).
Ankit Yadav - Hack Safe Indore: Reported user credential vulnerabilities.
Anil Kumar Behara: Reported XSS vulnerability.
Anirudh Kulkarni: Reflected XSS.
An Phuoc Trinh - @_tint0 - Reported unauthenticated RCE Injection.
An Phuoc Trinh - @_tint0 - Reported five RCE vulnerabilities.
Ansar Uddin, X Handel - https://x.com/Ansar0047 - Reported Broken Access Control and Weak Password Policy.
Ansh Jain - website : https://sudoark.tk - Reported Cross-site scripting (XSS) / Reported Server-side request forgery (SSRF) vulnerabilities.
Ansh kr jha - https://www.linkedin.com/in/ansh-kumar-jha-b5188a249 - Reported HTML/CSS injection and Broken Access Control.
Anurag Srivastava - http://fb.com/anurag424242 - www.rmar.in<http://www.rmar.in>: Reflected XSS.
Anusha Deekonda - twitter.com/KeerthiCrackers - Reported Cross-site scripting (XSS).
aqib shah - twitter.com/aqibshah - Reported Stored Cross-site scripting (XSS) and reflected Cross-site scripting (XSS).
Aria Akhavan - https://facebook.com/aria.stefano: Reported xss vulnerabilities.
Ariel Rachamim & Omri Inbar - https://www.linkedin.com/in/ariel-rachamim/ - Reported Subdomain takeover.
Arifin - LinkedIn: https://www.linkedin.com/in/ipsss/ , Blog: https://pureheartdad.substack.com/ - Reported "Unauthenticated Access to API Endpoints".
Arjun Singh http://linkedin.com/in/arjun-singh-33924018b - Reported Open Redirect.
Arpit Borawake https://linkedin.com/in/rpt - Reported Cross-site scripting (XSS) and Path traversal vulnerabilities / Reported Subdomain takeover vulnerabilities
Arpit Kubadia - https://twitter.com/aksquaretech - Reported several Information Disclosure / Reported Cross-site scripting (XSS) / Reported Default login / Reported Server-side request forgery (SSRF) vulnerabilities / Reported Default login.
Arit Dutta - LinkedIn: https://www.linkedin.com/in/iamarit.
Ariq Ahmad - https://www.facebook.com/near.ardor: Reflected XSS.
Arndt Adler: Reported XSS vulnerabilities.
Aron Binoy - https://www.linkedin.com/in/aron-binoy-6438792a9 - Reported Unauthenticated Access to AWS Access Keys and Secret Keys via GraphQL Asset Enumeration / reported "Unvalidated Redirects and Forwards" vulnerability.
Arsiadi Sriyanto - @donrookie: Reported XSS vulnerability.
Artur Shutov - Reported Application Logic Bypass.
Arun K Mishra - https://twitter.com/arun_2512 - Reported clickjacking vulnerability.
Aryan Rohit - https://www.linkedin.com/in/aryan-rohit/ - Reported Information Disclosure.
Aryawardhan Singh - https://x.com/0x2458 - Reported Open Redirect.
Ashesh Kumar - http://facebook.com/ashesh1708 - Reported XSS vulnerabilities.
Ashish Kunwar - @D0rkerDevil - Reported security misconfiguration vulnerability / Reported Server-side request forgery (SSRF).
Ashutosh Nath Rimal (KhukuriRimal) - https://in.linkedin.com/in/ashutosh-nath-rimal-534690137 - Reported Information Disclosure.
Ashutosh Singh - facebook.com/ashu.singboy - RMAR Technologies Pvt. Ltd. - www.rmar.in: Reflected XSS.
Ashutosh Singh Chauhan - linkedin.com/in/ashutosh-iot - Reported Security misconfiguration.
Asif_ack4 - Instagram: https://www.instagram.com/tam_ilcode420 - Reported Missing rate limit.
Asif Hossain - https://x.com/0x0asif - Reported Cross-site request forgery (CSRF).
Asif Showkat wani and Muneeb Shah: Reported xss vulnerabilities.
Asim Delalic https://www.linkedin.com/in/asimd/- Reported several Information Disclosure.
Ataberk Yavuzer- https://0xsaiyajin.github.io/ - Reported XML-RPC vulnerability / WEB/LINKEDIN/TWITTER/FB - Reported Information Disclosure.
Aung Myat Thu - twitter.com/xai_yak - Reported XSS vulnerabilities.
Avi Chakravarti https://www.linkedin.com/in/avi-chakravarti-276881193/ - Reported Clickjacking.
Aviv Yahav - https://www.linkedin.com/in/aviv-yahav-3b87a414b - Reported several vulnerabilities.
Avram Marius Gabriel - www.randosmtorm: Reported XSS vulnerabilities.
Aydin Bektasoglu - Reported "Unauthorized Public Access to Open Telekom Cloud OBS Bucket Exposing Internal Assets" / Reported "Public Access to Open Telekom Cloud OBS Dataset Bucket Exposing Client-Associated Training Data".
Ayoub Nait Lamine - https://www.facebook.com/profile.php?id=100004407498249e: Reported host header injection and Open Redirect vulnerabilities.
Ayoub SAFA - https://www.linkedin.com/in/ayoub-safa-2a443938/ - Reported default credentials
Ayush Mangal - https://www.linkedin.com/in/ayush-mangal-48a168110/ - Reported Security misconfiguration / Reported Open Redirect, Reported Missing rate limit.
Ayush Shrestha - www.linkedin.com/in/ayushxtha - Reported Cross-site scripting (XSS).
Ayush Singh (https://in.scanfactory.io) https://twitter.com/glatisantbeast - Reported Default login.
Aytaç Kalıncı - https://www.linkedin.com/in/aytackalincii/ - Reported Cookie Information Disclosure.
Ayudya Fitri - https://www.linkedin.com/in/ayudya-f-5b61b6113 - Reported Information Disclosure.
Ayyoub Lahlali - https://www.linkedin.com/in/ayyoublahlali - Reported "Open Redirect though URL".

B

Babar Khan Akhunzada @babar1337khan - Reported Apache Tomcat/6.0.24.
Baburao Kittur - https://twitter.com/bk_cipher / https://in.linkedin.com/in/baburao-kittur - Reported Privilege escalation for server/application.
Bagas Prananda - linkedin.com/in/bagasprananda97 - Reported Clickjacking / reported Server-side request forgery (SSRF) vulnerabilities.
Balasubramanian Yadhavar - https://www.linkedin.com/in/balasubramanian-yadhavar-098189107?utm_source=share_via&utm_content=profile&utm_medium=member_android -Reported unauthenticated GraphQL code injection
Balogun Ismail Ayokunle - https://x.com/irebamiji11 - Reported Email Hyperlink Injection / Path Listing
Bao Bui (@0xd0ff9) - twitter.com/Jok3rDb - Reported Privilege escalation for server/application.
Bao Chau - https://www.linkedin.com/in/nhubaochau/ - Reported Open Redirect.
Batee5a - hackerone.com/batee5a - Reported Local File Inclusion.
Battal Faik Aktaş - twitter.com/BattalFaikAktas - Reported Open Redirect and several Server-side request forgery (SSRF) vulnerabilities / Reported Remote Code Execution (RCE) vulnerabilities / Reported Information Disclosure, Cross-site scripting (XSS), Default login vulnerabilities.
B. Caller - WEB/LINKEDIN/TWITTER/FB - Reported Remote Code Execution (RCE).
Ben Chinoy - https://www.linkedin.com/in/benchinoy - Reported Broken Access Control.
Benjamin Kunz Mejri (Evolution Security GmbH - Vulnerability Laboratory) www.vulnerability-lab.com - twitter.com/vuln_lab - Reported XSS (Stored) vulnerability, SQLi, Exec
Bhanu Teja - twitter.com/bh4nut3j4 - Reported Subdomain takeover / Reported Unauthenticated Local File Read / Reported Cross-site scripting (XSS) / Reported User Enumerations / Reported Information Disclosure.
BHARAT CHOUDHARY - https://twitter.com/iambharat18 - Reported Information Disclosure and Open Redirect.
Bhavesh Naik: Reported XSS vulnerability.
Bhuwan Bhetwal - https://twitter.com/yamarajislitaf - Reported Information Disclosure.
Bibek Shah - @noobibek - Reported several Information Disclosure.
Bijesh Debbarma: Sqil & Path Disclosure.
Bilal Teke - https://luckywiki.org - Reported XSS vulnerabilities.
Bill Ben Haim - https://www.linkedin.com/in/bill-ben-haim-b6775a48/ - Reported default credentials.
Bipul Jaiswal - https://twitter.com/r3curs1v3_pr0xy. - Reported Information Disclosure.
BITCOMSEC - http://bitcomsec.org - http://twitter.com/bitcomsec - Reported Remote Command Execution vulnerability.
Björn Peeters: Reported CSRF/XSS vulnerabilities.
Björn Peeters: Reported xss vulnerabilities.
Blessing Akaso (Azabat) https://linkedin.com/in/blessingakaso
Bodgan Calin: Reported time based SQL injection.
Brijesh Prajapati - https://twitter.com/Sherloc88271414?s=09 - Reported other vulnerabilities.
Bruno Nunes Bittencourt (Eldruin) - www.linkedin.com/in/bruno-nunes-bittencourt/ - Reported Open Redirect.
Bryan Galao - Facebook: https://www.facebook.com/xbryan.galao - Reported Clickjacking, content spoofing & Information Disclosure vulnerabilities.
bsysop - twitter.com/bsysop - Reported Security misconfiguration. / Reported Information Disclosure.
BUDURU NAVEEN - www.linkedin.com/in/buduru-naveen-4916172b4 - Reported "Cross-Site Scripting (XSS)" / Reported Account Update Possible After Logout Using Replayed Request / Reported "Sensitive Information Disclosure" and "HTML Injection" and "Sensitive Data Exposure" / Reported "Insecure Direct Object References (IDOR)"/ Reported "Publicly Accessible .htaccess File", Info Disclosure. / Reported Unauthenticated Access, Broken Link Hijacking.
Bughunter Emmedy - Twitter: https://x.com/olamdeen - Reported Account Takeover vulnerabilities, Reported Unauthorized File Upload.
Bugsgalore - https://x.com/BugsgaloreSec - Reported "Session fixation.
Burak Ünal @_d4rkbrain - twitter.com/_d4rkbrain - Reported Information Disclosure.
Bytes_Knight, https://bugcrowd.com/h/Bytes_Knight, Open redirection, CORS Misconfiguration / Sensitive Data Hardcoded- Production Admin API Key Exposed.

C

Cale Anderson - Reported Broken Authentication.
Can Karacan - https://www.linkedin.com/in/can-karacan-69ba09b8/ - Reported Information Disclosure, Open Mail Relay and Cross-site scripting (XSS) vulnerabilities.
Cara Sharma - https://www.facebook.com/SharmaCara - https://twitter.com/Sharma_Cara - Reported Insecure Cross Domain and CSRF vulnerabilities.
Carl-Theodor Geilhufe – www.carl.geilhufe.de - Reported information disclosure.
Carlos Cardoso - https://websecauditors.com | facebook.com/cmscardoso - Reported misconfigured DNS records.
Cernica Ionut Cosmin: Reported Directory Listing vulnerabilties.
Charlie Briggs - @Charlie_N_B: Reported XSS vulnerabilities & SQL injection.
Chetan - linkedin.com/in/chetan-00 - Reported Information Disclosure.
Chetan Gulhane - http://varutra.com: Reported xss vulnerabilities.
Chiheb Chebbi - twitter.com/chihebchebbi201 - Reported Remote Code Execution (RCE) / Reported Security misconfiguration.
Chilik Tamir - @_coreDump: Reported IOS App vulnerability.
chippa vijay kumar- https://twitter.com/vijay922 - Reported Information Disclosure.
Chinmay Barbade - https://www.linkedin.com/in/chinmay-barbade-a36400162/ - Reported Broken Access Control.
Chinmohan Nayak - @nayakchinmohan – http://securityonair.blogspot.in/: Reported information disclosure.
Chinmoy Guho - https://www.facebook.com/chinmoy.guho.2025 - Reported CSRF Vulnerability / reported path traversal vulnerability.
Chinmoy Mukherjee chinmoy.info - Reported Information Disclosure.
Chinmoy Pratim Borah - http://facebook.com/cpb2013: Reported XSS vulnerabilities.
Chirag Artani - https://twitter.com/chirag99artani https://3rag.com/chirag-artani - Reported Open Redirect / Reported HTML/CSS injection /Reported Information Disclosure/ reported Cross-site scripting (XSS) vulnerabilities.
Chirag Goyal - https://www.facebook.com/goyal.chirag23 - Reported XSS vulnerabilities.
Chris Green - @chris_t_green - Reported XSS vulnerabilities.
Chris McGowen – http://badcoding.net - @chrismcgowen: Reported DOM-based XSS vulnerability
Christ Bowel Bouchuen - https://christbowel.com - User Enumeration via REST API.
Christian Galeone - https://thefacebook.com/christian.galeone.1: Reported xss vulnerabilities.
Christian Lopez Martin - insertco.in: Reported url redirection vulnerabilities.
Cristopher Busch - Meldung von Information Disclosure Schwachstellen.
Christopher Simmelink -https://www.linkedin.com/in/christophersimmelink/ - Reported "Access-control vulnerabilities".
Clifford Trigo - twitter: @mrtrizaeron: Reflected XSS.
Coastline Cybersecurity - https://coastlinecyber.com, https://x.com/CoastlineCyber - Reported Server-side request forgery (SSRF).
Codermak https://twitter.com/arshadkazmi42 - Reported Information Disclosure.
Cody R Ward - www.risker.com.au / www.facebook.com/le.pandanator - Reported XSS vulnerabilities.
collinsmarra - https://twitter.com/CollinsMarra - Reported Information Disclosure.
Coltuneac Alexandru: Reported XSS vulnerabilities.
Cotic Madalin - Reported XSS vulnerabilities.
Craig Young - Web: https://secur3.us/ Twitter: https://twitter.com/craigtweets - Reported RCE.
Cristi Vlad - https://twitter.com/CristiVlad25 - Reported Cross-site scripting (XSS).
Cyber Chutiya Attacker (Randi ka pilla): Reported CCS Injection vulnerabilities and privilege escalation for server/application.

D

Dan Fabro - https://dnx.zone - Reported Stored XSS, Reflected XSS, Self-XSS, Open Redirect, External SSRF and Clickjacking vulnerabilities..
Danijel Maksimovic - @maxon3: Reported URL redirection vulnerability.
Daksh Patel - @Dakshxss: Reported Login Issues.
Dale James - https://www.linkedin.com/in/dale-james-b7294b36 - Reported Sensitive Data Exposure.
Dan Kelley - dak@thesecure.be - Reported Information Disclosure.
Daniel Bakker - https://twitter.com/jackds1986 - Reported Information Disclosure.
Daniel Blindu - https://twitter.com/eblindudaniel - Reported Server-side request forgery (SSRF).
Daniel Ferreira - https://ferreiraklet.github.io - Reported "Subdomain Takeover"
Daniel H - Reported Security misconfiguration.
Danil Wacker - https://www.linkedin.com/in/danil-wacker-624aa2272 - Reported Missing server checks.
Daoud Youssef - https://www.facebook.com/daoud.youssef.7 - Possible DDoS attack.
Darija Ivanovic - Web Develeper (Brcko Distrikt): Reported SQL Injection.
Darius Petrescu - twitter.com/@akkiliON_: Reflected XSS.
David Eckhardt: Reported "Full Path Disclosure“ and XSS vulnerabilities.
David Hoyt Hoyt LLC - http://xss.cx: Reflected XSS.
David Lassig - https://twitter.com/d_lassig / https://www.linkedin.com/in/davidlassig - Reported Information Disclosure.
Debarghya Sahoo - linkedin.com/in/debarghyasahoo - Reported Cross-site scripting (XSS).
Deekonda Vinod - twitter.com/vinod_deekonda - Reported Information Disclosure.
Deepak Kumar ( CipherEra) - vedixera.com - Reported Information Disclosure / Reported User Enumeration.
Deepanker Chawla - www.deepanker.in - @deepankerchawla: Reported XSS vulnerabilties.
Denis Bazur - argv500@gmail.com: Reported XSS vulnerabilities.
Deniz Işık / bursali - Administrator - www.bursali.eu: Reported CSS and LFI vulnerabilities in Deutsche Telekom Message Boards.
Denis Werner – www.nobbd.de, @nobbd - Reported SQL injection vulnerabilities.
Dennis Mwanzia - https://www.linkedin.com/in/dennis-mwanzia-b5b243283/ - Reported Information Disclosure / Reported Broken Access Control.
Devesh bhatt #deveshbhatt11: Reported Enumeration in login page.
Devjeet Singh: Sqli & Path Disclosure.
Dharmik Fichadiya - https://twitter.com/shelby67051949/ - Reported Broken Access Control.
Dhaffa Nurfahriansyah - https://linkedin.com/in/dhaffanurfahriansyah - Reported Information Disclosure.
Dhinu Ramachandran www.linkedin.com/in/dhinu-ramachandran-76683b206 - Reported HTTP header.
Dhrumil Patel - https://dhrumilpatel1209.netlify.app/ - https://www.linkedin.com/in/dhrumilpatel99/ : Reported Sensitive Information Disclosure / Improper Access Control.
Dhruvi Pandya - Reported Information Disclosure.
Diego Bernal Adelantado - https://www.linkedin.com/in/diego-bernal-adelantado/ - Reported Subdomain takeover.
Dimpal Jadhav - https://www.linkedin.com/in/dimpal-jadhav-79a4231a3 - Reported "Hardcoded Credentials in Application".
Dmitry Ivanof - Reported XSS (Reflected) vulnerabilities.
Dipu Singh - https://www.linkedin.com/in/dipu-singh-40832b2a9/ - Reported "Server Security Misconfiguration".
Divakar - https://www.facebook.com/kd.divakar: Reported XSS vulnerabilities.
Djaballah Mohamed Taher - https://www.facebook.com/djaballah.mohamedtaher - Reported XSS vulnerabilities.
Djaber Djoukhrab - http://www.facebook.com/djroot.dz - Reported XSS vulnerabilities.
D. Jaya Shankar - https://twitter.com/MrJayashankar - Reported Information Disclosure.
doctor X - https://x.com/Ahmed846737825 - Reported Detailed Server Configuration Page.
Dominik Schlöpke - https://de.linkedin.com/in/dominik-schl%C3%B6pke-7ab1791a2 - Reported "Subdomain Takeover".
Dr. Sebastian Schrittwieser - www.fhstp.ac.at & Peter Kieseberg - www.sba-research.org: Static code analysis of mobile applications
Duc Nguyen Huu - @peterjson - https://twitter.com/peterjson - Reported Remote Code Execution (RCE).

E

Ebrahim Hegazy - twitter.com/Zigoo0: Reported XSS and SQL Injection vulnerabilities.
Edis Konstantini - twitter.com/ediskonstantini: Reported XSS vulnerabilities (flash based).
Eeshwar Dronavalli https://www.linkedin.com/in/eeshwar-dronavalli-5a16ba16a - Reported Missing Rate Limit.
Ehraz Ahmed - www.twitter.com/securityexe: Reported XSS vulnerabilities.
El Sayed Mohamed - www.linkedin.com/in/shai7a0x - Reported Cross-site scripting (XSS).
Elvin Nuruyev - https://www.linkedin.com/in/elvin-nuruyev - Reported Missing Rate Limiting on Login Page
Emad Shanab - Twitter: https://twitter.com/Alra3ees - Reported RCE, XSS and information disclosure vulnerabilities.
Emad Youssef - twitter.com/Sy3Omda - Reported XSS, SSRF, Cross Site Tracing, Server Misconfiguration, Privilege escalation for server/application, multiple Open Redirect vulnerabilities and multiple reports of Cross-site scripting (XSS) / reported Information Disclosure vulnerabilities.
Enzo Freitas - https://www.linkedin.com/in/enzo-freitas-095607182/ - Reported Server-side request forgery (SSRF)/ Reported add Cross-site scripting (XSS) vulnerabilities.
Erchiqui Azzeddine - @zertox1: Information Disclosure.
Ereshwari Valmik - https://www.linkedin.com/in/ereshwari-valmik-28b376137 - Reported Information Disclosure / Reported Information Disclosure.
Eric Flokstra - www.linkedin.com/pub/dir/Eric/Flokstra: Reported xss vulnerabilities.
Erick Fernando Xavier de Oliveira - https://x.com/erickfernandox - Reported Path traversal.
Erik van Oosbree - www.erikvanoosbree.nl: Reported XSS vulnerabilities.
eslamXxX https://www.linkedin.com/in/eslam-sayed-842770160 - Reported Open Redirect.
Eslam Abu Bakr - https://x.com/eabubakr21 - Reported several Information Disclosure vulnerabilities / Reported Cross-site scripting (XSS) / Reported Information Disclosure vulnerabilities / Reported Unauthenticated Remote Code Execution
Eslam Kamal - https://www.linkedin.com/in/eslam-kamal/https://www.facebook.com/StrikerHacker33 - Reported / Reported Possible DoS Attack.
Eugen Füchsle - http://fyx.li: Reported XSS vulnerabilities.
Eusebiu Blindu - Reported XSS vulnerabilities, Nagios Weak Credentials
Evan Ricafort - @robinhood0x00 (www.twitter.com/robinhood0x00): Reported XSS vulnerabilities.

F

Fabian Henneke - https://hen.ne.ke / @fhenneke- Reported DOM XSS vulnerabilities.
Fabian Mucke- https://twitter.com/HerrFabs - Reported Subdomain takeover, Information Disclosure.
Fabian Patrik - fpatrik / https://websafe.hu/ - Reported XSS vulnerabilities.
Fabian Troisdorf - Reported Privilege Escalation and Information Disclosure.
Fady Othman - twitter.com/fady_othman - Reported Cross-site scripting (XSS).
Faisal Ait Hamou - https://facebook.com/Faissal.AitHamou: Reflected XSS.
Faisal Shadab Yazdani - fb.com/fsyazdani RMAR Technologies Pvt. Ltd. (www.rmar.in): Reflected XSS.
Faissal Assakkach - https://www.linkedin.com/in/faissalassakkach/ - Reported Sensitive Data Exposure.
Faiz Ahmed - https://www.linkedin.com/in/faizzaidi/ - Reported outdated security mechanisms.
Faraz Ali - twitter.com/FarazAli94 - Reported Cross-site scripting (XSS).
Fares Djghmoune - https://twitter.com/ImoJOnDz - Reported Remote Code Execution (RCE).
Farhin Malek - https://www.linkedin.com/in/farhin-malek28 - Reported Clickjacking.
Fatih GUREL - linkedin.com/in/fatihgurel/ - Reported CORS, Information Disclosure.
Fatma Elzahraa Mohamed Salam - https://www.linkedin.com/in/fatmaelzahraa-salam-2a38813b3/ - Reported "Unauthenticated Access and Enumeration to Pre-Production Object Storage Bucket"
Fayas S - https://www.linkedin.com/in/fayas--s/ - Reported Exposed pprof endpoint leaking VictoriaMetrics Admin Keys.
Felipe Gabriel Renzi - https://www.linkedin.com/in/felipe-gabriel-renzi - Reported Information Disclosure and Cross-site scripting (XSS) vulnerabilities..
Filippos Mastrogiannis - @filipposmastro - Reported XSS vulnerability.
Florian Kunushevci - https://www.facebook.com/florianx00 - Reported multiple XSS vulnerabilities.
Florian Thie - https://florian-thie.de - Reported a CSRF vulnerability.
Florin Carja - @Quistertow – http://rstforums.com: Reported information disclosure.
Florindarck - http://twitter.com/QuisterTow: Reported path disclosure vulnerabilities.
Foysal Ahmed Fahim - hackerone.com/foysal1197 twitter.com/foysal1197 - Reported Information Disclosure, Subdomain takeover, Broken Access Control and HTTP header vulnerabilities / Reported Cross-site scripting (XSS) / reported HTML/CSS injection vulnerabilities / Reported Server-side request forgery (SSRF), Reported Path traversal.
Francisco Correa - panchocosil.blogspot.com - @panchocosil: Reported sql vulnerabilities.
Francisco Palma - https://twitter.com/1c3t0rm - Reported Default login.
Frank B. Vickers - https://www.linkedin.com/in/frank-vickers-199109a - Reported webservice misconfiguration
Frans Rosén - Detectify (https://detectify.com): Reported XSS vulnerabiltiy.
Frederik Werner - instagram: werner.frederik - Reported Broken Authentication.
Fredrik Nordberg Almroth: Tilde vulnerability.

G

G Bharath kalyan - Whttps://www.linkedin.com/in/bharath-kalyan-476a651ba - Reported Cross-site scripting (XSS) / Reported Information Disclosure vulnerabilities / Reported Security misconfiguration / Reported Missing rate limit.
Gaurang maheta https://www.linkedin.com/in/gaurang-mehta-35515a162- Reported Information Disclosure, Broken Access Control.
GAURAV R NAIK - https://www.linkedin.com/in/gaurav-r-naik - Reported Cross-site scripting (XSS).
glatisant - https://twitter.com/glatisantbeast - Reported Open Redirect.
George Adel Sami Salib https://www.linkedin.com/in/george-adel-5ab77a1b9 - Reported Information Disclosure.
Gia Bui Dai - @yabeow from VNG Corporation - Reported Information Disclosure.
Gineesh George - gineesh-george: Reported XSS vulnerabilities.
Gokuleshwaran Bharathkumar - https://www.linkedin.com/in/gokuleswaranb-ethacker/ - Reported "Sensitive Data Exposure".
Gozie - Twitter: twitter.com/g0ziem - Reported Cross-site scripting (XSS).
Greg Long with hack0xchet - Reported Cross-site scripting (XSS).
Greg van Brussel - https://www.accidhax.com - Reported Open Redirect on Grafana.
Guifre Ruiz – https://guif.re – Reported Information Disclosure
Guillermo Gregorio https://twitter.com/bsysop - Reported Server-side request forgery (SSRF).
Gurjant Singh Sadhra - http://hackerdesk.com @GurjantSadhra: Multiple vulnerabilities and SQL Injection, reported XSS vulnerabilities.
Guru Prasad Pattanaik (TH3N00BH4CK3R) - https://www.linkedin.com/in/guru-prasad-pattanaik - Reported HTML/CSS injection.

H

Halil Ahmad https://twitter.com/Halilahmadd - Reported XSS (Reflected) vulnerabilities.
Halil Arı - https://www.linkedin.com/in/halilari/ - Reported Information Disclosure.
Hammad Shamsi - https://sh3ifu.com: Reported XSS vulnerabilities.
Hanno Böck - https://hboeck.de/ - https://twitter.com/hanno - Reported Information Disclosure, Reported RCE; Report Outdated Software vulnerabilitie.
Hans-Martin Münch, Mogwai Security - SQL Injection and RCE Vulnerabililty.
H@ck3r h!t3sh - www.sriyaan.com: Reported XSS vulnerabilities.
Happiness Oribhunuebho (Herthiqal) - https://www.linkedin.com/in/herthiqal - Reported Hyperlink Injection.
Hardik Gupta - https://www.linkedin.com/in/hardik-gupta-136644225/ - Reported Open Redirect.
Hardik Tailor - @iamhardiktailor: Reported XSS vulnerabilities.
Harendra yadav - linkedin.com/in/harendra-kumar-b4b510214 - Reported Missing rate limit.
Harikrishnan Dhandapani - https://www.linkedin.com/in/harikrishnan-d - Reported Broken Access Control.
Hari Krishnan - Facebook.com/c.hari1997: Reported clickjacking vulnerabilities.
Harinder Singh (S1N6H) - https://www.linkedin.com/in/lambardar - Reported Information Disclosure and Clickjacking.
Haris Ahmed - https://www.linkedin.com/in/haris-ahmed-ethical-hacker/ / Haris Ahmed (@HarisAhmed95) / Twitter- Reported Clickjacking.
Haris Mamoun - Reported Remote Code Execution.
Hasibul Hasan Rifat - twitter.com/rifatsec - Reported Information Disclosure.
Hasibul Hasan Shawon - saiyan0x01.com - Reported Sensitive Data Exposure vulnerabilities.
Harry Schreiner - http://schreinerit.de/?sites=penetrationtest: Reported XSS vulnerabilities.
Harsh Bhanushali - http://linkedin.com/in/harshbhanushali - Reported User Enumeration.
Harsh maheta - https://www.linkedin.com/in/harsh-maheta-7057542a9?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=android_app - Reported Information Disclosure.
Harsh Parekh https://www.linkedin.com/in/harshparekh11- Reported Remote Code Execution (RCE); Reported Information Disclosure.
Harsha Vardhan Boppana - @hvboppana: Reported cross site scripting.
Harshil Parikh https://www.linkedin.com/in/harshil-parikh-945bb8201 - Reported Clickjacking.
Harshit Shukla - http://facebook.com/lords001: Reported HTML Injection Vulnerability.
Hasan Aliyev - https://www.linkedin.com/in/hasan-aliyev-560723338 - Reported Cross-site scripting (XSS).
Hasan Al Mahmud - https://www.linkedin.com/in/m4hmud404/ - Reported "Unauthenticated firmware distribution leading to supply chain compromise".
Hasan Basri Elisert - https://www.linkedin.com/in/hasanelisert - Reported Unsecured communication.
Hassan Badran - badranh.github.io - Reported Cross-site request forgery (CSRF).
Hassan Tijani - LinkedIn: https://www.linkedin.com/in/h-t-345124-k-v/ Reported "unauthenticated Gitea instance exposing internal OTC infrastructure data"; Reported Unauthenticated Dashboard & Gadget Config Disclosure, Unauthenticated Tomcat Auth Bypass.
hatim chabik https://twitter.com/H_chabik - Reported Cross-site scripting (XSS).
Hazem Mohamed - twitter.com/hazem0x - Reported XSS (Reflected) vulnerabilities.
heiye007 - WEB/LINKEDIN/TWITTER/FB - Reported Information Disclosure.
Herman Francisco - https://www.linkedin.com/in/herman-francisco-30560a1b3/ - Reported Other.
Hemant Kashyap - https://www.linkedin.com/in/hemant-kashyap-714564199 - Reported Server-side request forgery (SSRF).
Hilal Khan - https://www.linkedin.com/in/hilal-khan-8a56ba321/ Reported Disclosure of credentials and Publicly Accessible OBS Bucket.
Himanshu - Reported Security misconfiguration.
Himanshu Sondhi - Reported Cross-site scripting (XSS) and Broken Access Control.
Hip - insight-labs.org: Reported Content Spoofing and CSRF vulnerabilities.
Hoang Quoc Thinh - @g4mm4 of CyberJutsu.IO - Reported RCE / Reported add Server-side request forgery (SSRF) vulnerabilities.
Honc (章哲瑜）- honcbb@gmail.com - Reported Open Redirect.
Horatau Marius - http://www.hackyard.net: Reported cross site scripting.
H SARDAR - https://www.instagram.com/_.sardar07?igsh=MThvbGRjcHNkY3dobg== - "Reported Stored Cross Site Scripting" | "Hardcoded API Key Allows Unauthenticated Access"
Hsu Myat Noe - https://www.linkedin.com/in/hsumyatno3: Reported Path disclosure.
Huy Kha - www.linkedin.com/in/huykha - Reported deprecated ciphers.
Huzaifa Khattak - www.linkedin.com/in/huzaifa-k-6321b2361 - Reported "Unauthenticated Information Disclosure".
Huzaifa Shaikh - https://www.linkedin.com/in/huzaifa-shaikh8901?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=android_app - Reported Subdomain takeover.
Hzllaga (宋昕岳) - hzllaga@gmail.com - Reported Other.

I

lalka - https://twitter.com/0x01alka - Reported XSS vulnerability.
ibrahim_0x - https://x.com/ibrah1m_0x - Reported User Enumeration.
Ibrahim M.El-Sayed - the_storm: Reported SQL Injection vulnerabilities.
Ibrahim Raafat - @RaafatSEC - www.starware.net: Reported XSS vulnerabilities and Critical Information Disclosure.
Ibrahim Saud M - linkedin.com/in/ibrahim-saud-38a338139 - twitter.com/ibrahimsaudm?s=08 - Reported Default login.
Idowu Sodiq (Cybersecurity specialist) - https://www.facebook.com/roheeez - Reported Information Disclosure Vulnerability.
Iem Prog - www.facebook.com/IEMPROG: Reported XSS vulnerabilities.
Ifrah Iman - www.ifrahiman.com / twitter.com/IfrahIman_ - Reported XSS vulnerabilities.
Ilamparithi Imayavaramban - https://ilam.page - https://www.linkedin.com/in/ilamparithi-i - Reported Business Logic Vulnerability.
Ilca Lucian: Reported XSS vulnerabilities.
İlyas ORAK - tr.linkedin.com/in/ilyasorak - INNOVERABT - (2x) Reported XSS (Reflected) vulnerabilities.
Ilyes Medjedoub - https://linkedin.in/in/ilyes-medjedoub - Reported XSS.
Imen Essoussi: Reported SQL injection vulnerabilities.
Imran Hosssain, X Handel - https://x.com/s41n1k - Reported Broken Access Control.
Indresh Verma - https://twitter.com/Jester0x01 - Reported Information Disclosure.
Infoziant Security - https://in.linkedin.com/company/infoziant-security - Reported HTTP header.
Intrigue team - www.intrigue.io - Reported Information Disclosure.
Ishan Anand - @Zer0-Access: Reported XSS vulnerabilities.
ISHAN VYAS https://twitter.com/_snak3_/ - Reported Broken Access Control.
iskhaled nassar twitter.com/knassar702 - Reported User Enumeration, Cross-Site Scripting (XSS), Information Disclosure.
Ismael Hasan - https://www.facebook.com/ismaieil - Reported XSS vulnerabilities.
İsmail BÜLBÜL - Uluslararası Siber Güvenlik Federasyonu - Reported an XSS vulnerability.
Ismail Hossain - Twitter: https://twitter.com/cmsajib, Web: https://eesec.org - Reported an text injection vulnerability.
İsmail Taşdelen - https://linkedin.com/in/ismailtasdelen - Reported missing security mechanisms, clickjacking, information disclosure and other vulnerabilities, Reported Cross-site scripting (XSS), Reported HTTP header vulnerabilities, Reported Security misconfiguration / Reported Server-side request forgery (SSRF) vulnerabilities /
Issam Rabhi - https://sites.google.com/site/issrabhi/: Reported XSS vulnerability.

J

JAAT Gaurav (@webcipher101) - https://www.linkedin.com/in/gaurav-dalal-0434821b5/ - Reported Information Disclosure.
Jacob Soo Lead Re, @Gunther_AR: Reported xss vulnerabilities.
Jagadeesh - https://www.linkedin.com/in/jagadeesh-jd-79308b93/ - Reported clickjacking vulnerabilities.
Jai Kumar B linkedin.com/in/jai-kumar-835a54183 - Reported Information Disclosure.
Jake Reynolds | www.depthsecurity.com | https://twitter.com/depthsecurity - Reported XXE vulnerabilities.
Jakub Zoczek - http://zoczus.blogspot.com: Stored XSS.
Jamal Eddine El Hadjeui - @jamalc0m: Reported vulnerabilities.
Jamal Eddine El Hadjeui – www.paytabs.co: Reported Open URL Redirection vulnerability
Jamshid Baghban https://bugforlife.com/ - Reported HTTP header.
Janhavi Rajendra Sonatkar - www.linkedin.com/in/janhavi-sonatkar-42a76418b - Reported HTML/CSS injection.
Jan Markus Schütz- Reported Broken Authentication.
Jannick Oursin - facebook.com/jannick.oursin - Reported Information Disclosure.
Jan-Peter Rauschning - https://Rauschning.me - Critical Personal Data Information Disclosure.
Javid Hussain - @javidhussain21: Reported XSS vulnerabilities.
Jayshree Bhattacharya - linkedin.com/in/jayshree-bhattacharya-4a399a135 - Reported Broken Authentication.
Jeet Pal - https://www.linkedin.com/in/jeet-pal-22601a290 - Reported SQL injection / Reported Stored Cross Site Scripting (XSS).
Jens Müller - hacking-printers.net – CORS misconfiguration.
Jeroen Hensen - Online Handle: 0xLumpy Website: 0xlumpy.cc
Jesus Maria Bermudez Serrano - twitter:@JesusBermudez32 - Reported Path traversal.
J. Francisco Bolivar - x.com/JFran_cbit - Reported Information Disclosure.
Jigar Thakkar (Akhani) - www.infobittechnologies.com - @jigarthakkar39: Reported Clickjacking and Information Disclosure vulnerabilities.
Jignesh Mistry: Reflected XSS.
Jim Rush - https://jimrush.me - Reported Remote Code Execution.
Jitendra Jaiswal - @Facebook/desihack @twitter/jeetjaiswal22: Reported xss vulnerabilities.
Joel Chang - https://x.com/joelchanggg - Reported Default login.
Joel Marco Özpinar - https://jmo740.com: reported Reflected cross site scripting vulnerability.
Johannes Bluhm - Reported Information Disclosure.
John Kronenberg - https://www.linkedin.com/in/johnkronenberg/- Reported Information Disclosure.
Jon Bitquark – https://bitquark.co.uk: Reported open redirect vulnerability.
Jon Bitquark - open redirect: XSS and SQLi vulnerabilities.
Jordan Glover - LinkedIn https://www.linkedin.com/in/jordan-g-ab835550 - Reported Security misconfiguration.
Jose Carlos Exposito Bueno - https://www.linkedin.com/in/josecarlosexposito - Reported Cross Site Scripting vulnerabilities.
José Rabal Sastre: Reflected XSS.
Joseph Thacker - rez0.blog - twitter.com/rez0__ - Reported Information Disclosure.
jub0bs - https://twitter.com/jub0bs - Reported Subdomain Takeover.
JubaBaghdad - https://x.com/JubaBaghdad - Reported Information Disclosure
@JubaBaghdad - https://x.com/JubaBaghdad. - Reported Information Disclosure.
Julien Ahrens - @MrTuxracer (www.rcesecurity.com): Reported cross-site scripting.
Junaid Farhan - www.facebook.com/junaid.farhan.54 - Reported a clickjacking vulnerability.

K

k3mlol - https://x.com/k3mlol - Reported Default login.
K Mohammed Danish faraz - linkedin.com/in/danish-faraz-70555bb9 - twitter.com/DanishKakingare?s=09 - Reported Default login.
Kahu Labs - https://kahulabs.com / https://www.linkedin.com/company/kahulabs - Reported Authentication Bypass and PII Leakage/Exposure.
KamalNath - https://www.linkedin.com/in/kamal-nath-6b08b12a7 - Reported Stored Open Redirect.
Kamil Jarosiński - https://twitter.com/ja_sec - Reported Cross-site scripting (XSS).
Kamil Sevi - @kamilsevi: Reported XSS vulnerability.
Kamil Sienicki - https://blog.sienicki.eu- Reported Cross-site scripting (XSS).
Kamrul Hassan, https://www.linkedin.com/in/kamrul-hassan-x64, Sensitive Data Exposure
Kapil S. Kulkarni - Facebook: kapil.kulkarni.587 , Twitter: @kapilkulkarni91 , LinkedIn: https://www.linkedin.com/in/kapil-kulkarni-oscp-ceh-chfi-5a333763/ - Reported content spoofing vulnerability.
Karan Rathod https://www.linkedin.com/in/karan-rathod-35aa951b1: Reported Remote Code Execution, Reported Subdomain Takeover, Reported Information Disclosure.
Karim Mohamed Ahmed - https://www.facebook.com/X.TiGeR.K: Reported XSS vulnerabilities.
Kashif Shoukat https://www.linkedin.com/in/kashif-shoukat-1o1/ - Reported Other.
kasme_memon_aya_tha - Reported Remote Code Execution (RCE).
Kasper Karlsson - Reported Cross-site scripting (XSS).
Kaushik Sardar - https://www.facebook.com/kaushiksardar.22 - Reported Host Header Vulnerabilities.
Kazam Chaudhary aka p3n73st3r - www.twitter.com/p3n73st3r - Reported XSS vulnerabilities.
Kenneth Billones - https://twitter.com/k3nziy - Reported open redirect vulnerabilities.
Kevin Yehezkiel Gurning - https://www.linkedin.com/in/vinzel/ - Reported Open Redirect, Cross-site scripting (XSS).
Keyur Mehta - linkedin.com/in/keyur-mehta4455 - Reported Clickjacking, Reported Default login.
Khaled Abdelaziz Youssef - Reported Broken Access Control and Broken Authentication vulnerabilities, Reported Broken Access Control, Reported Information Disclosure.
khaled nassar - https://twitter.com/knassar702 - Reported Server-side request forgery (SSRF).
Khaled Essam Nassar - https://www.facebook.com/profile.php?id=100015121337012 - Reported XML-RPC vulnerability.
Khaled Mohamed [xElkomy] - xelkomy.github.io - twitter.com/0xelkomy - Reported several Cross-site scripting (XSS).
KHAN mamun - https://twitter.com/mamunwhh - Reported Information Disclosure.
Khan Janny - https://www.facebook.com/bossjannykhan- Reported Multiple Vulnerabilities.
Khôi Dương - Viettel Cyber Security - Reported IDOR vulnerability.
killua_21 - https://www.facebook.com/profile.php?id=100020497173263 - Reported Missing rate limit.
Kiran Chettri - twitter.com/kiranchettri_?s=09 - Reported User Enumeration, several Security misconfiguration and Possible DoS Attack; Reported HTML/CSS injection; Broken Access Control.
Kishan Kumar - https://twitter.com/hst_kishan?s=09 - Reported Clickjacking vulnerability.
Klaus @klaus_dev - Reported Information Disclosure.
KoF2002 & Sr33h4r!: Reported URL Redirection vulnerabilities.
Kolozsi András https://twitter.com/bugh101 - Reported XSS vulnerabilities, SQLi, Information Disclosure, CSFR
Koulick Ghosh- https://www.linkedin.com/in/koulick-ghosh-732458205/ - Reported Cross-site request forgery (CSRF).
Koutrouss Naddara: Reported XSS vulnerability.
kr1shna4garwal - https://www.linkedin.com/in/kr1shna4garwal - Reported User Enumeration / Reported Information Disclosure.
Krishna Chaitanya N - linkedin.com/in/n-krishna-chaitanya-27926aba - Reported Information Disclosure.
Kuldeep Soni (c1ph3r) - https://www.linkedin.com/in/kuldeep-s-49108798/ - Reported Broken Access Control and Open Redirect vulnerabilities.
Kunal Bahl - Twitter: https://twitter.com/KunalBahl3, Facebook: https://www.facebook.com/kunal.bahl59 - Reported an Information Disclosure vulnerability.

L

Laburity - https://www.linkedin.com/company/laburity - Reported Information Disclosure.
⛧ L∆₣₮M₳₦ ⛧ - https://x.com/08xDof20784
Lalith Rallahabandi - @Lalithr95: Reported XSS vulnerability.
Lars Heckner - mail@larsheckner.de: Log4j
Lars Morgenroth - @krankoPwnz: Reported Open Redirect and SQL Injection vulnerabilities.
Laurent De Vos: Reported XST vulnerabilities.#
Leo Starcevic - Reported Subdomain takeover vulnerabilities, reported Information Disclosure, Cross-site scripting (XSS), Unsecure communication.
Leo Switness – reportet SQL vulnerabilities.
Leonid Hartmann - https://twitter.com/_harleo - Reported Authentication Bypass and RCE vulnerabilities.
Leonid Krolle - twitter.com/KrolleLeonid - Reported information disclosure.
Lifeawa lifeawa@163.com- Reported Cross-site scripting (XSS).
LifeJiggy - GitHub: https://github.com/LifeJiggy, X: https://x.com/ArkhLifeJiggy - Reported "Sensitive Data Exposure".
LINDAN TRI SAPUTRA - https://www.linkedin.com/in/lindantri - Reported Race Condition in Resend Email Feature causing OTP Spam
Lingaiah Gadam - @LingaihY - Reported Security misconfiguration / Reported Information Disclosure.
Lion Nagenrauft, Msg Systems AG - https://www.linkedin.com/pub/lion-nagenrauft/ - Reported Information Disclosure vulnerability.
Lokesh Bhade - https://www.linkedin.com/in/Lokeshbhade/ - Reported Clickjacking.
Lorepoint - linkedin.com/company/lorepoint - Reported Information Disclosure.
Lorenzo Toti (sp1nn4k3r) - https://www.linkedin.com/in/lorenzo-toti-b0a939163 - Reported Server-side request forgery (SSRF) / reported Information Disclosures vulnerabilities.
love yadav - linkedin.com/in/love-yadav-5159611a3 - Reported Possible DoS Attack and Missing rate limit vulnerability / reported User Enumeration vulnerabilities / reported Information Disclosures vulnerabilities / reported Other vulnerabilities.
Lucas Carvalho - www.linkedin.com/in/lucascarvalho-/ - Reported Open Redirect.
Lukman Abdulrauf - https://x.com/bughun33er - Account takeover using default login credentials.

M

m0ssser - https://github.com/m0ssser: Reported Information Disclosure
Maciej Wojtasik - https://www.linkedin.com/in/maciej-wojtasik-b7386b208/, https://billtech.pl/ - Reported Broken Access Control.
Magashwarahan A - www.linkedin.com/in/magashwarahan-a-036775293/ - Reported Other.
Magrabur Alam Sofily, @masofily, www.linkedin.com/in/magrabur-sofily - Reported Remote Code Execution (RCE).
Mahesh - LinkedIn: https://www.linkedin.com/in/f50c1e7y/ - Reported several Information Disclosure/ Reported Default login vulnerabilities.
Mahesh Raykar - www.linkedin.com/in/maheshraykar1997 - Reported XSS vulnerability.
MAHIN VM - linkedin.com/in/mahin-vm-57413315a - Reported Clickjacking.
Mahmoud El-Said El-Naggar (Starware) - www.starware.net: Reported Stored XSS vulnerabilities.
Mahmoud Hegazy - https://twitter.com/Hegzous - Reported XSS (Reflected) vulnerabilities.
Mahmoud NourEldin - https://tamatah.medium.com, https://www.linkedin.com/in/nureldin/ - Reported "Rate Limit Bypass", "DOM XSS".
Mahmud Hasan Sizan - https://twitter.com/mr_g_007 - Reported Server-side request forgery (SSRF).
M. Akif SAYIN ~ DedCrowd - https://www.linkedin.com/in/dedcrowd - Reported "Unauthenticated Information Disclosure".
Maksym Bendeberia - Linkedin: /in/jogspokoen, Website: websafetyninja.com - Reported Information Disclosure.
Malkit Singh - Reported Reflected XSS.
@mamunwhh: https://twitter.com/mamunwhh?s=07 - Reported Information Disclosure.
Mandeep – Reported SSL vulnerability.
Mangesh Muley - https://www.linkedin.com/in/mangesh-muley-877a26229 - Reported Subdomain Takeover.
maniac - https://www.cnblogs.com/piaomiaohongchen - Reported Cross-site scripting (XSS).
Manikanta Simgamsetti - https://www.linkedin.com/in/manikanta-simgamsetti-19bb20140/ - Reported Cross-site scripting (XSS).
Manish Bhandarkar - @leosecure: Cookie disclouser vulnerability
Manish Bhattacharya - http://twitter.com/umenmactech: Reported Clickjacking Attack, Clickjacking with SQLI.
Manoj Kumar: Reported XSS vulnerabilities.
Manole V. Eduard - https://tiktok.com/@itistulcool / https://eduardvasile.ro - Reported Sensitive Data Exposure.
Marc Ströbel – phroxvs: Reported SQL Injection.
Marc-Oliver Munz - https://munz4u.de / https://x.com/marcolivermunz - Reported several Broken Access Control.
Marcel Bilal - wslab.de/#MarcelBilal - Reported a configuration vulnerability.
Marinko Ruzic - https://www.linkedin.com/in/marinko-ru%C5%BEi%C4%87-45162322/
Markus Krell - https://www.friendly-intruder.de/ - Reported XSS vulnerability.
Martin https://hackerone.com/mit0z - Reported several Information Disclosure / Reported Cross-site scripting (XSS) vulnerabilities / Reported Information Disclosure
Martijn B - https://hacksclusive.com https://twitter.com/x1m_martijn - Reported Possible DoS Attack.
Martijn Baalman - hacksclusive.com - twitter.com/hacksclusive - Reported Cross-site scripting (XSS).
Martin - https://twitter.com/martinbydefault - Reported Subdomain Takeover vulnerabilities.
Martin - hackerone.com/mit0z - Reported Security misconfiguration.
Martin "maride" Dessauer - Reported Critical Information Disclosure.
Martin Thirup Christensen - https://twitter.com/MThirup: Reported sql and xss vulnerabilities.
Martin van Wingerden - https://www.linkedin.com/in/martinvw/ - Reported "Unauthenticated DNS zone transfer (AXFR)".
Marvin Heyder - www.heyder-net.de - Reported Security Misconfiguration.
Marwan Idrees Hasan nheli - https://www.facebook.com/marwannheli - Reported Clickjacking vulnerabilities.
Mateusz Goik - aliantsoft.pl: Reported XSS vulnerabilities.
Mathias Karlsson - https://detectify.com: Repored XSS vulnerabilties.
matrixm0x1 - https://x.com/matrixm0x1 - https://www.linkedin.com/in/matrixm0x1: Reported Stored Cross-Site Scripting (XSS) vulnerabilities.
Matthias Fetzer - https://de.linkedin.com/in/matthias-fetzer-2b930b9a: Reported SQL Injection
Matthias Marx - Reported Information Disclosure.
Matthias Ungethuem - Prof. Pentesting, unnex.de: Reported CSRF vulnerability in the context of email address handling.
Maulik Shah: HTTP Header Injection.
Maulik Vaidh - Twitter: @Maulik1827 - Reported clickjacking vulnerability.
Maurice Woitzyk – mauricewoitzyk.de/ twitter.com/Maurice_Woitzyk – stored XSS
Maverick Vi - Reported XSS vulnerabilities.
Maxime Ropelewski - Reflected XSS via Client Side Template Injection.
Max Maaß - https://blog.maass.xyz - Reported Multiple Vulnerabilities.
Max Prietzel: Reported XSS and information disclosure vulnerabilities.
Maxim Rupp: Reported XSS vulnerabilities.
Mayank Bhatodra - http://www.linkedin.com/pub/mayank-bhatodra/7b/82/887: Reported XSS and ‘bypass of HTTPS on exceptional flow‘ vulnerability.
Mayank Kapoor - @wHys0SerI0s: Reported Clickjacking Attack, multiple vulnerabilities and SQL Injection.
Mayuri Suhas Gaikwad: Reported Access Policy Misconfiguration.
Mazen Gamal Mesbah @MazenGamal - www.facebook.com/love.rasolallh: Reported persistent XSS.
MD Abdul Salam: Reported XSS vulnerability.
Md Asif Hossain - https://0x0asif.com - Reported Server-side request forgery (SSRF).
Md. Nur A Alam Dipu - fb.com/nuraalam.dipu2 - Reported XSS vulnerabilities.
Md Rasel Bhuyan - LinkedIn: https://www.linkedin.com/in/rasel-bhuyan/ - Reported Cross-Site-Scripting.
Md Sadat Tamzit - Twitter: https://x.com/SadatTamzit - Reported Cross Site Scripting.
Md Sameull Soykot - @S0yk0t / fb.com/remixx.soykot - Reported XSS vulnerabilities.
Md. Shahriar Afaz - https://www.linkedin.com/in/shahriarafaz - Reported Subdomain Takeover
Mehdi Elyassa - www.twitter.com/kalimer0x00 - Reported RCE and Privilege Escalation, reported Remote Code Execution
Mehedi Hasan Remon - twitter.com/remonsec - Reported Information Disclosure.
Mehmet Can GÜNEŞ twitter.com/mehmetcangunes - Reported Open Redirect.
Mehtab Zafar https://twitter.com/0xmzfr - Reported Cross-site scripting (XSS) und Editace a čtení dat jiných uživatelů.
Mehul Bharat Lunagariya - TWITTER: https://twitter.com/Mrrain_1996 and LinkedIn: https://www.linkedin.com/in/mehul-lunagariya-bb5b29194/ - Reported clickjacking vulnerabilities.
Melardev (@melardev) - Reported Privilege escalation for server/application.
Memon_Aya_Tha - Reported Information Disclosure.
memon_chodpray - Reported Data manipulation.
Merlin Mayr - Reported XSS-Flaw.
Mert Daş linkedin.com/in/mertdas - Reported Privilege escalation for server/application.
Maximilian Kretschmer - https://maximiliankretschmer.de Reported SSRF (Server-Side Request Forgery) and XSS vulnerabilities.
Michal Brygidyn - https://www.linkedin.com/in/michalbrygidyn/ - Reported Information Disclosure.
Michael Schwarz - @bidde: Reported XSS vulnerabilities.
Miguel Corral - https://twitter.com/mcorral74 - Reported Information Disclosure.
Miguel Llamazares - https://www.linkedin.com/in/mllamazares/ - Reported Information Disclosure.
Miguel Segovia Gil - https://www.linkedin.com/in/miguelsegoviagil - Reported Server-side request forgery (SSRF).
MIHIR MISTRY - mdmmistry@ymail.com: Reported XSS vulnerabilities.
Milad Safdari - @thesafdari0x - Reported Cross-site scripting (XSS).
Milan jain - linkedin.com/in/milan-jain-50a738213 - Reported Missing rate limit / Reported HTML/CSS injection vulnerabilities.
Milan Kyselica - Twitter: https://twitter.com/milan_kyselica - Reported XSS and open redirect vulnerabilities.
Milivoj R. - linkedin.com/in/milivoj-r-8b925bb5 - Reported Cross-site request forgery (CSRF).
Missoum SAID - https://twitter.com/missoum1307: Reported XSS vulnerabilities.
Missoum SAID - @gmail.com - Reported outdated Telekom DNS-entry pointing to an external, vulnerable site.
Missoum SAID - http:// missoum1307.blogspot.com – Reported vulnerable Drupal implementation
Mitulkumar Soni - HACKSTOCk: Reported XSS vulnerability.
moein abas AKA mosec - www.linkedin.com/in/mosec-k - Reported Server-side request forgery (SSRF).
MOGWAI LABS GmbH - Reportes SQLi vulnerabilities.
Mohamed Abdelfatah - https://www.facebook.com/X.Vector1 / https://github.com/X-Vector - Reported multiple (reflected) XSS vulnerabilities.
Mohamed Aborehab - https://twitter.com/MOOHAM33D - Reported Missing rate limit vulnerabilities.
Mohamed AbouElkhir https://x.com/AbouElkhir_isme
Mohamed Ayman - twitter: https://twitter.com/0xA1MN - Reported Information Disclosure.
Mohamed Dief https://twitter.com/DemoniaSlash - Reported Information Disclosure/ Reported CRLF injection vulnerabilities.
Mohamed Elbadry - https://twitter.com/_melbadry9 / https://linkedin.com/in/melbadry9 - Reported CRLF Injection / Cross-site scripting (XSS) and Open Redirect vulnerabilities.
Mohammed Abdelbaset Elnoby - @SymbianSyMoh (W3Pwn.com): Information disclosure, Multiple XSS vulnerabilities.
Mohamed Elkhayat - Mohamed Elkhayat (@Mohamed87Khayat) / Twitter - Reported Cross-site scripting (XSS).
Mohamed Abdelhady - Linkedin https://www.linkedin.com/in/mohamed-abdelhady-0b890420b/
- Twitter https://twitter.com/Mohamed_A_R_1 - Reported Information Disclosure.
Mohamed Gasem (mirror_sec) - http://www.linkedin.com/in/mohamed-gasem-214a20351 - https://hackerone.com/mirror_sec - Reported Sensitive Data Exposure.
Mohammed Ahmed Nassar - FB.COM/Mohammed.Ahmed.Nassar: Reported XSS vulnerabilities.
Mohammed Amer - twitter.com/0nlymohammed - Reported Information Disclosure.
Mohamed amine kerrich - LinkedIn: linkedin.com/in/mohamed-amine-kerrich - Reported Broken Access Control.
Mohamed Elsayed Maati - @MSM_1sT: Reported XSS vulnerability.
Mohamed Ibrahim - twitter.com/mOhamedd7w - Reported Information Disclosure.
Mohamed Naoui - https://www.facebook.com/profile.php?id=100093004897221&mibextid=ZbWKwL - Reported Possible DoS Attack.
Mohamed Nowisar - https://www.linkedin.com/in/mohamed-nowisar-073964327 - Reported "Grafana XSS + Open Redirect".
Mohamed Ragab - www.facebook.com/mohammed.ragab.562 - Reported XSS (Reflected) vulnerabilities.
Mohamed Taha - https://www.facebook.com/mohamedtaha2001 - Reported Information Disclosure.
Mohammed F. Al-Barbari - https://twitter.com/m4dm0e - Reported Cross-site scripting (XSS), Cross-site request forgery (CSRF).
Mohammed Fayez Albanna - www.facebook.com/bana2313: Reported XSS vulnerabilities.
Mohammed Israil - https://twitter.com/mdisrail2468: Reported Access Policy Misconfiguration.
Mohammed Kamal Darwish (Algorithmic) - https://mkalgorithmic.blogspot.com/ - facebook.com/Mohammed.Kamal.Darwish - Reported unsecured communication and Information Disclosure.
Mohammed Magdi Shafig https://twitter.com/mohammedmagdi77 https://www.facebook.com/mohammedmagdishafig smartech.sd - Reported Information Disclosure.
Mohammed Mido - https://www.facebook.com/Mr.notron - Missing rate limit.
Mohammed Nafeed - https://www.linkedin.com/in/mohammed-nafeed-62a716250 - Reported "Sensitive Data Exposure".
Mohammed Sami facebook.com/Jizen0x01 - Reported vulnerabilities.
Mohammed Shine - https://twitter.com/mohammedshine8 - Reported Host Header Injection.
Mohammed Yasin https://twitter.com/DeogoYasin - Reported Broken Access Control.
Mohamed Sakr - facebook.com/X3rrOR - Reported XSS (Reflected) vulnerabilities.
Mohamed R. Serwah - @serwazzito0 - Reported Stored XSS and Reflected XSS vulnerabilities / Reported Cross-site scripting (XSS).
Mohammed Waseyuddin - https://x.com/waseyuddin - Reported OAuth Bypass.
@mohammadhdg1 web: https://infogazine.com - Reported SSL Poodle vulnerabilities.
Mohd Asif Khan - linkedin.com/in/mohd-asif-khan-✪-5228a9179 - Reported Security misconfiguration.
Mohit Kumar - linkedin.com/in/mohit-kumar-4ab6b3bb - Reported Information Disclosure.
Mohit Sahu - @mohitnitrr: Reported Content Spoofing.
Mohsin Khan https://twitter.com/mokhansec - Reported Information Disclosure.
Monendra Sahu - indishell: Reported Content Spoofing.
Moritz Mätze - https://www.maetze.net/ - Reported "CORS Origin Validation Bypass with Credentials".
Mostafa Aboelnour - https://www.linkedin.com/in/maboelnour12/ - Reported Information Disclosure.
Mr!dul Vohra - https://www.linkedin.com/in/mridulvohra - Reported Possible DoS Attack.
Mr.AnonDeek (Abedalrahman aldeek) - facebook.com/Mr.AnonDeek - Reported XSS (Reflected) vulnerabilities and CSRF vulnerabilities.
Mr.AnonDeek (Abedalrahman aldeek) - http://www.facebook.com/Mr.AnonDeek - Reported Missing rate limit vulnerabilities.
msion - msion@foxmail.com - Reported Cross-site scripting (XSS).
Muhammad Afaq Abid- https://www.linkedin.com/in/afaq/ - Reported Information Disclosure.
Muhammad Billadilathof - facebook.com/ToflaXploit - Reported Cross-site scripting (XSS).
Muhammad Haris Aftab - linkedin.com/in/muhammad-haris-aftab-6693201a4 - Reported Security misconfiguration.
Muhammad Julfikar Hyder https://thejulfikar.xyz - Reported Information Disclosure.
Muhammad Sharief - https://www.linkedin.com/in/muhammad-sharief/ - Reported Unauthenticated API Endpoints & Misconfigurations in Production.
Muhammad Waseem — https://www.linkedin.com/in/muhammadwaseem11/ — Remote Code Execution.
Muhammed Sadettin KARATAŞ - Reported Information Disclosure and Cross Site Scripting.
Muhammed Shahmeer (Maads Security) - https://www.facebook.com/Shahmeer.1994: Reported XSS vulnerabilities.
Muskan Shaikh - https://www.linkedin.com/in/muskan-shaikh-a77b801b2 - Reported Security misconfiguration.
بسم الله الرحمن الرحيم - MuslimSec.com - Reported Information Disclosure.
Mustafa Adam - https://www.linkedin.com/in/wadgamaraldeen/ - Reported Other.
Mustafa Can IPEKCI - nukedx.com - Reported Subdomain Takeover vulnerability.
Mustafa Diaa - @c0braBaghdad1 - Reported XML-RPC, Information disclosure, SSTI, SSL/TLS Authentication Gap, Local File Disclosure and Source Code Disclosure vulnerabilities and also usage of outdated and vulnerable software, Insecure Certificates, Configuration Files Disclosure, Cross-Site Tracing (XST) and Full Path Disclosure/ Reported Information Disclosure vulnerabilities.
Muzaffer Satiroglu: https://www.linkedin.com/in/muzaffer-satiroglu-8558541a5 - Reported Broken Authentication.

N

n9h3ch0_2935 - https://x.com/nadhn011194 - Reported Default login.
Naman shah - https://www.twitter.com/naman_1910 - Reported Broken Access Control / Reported HTTP header vulnerabilities.
Name – snop. – rabbitz.org: Reported XSS vulnerabilities.
Naresh Chowdary, twitter.com/knc331 - Reported Privilege escalation for server/application.
Nasim Mostakim - https://www.linkedin.com/in/ontu404 - Reported Default Credentials Usage.
Nasreldeen Yousif Osman - LinkedIn: https://www.linkedin.com/in/nasryousif/ - Twitter: https://twitter.com/nasreldeenusif - Reported Cross-site scripting (XSS).
nav1n - https://twitter.com/nav1n0x, https://www.nav1n.com - Reported Cross-site scripting (XSS).
Navreet - https://www.linkedin.com/in/navreet-singh-rnns142500/ - Reported Cross-site request forgery (CSRF).
Nayab keshodwala - : https://www.linkedin.com/in/nayab-keshodwala-994b1198 – Reported an XSS vulnerability
N B Sri Harsha - nbsriharsha.blogspot.in: Content Spoofing Bug.
Neha Bhatt - https://www.linkedin.com/in/neha-b-3b7006217 - Reported Open Redirect.
Nehal Pillai - https://www.linkedin.com/in/nehal-pillai-02a854172 - Reported Security misconfiguration and Broken Authentication vulnerability.
Nguyễn Trung Kiên (anhchangmutrang) - https://www.linkedin.com/in/anhchangmutrang - Reported Other.
Nick Kelley - Reported Full Path Disclosure vulnerability.
Nicolas Armua - instagram.com/thedragoncompany / https://facebook.com/DTSRECORD - Reported Cross-site scripting (XSS).
Nicolas Thumann - n-thumann.de Reported Bypassing two Captchas / Enumeration Attack / Reported Access Policy Misconfiguration / Reported Open Redirect / Reported XSS (Reflected) vulnerabilities / Reported multiple instances of Sensitive Information Disclosure /reported information, open redirect vulnerability/ disclosure vulnerability and other vulnerabilities /reported Insufficient Access Control, Information Disclosure, XSS, Account Existence Check / Host Header Injection and DoS Attack / DOM-XSS via File Input / Cross-site scripting (XSS) / Domain Ownership Validation Bypass /Reported Open Redirect vulnerabilities/ Possible DoS Attack.
Nijat Alizada - https://www.linkedin.com/in/nicataliyevh/ - Reported Email Bombing and Bouncing vulnerability.
Nikhil Kumar - https://in.linkedin.com/in/nikhil-kumar-4b9443166: Open Redirect / Reported Information Disclosure.
Nikhil Rane - linkedin.com/in/nikhil-rane-31733a217 - Reported Information Disclosure.
Nikola Kojic - http://ras-it.rs/ - Reported Open Redirect and XSS vulnerabilities.
Nikolozi Mardaleishvili - https://github.com/nmardaleishvili - Reported Open Redirect and Improper URI Scheme Validation issue.
Nikunj Chandak - LinkedIn URL : https://www.linkedin.com/in/nikunj-chandak-486367203/ - Reported Missing rate limit.
NILESH AGRAWAL KOYO - https://twitter.com/koyohere - Reported Other.
Nipun Somani (twitter: https://twitter.com/nipunsomani) - Reported possible Privilege Escalation.
Niraj Modi - Reported Other.
nishan4203@icloud.com - https://x.com/mrkali176442?s=21 - Reported .
Nishant Bhagat - https://x.com/nishant57 - Reported Subdomain takeover.
Nishan Shill, https://x.com/mrkali176442?s=11, Broken access control
Nitin Santosh Gavhane - twitter.com/Nitin34627556?s=09 - linkedin.com/in/nitin-gavhane-949b69179 - Missing rate limit.
NoBountyForThis - Twitter: https://twitter.com/akincibor1 - Reported Server-side request forgery (SSRF).
Noman patel - https://www.linkedin.com/in/nomanpatel01?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=ios_app - Reported Subdomain takeover.
Noth (沈彧璿) - zxc7528064@gmail.com - Reported Cross-site scripting (XSS).
Nurullah Demir – ndemir.com - Reported XSS vulnerabilities.

O

Ocnwh - https://x.com/RemonAdnan2 - Reported Reflected XSS.
Olawale Hassan - https://linkedin.com/in/olawaleh, @wallehazz - Reported RCE.
Oliver Müller - https://www.linkedin.com/in/oliver-m%C3%BCller-771b7767/ - Reported Authentication Bypass.
Olivier beg - www.olivierbeg.nl: Reported XSS vulnerabilities.
Omar Badraan - omarmohamedsc.github.io - Reported CSRF vulnerabilities.
Omar ElSayed - fb.me/bxrr23 - Reported Missing rate limit, Security misconfiguration, Other, User Enumeration, Server-side request forgery (SSRF), Cross-site request forgery (CSRF), Cross-site scripting (XSS), Reported Privilege escalation for server/application / Reported Security misconfiguration / Reported Information Disclosure and Open Redirect vulnerabilities / Reported Information Disclosure vulnerabilities / Reported HTML/CSS injection and Broken Access Control vulnerabilities / Reported Unrestricted file upload and Broken Authentication / Reported Clickjacking vulnerabilities / Reported Path traversal vulnerabilities, Reported Remote Code Execution (RCE).
ome_mishra - Reported Remote Code Execution (RCE).
Omur UGUR - omurugur.com - Reported DOM-based XSS vulnerability.
O-RANGE CYBERSECURITY TRAINING & SERVICES LTD - https://o-rangecybersecurity.com/ - Reported Information Disclosure.
Ori Levi - https://www.linkedin.com/in/orilevicyber - Reported Directory Listing, HTTP header, Clickjacking, HTML/CSS injection, Path traversal.
Osama Ansari - www.twitter.com/ansariosama10: Reported DOM Based XSS vulnerability.
Osama Khan - facebook.com/KhanOsama775 - Reported Cross-site request forgery (CSRF).
Osanda Malith Jayathissa - @OsandaMalith: Reported vulnerable version of software.
Owais Mehtab - https://twitter.com/kc_8002: Reported Captcha Bypass vulnerabilities.
Oyetunde Yunus - Website: https://www.coyemerald.com - Reported HTML Injection.

P

Pablo Santiago - https://www.linkedin.com/in/pablo-s-385647163/ - Reported Missing rate limit, HTTP header and Server-side request forgery (SSRF) vulnerabilities.
pallab jyoti borah https://www.linkedin.com/in/pallab-jyoti-borah-20874a181 - Reported Cross-site request forgery (CSRF).
Paradox hunt(N.u) - https://x.com/hunt_n27493 - Reported Cross-site scripting (XSS)
Paras Pilani - @cool_paras: Reported XSS vulnerability.
Parshwa Bhavsar - twitter.com/parshwa_bhavsar?s=08 - Reported HTTP header.
Parth Shukla https://www.linkedin.com/in/parthshu18 - Reported Information Disclosure.
Pascal Zenker - https://parzelsec.de - @parzel2 - Reported RCE and SSRF vulnerabilities.
Parveen Yadav: Reported XSS vulnerability.
Patrik Fehrenbach - IT-Securityguard.com @itsecurityguard: Reported XSS vulnerabilities.
Patrick Davidson Tremblay https://www.linkedin.com/in/patrick-davidson-tremblay/- Reported Default login.
Patrick Lang - linkedin.com/in/patrick-lang-707809147 - Reported Security misconfiguration / Reported Broken Authentication and Information Disclosure vulnerabilities.
Paul Seekamp - www.linkedin.com/in/paulseekamp: Reported XSS vulnerability and Cross-site scripting (XSS).
Paweł Hałdrzyński: Reflected XSS.
Pedro Cardoso - twitter.com/tvmpt - Reported Cross-site scripting (XSS).
Peter Jaric - @peterjaric (javahacker.com): Reported XSS vulnerability.
peterjson of RedTeam@VNG Corporation - Reported Remote Code Execution (RCE).
Peter Levashov - www.SeveraDAO.ai - reported Public data exposure involving OTC
Philippe Delteil @philippedelteil- Reported Possible DoS Attack and Server-side request forgery (SSRF) vulnerabilities.
phor3nsic - https://twitter.com/phor3nsic_br - Reported Server-side request forgery (SSRF).
Piotr Karolak, https://github.com/UGF0aWVudF9aZXJv - Reported Cross-site scripting (XSS) / Reported Server-side request forgery (SSRF) / reported Broken Access Control vulnerabilities.
Piyush P - linkedin.com/in/piyush-p-1b8a2312b - Reported Cross-site scripting (XSS).
Pritam Dash - https://www.linkedin.com/in/pritam-dash-116931171/ - Reported Information Disclosure, Security Misconfiguration, User Enumeration.
Pobereznicenco Dan - danyweb09 - rstforums.com - Reflected XSS.
Pradeep Jairamani: Reported security vulnerabilities.
Prajit Sindhkar (SAPT) https://www.linkedin.com/in/prajit-sindhkar-3563b71a6/ - Reported Information Disclosure.
Prakash - @1lastBr3ath - Reported Server-side request forgery (SSRF).
Prakash Dhatti - https://www.linkedin.com/in/prakash-dhatti-53201167/ - Reported CORS vulnerabilities.
Pralhad Chaskar - @c0d3xpl0it: Reported Clickjacking Attack and XSS vulnerability.
Pramod.P Sargar - linkedin.com/in/impramodsargar - twitter.com/impramodsargar - Reported Clickjacking.
Prashant Rajput - fb.com/HACKDIVE RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Praveen N Air & Simone Memoli (Simon90_Italy): Reported XSS vulnerability.
Praveenarsh - https://www.instagram.com/cybersec_praveenarsh?igsh=MWp1M2E4dWZ6dHdmbQ== - Reported Unsecured communication.
Pranjal Singhal - https://www.facebook.com/pranj.4.u - Reported XSS vulnerabilities.
Prashant Khare - https://www.linkedin.com/in/prashantkhare001- Reported Content Injection vulnerabilities.
Pratama Aji Prisadi - linkedin.com/in/pratamaajip - Reported Server-side request forgery (SSRF).
Prathamesh Joshi - https://twitter.com/@pr4th4m_joshi - Reported XSS vulnerabilities.
Pratik K. Tejani - https://twitter.com/tejani_pratik https://www.facebook.com/pratik.tejani.5- Reported Server-side request forgery (SSRF).
Preetham Kumar - https://www.linkedin.com/in/Preetham--Kumar/ - Reported Information Disclosure.
Prem Kumar - @iAmPr3m
Pritam Mukherjee - linkedin.com/in/pritam-mukherjee-urvil-b75ab9b9 - Reported Missing rate limit.
Priyank - fb.com/priyank3126 RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Priyanshu Upadhyay - linkedin.com/in/priyanshu-upadhyay - Reported Unsecured communication.
Priya Dharshan - https://x.com/JPD_1206 - Reported Remote Code Execution (RCE).
proabiral - https://twitter.com/proabiral- Reported Remote Code Execution (RCE).
Professor the Hunter - https://x.com/bughuntar - Reported Sensitive Data Exposure.
Przemyslaw Krysciak - Web: https://procoding.de/ LinkedIn: https://www.linkedin.com/in/przemyslaw-krysciak/ - Reported several expired certificates.
Pulkit Pandey - twitter.com/pulkitpandey92 - Reported Privilege escalation for server/application.
Purple - https://x.com/purple_colo - Reported "Broken Access Control","Config exposed" / Unauthenticated Database Read Access.
PUSHKAR KUMAR - Reported Information Disclosure.

Q

R

Raafeh Ur Rehman - https://www.instagram.com/raafehr165?igsh=MXZzbTQ0NnU2eTFvOA== - Reported Security misconfiguration.
Rafael Cavalcante Zanetti - https://www.linkedin.com/in/sysraafael/ - Reported Information Disclosure.
Rafael Fedler - https://www.linkedin.com/in/rafaelfedler- Reported open-redirect vulnerability.
Rafiqul Islam - https://x.com/rirripon - Reported HTML/CSS injection.
Raghav sharma @Recon - Reported XSS vulnerabilities.
Raghuram G (GK Cyber Labs) - linkedin.com/in/raghuram--g
Rahul Maini - X Profile: https://x.com/iamnoooob.
Rahul Parmar - linkedin.com/in/rahul-parmar31 - Reported Missing rate limit / Reported Clickjacking / Reported Cross-site scripting (XSS).
Rahul Raj-@rahulr0cks Reported xss vulnerabilities
Rahul Singh: Sqil & Path Disclosure.
Rahulvenati: Reported XSS vulnerability.
Raj Sukali - twitter.com/NoTty_rAj: Reflected XSS.
Raja Ahtisham - https://www.facebook.com/profile.php?id=100009347250717 - Reported Hyperlink Injection vulnerabilities.
Rajesh Mondal - facebook.com/r4j3sh
Rajesh Patil - Reported Cross-site scripting (XSS).
Rajesh Sagar- https://www.linkedin.com/in/rajesh-sagar-95619524b - Reported Missing rate limit.
Rajnish Kumar Gupta - linkedin.com/in/geekyrajnish - Reported Clickjacking.
Rakesh Singh & Harish kumar & Sandeep Sodhi - https://twitter.com/zerodayguys: Reported HTTP header injection vulnerability
Raman Gupta - http://in.linkedin.com/pub/raman-gupta/27/66/2a0: Reported Internal Stack trace disclosure vulnerabilities.
Rameshunlocked - https://x.com/RameshKanna05 - Reported Default login.
Ramesh kanna M -Twitter account : https://twitter.com/RameshKanna05 - Reported Information Disclosure / Reported Default login vulnerabilities.
Ramkumar G - twitter: https://twitter.com/_ramkumar_g - Reported HTML/CSS injection.
Ramon Dunker - https://ramondunker.nl / https://www.linkedin.com/in/ramondunker - Reported Cross-site scripting (XSS), Clickjacking and Server-side request forgery (SSRF), Remote Code Execution (RCE) and Information Disclosure vulnerabilities / Reported Other vulnerabilities.
Randi Julianto - https://www.linkedin.com/in/randi-julianto-182b04120 - Reported Clickjacking
Ranjithkumar Mayavan - https://www.linkedin.com/in/ranjithkumar-mayavan-926738169/ https://twitter.com/ranjithbreaks - Reported Default login.
Rasel Mir - https://www.linkedin.com/in/araselmir/ - Reported "Unauthenticated Access to Management API".
Rashed Hasan – LinkedIn: https://www.linkedin.com/in/rashedhasan00 Twitter: https://twitter.com/rashed_hasan00 - Reported XSS vulnerabilities.
Raunak Gupta - https://www.linkedin.com/in/raunak-gupta-772408255/ - Reported Public OBS Buckets Expose Build Artifacts, Root Password Hash, and Internal Infrastructure
RAVI ASHOK PRAJAPATI - https://twitter.com/raviakp1004 https://www.linkedin.com/in/ravi-prajapati-346b15190 - Reported Cross-site scripting (XSS).
Ravi Pandey - https://www.linkedin.com/in/ravipandey035/ - Reported Security misconfiguration.
Ravi Pavan - linkedin.com/in/contact-pavan - Reported Information Disclosure.
Ravi Singh: Reported XSS vulnerability.
Ravinsta Antony - Reported Information Disclosure.
Ravikumar Paghdal - @_RaviRamesh: Reported Open Redirection.
RAY - Reported Unsigned SAML Assertion Forgery (Full Auth Bypass).
redwan karmouch - sherwoodchaser.com - Reported Cross-site scripting (XSS).
Reinal Shetty - Reported outdated softeware.
Rémy Marot - https://twitter.com/r_marot - Reported RCE.
rez0 https://twitter.com/rez0__ - Reported Information Disclosure.
Riadh Benlamine - https://www.linkedin.com/in/riadh-benlamine-a35106189 / www.facebook.com/riadhbenlamineg - Reported Clickjacking vulnerabilities / Reported Cross-site request forgery (CSRF) / Reported HTML/CSS injection vulnerabilities.
Ridoy Khan - Reported Clickjacking.
Rihana Shaikh - Website: www.extremehacking.org - Reported several clickjacking vulnerabilities.
Rikson Naway - https://twitter.com/riksonnaway1 - Reported HTML/CSS injection.
Rishaan Anand - https://ctgsecuritysolutions.com/ - Reported Business Logic / Impersonation
Rishal Dwivedi - fb.com/rishaldwivedi, @rishaldwivedi & Manjot singh - @Manjotsinghg8: Reported xss vulnerabilities.
RITAJ SHARMA - linkedin.com/in/ritaj-sharma-578997199 - Reported Clickjacking.
Ritik Chaddha - twitter.com/RitikChaddha - Reported several User Enumeration; Information Disclosure
Ritwick Dadhich - linkedin.com/in/ritwickdadhich -ritwick-dadhich.github.io/profile - Reported Security misconfiguration.
Riya Nair - LinkedIn: https://www.linkedin.com/in/riya-nair-70a347202 - Reported Information Disclosure.
Rizz Shinigami - https://www.linkedin.com/in/nomanpatel01?utm_source=share&utm_campaign=share_via&utm_content=profile&utm_medium=ios_app - Reported Subdomain takeover.
Robert Kugler - robert.kugler10@gmail.com - Reported OpenRedirect vulnerability.
Robert Scherer - www.linkedin.com/in/robert-scherer-71901a26b - Reported Broken Access Control.
Robin Descamps - https://www.linkedin.com/in/robindescamps- Reported Broken Authentication, Server-side request forgery (SSRF).
Robin Lindner - Lindner IT - https://lindnerit.io - Reported Default login.
Rodolfo Godalle, Jr. - fb.com/junior.ns1de: Reported XSS vulnerability.
Rody Shahnazarian https://twitter.com/komradz86 - Reported Cross-site scripting (XSS).
Rohan Agarwal - linkedin.com/in/rohan-agarwal-27265a176 - Reported Security misconfiguration.
Rohan Kulkarni - https://www.linkedin.com/in/rohan-kulkarni-6a073979/ - Reported Denial of Service vulnerability.
Rohit pawar - https://www.linkedin.com/in/ethicalrohitt - Reported Chatbot Prompt Injection Vulnerability", SSRF and "Stored Cross Site Scripting"x(2) and "Unauthorized Redirection of Email", "Unauthorized AI Agent Creation, Marketplace Publishing, and Runtime System Prompt Disclosure" and "Unauthenticated Command Execution Through AEM"
Roman Stühler - https://stuehler-training.de - Meldung von RCE.
Ronak Nahar - Reported Information Disclosure.
Roy Jansen - https://www.facebook.com/RoyJansen01 - Reported Open Redirect vulnerability.
rskvp93 (Viettel Cyber Security) - http://vnprogramming.com - https://twitter.com/rskvp93 - Reported RCE Injection.
Rudra16 twitter.com/rudra16t - Reported Information Disclosure.
Rudra Karn - @rudra11346926 - Reported Information Disclosure.
Rupesh Tanaji Kokare - https://www.linkedin.com/in/rupesh-kokare-b63a78145/ - Reported Clickjacking vulnerabilities.

S

Şaban Göktürk - https://x.com/mxroot https://www.linkedin.com/in/sabangokturk - Reported Information Disclosure and Cross-site scripting (XSS), Reported HTML/CSS injection and Open Redirect.
Sabir Ali - https://x.com/0xSabir - Reported "Unauthenticated Exposure of User Emails and Phone Numbers"
S. Venkatesh (Shadow force), Sen Haxor, Rahul Singh(rmar.in), Manoj(Sneaker): SSL ciphers.
Sachin Rajput - fb.com/schngahlaut RMAR Technologies Pvt. Ltd. (www.rmar.in): Reflected XSS.
SADDAM HUSSAIN - https://twitter.com/wisdomfreak1 - Reported Information Disclosure.
Sadegh Ahmadzadegan: Blind SQL injection.
Saeed Kamranfar - https://www.linkedin.com/in/saeed-kamranfar-8026591a0 - Reported Server-side request forgery (SSRF).
SAFA Ayoub - Twitter: @SafaAyoub - Reported information disclosure, RCE and SQLI vulnerabilities.
Sahil Saif - @bewithsahilsaif: Clickjacking vulnerability.
Sahil Sehgal - @xXSehgalXx - breakingmesh.blogspot.com: Reported Information Disclosure Vulnerability.
SAIGANESH MARATI - https://www.linkedin.com/in/saiganesh-marati-739492214 - Reported several Clickjacking vulnerabilities / Reported Information Disclosure vulnerabilities / Reported HTTP header.
Saif Abdullah Khan Mahi - https://x.com/badhacker0x1 - Reported reflected Cross-site scripting (XSS) /Reported Other.
Sajal Verma - https://www.facebook.com/sajalpentest: Reported information disclosure vulnerability
Sajith Shetty: Reported Clickjacking und Path Disclosure vulnerabilities.
Salati Salis Luqman - https://www.facebook.com/share/1FdPy2wi8Q/, https://x.com/bash_voice - Reported Email Hyperlink Injection.
Samet Şahin - https://twitter.com/F4LCONE_/ https://www.linkedin.com/in/sametsahinn/- Reported XSS vulnerabilities.
Samprit Das - https://www.linkedin.com/in/samprit-das-9805831a2 - Reported Server-side request forgery (SSRF) / reported Cross-site scripting (XSS) vulnerabilities.
Samrat Anand - https://ctginfosec.com - Vulnerability Name: Directory listing.
SAMWEL SENSO MWITA - https://www.linkedin.com/in/samwel-senso-0a5094325/ - Reported "Information Disclosure via Internal GUID Service Endpoint".
Sánchez Garcés - http://enelpc.com - @enelpc: Reported xss vulnerabilities.
Sandesh Gawai - https://www.linkedin.com/in/sandeshgg - Reported Unauthenticated pprof Endpoint Leading to Credential Exposure
Sandip Oli https://www.linkedin.com/in/sandip-olee/ https://www.facebook.com/sandip.olee - Reported Information Disclosure and Open Redirect vulnerabilities.
Sangam Goel- https://www.linkedin.com/in/sangamgoel - Reported Server version information disclosure / Confidential document leak.
SANJAY VENKATESAN - https://www.linkedin.com/in/sanjay-venkatesan-5a478220b - Reported Information Disclosure.
Sanwoola Oluwaseyi Fredrick - x.com/f_r_e_d_d_y_1 - Reported Open Redirect / reported several Clickjacking vulnerabilities.
Saphal Karki (kira) - twitter.com/k1ra__ - Reported Server-side request forgery (SSRF).
Saravana Kumar V - URL: http://linkedin.com/in/06saravana - Reported an Information Disclosure vulnerability.
Sardarescu Louis Aurel - https://www.facebook.com/sardarescu.louisaurel.7 - Reported Self-XSS vulnerabilities.
Sasi Levi @ Sasi 2103 - Reported XSS vulnerabilities.
Satheesh Raj - https://www.facebook.com/UaA3ks1: Reported XSS vulnerability.
Satish Bommisetty - http://www.securitylearn.net: Reported missing X-Frame-Options.
Sattar Jabbar - https://www.facebook.com/vipexploiter - Reported Local File Disclosure vulnerabilities.
Satyam Singh (0xm3hd)- https://twitter.com/m3hd22 - Reported Missing rate limit.
Satyasys Tech Private Limited - satyasys.com - Reported Broken Authentication.
Satyendra Prajapati - @satty032 - https://twitter.com/satty032: Reported IFrame Injection and XSS vulnerabilities.
Saurabh Siddharam Sanmane - https://twitter.com/@saurabhsanmane2 - Reported improper session handling vulnerabilities.
Saurabh Saxena - Reported XSS vulnerabilities.
Sayada Zannat Haque http://www.linkedin.com/in/sayada-zannat-haque-7a4b5a17b - Reported "Use of Default Cumulocity IoT credentials", Hardcoded API Key allows CRUD access.
Sayeed Shaik - https://www.linkedin.com/in/sayeedshaik/ - https://twitter.com/sayeedm44 - Reported Other.
Sayim0x - https://x.com/sayim0x - Reported GET-Based Open Redirect.
Sebastian Feldmann - Reported HTML Injection.
Sebastian Neef - it-solutions-neef.de: Reported XSS vulnerabilities.
Sebastian Neef and Tim Schäfers - @internetwache (www.internetwache.org): Reported SQL Injection and XSS vulnerabilities.
SecuNinja - http://twitter.com/secuninja - Reported XSS vulnerabilities/ Reported XSS vulnerabilities and misconfiguration of webservers / Reported XSS (Reflected) vulnerabilities, Reported Information Disclosure, Reported Subdomain takeover.
Sergio Galán aka NaxoneZ - @NaxoneZ: Reported XST vulnerabilities.
@serWazito0 - Reported Cross-site scripting (XSS).
Severus Huy Ngo - www.linkedin.com/in/huy-ng%C3%B4-1a9b52282/ - Reported Information Disclosure.
Shady Gamal - https://twitter.com/5hady_- Reported RCE Injection.
Shahaf Levi - linkedin.com/in/shahaflevi - www.cysrc.com - Reported Cross-site scripting (XSS).
Shaikh Yaser Arafat - https://twitter.com/yaser_s - https://www.linkedin.com/in/shaikhyaserarafat/ - Reported default credentials, Access Policy Misconfiguration, Critical Information Disclosure, SubDomain Takeover, Broken Authentication.
Shailabh Singh - fb.com/shailabh2 RMAR Technologies Pvt. Ltd. (www.rmar.in): Reflected XSS.
Shailendra Singh sachan - https://www.linkedin.com/in/shailendra-singh-sachan-b8205b184 - Reported HTTP header.
Shailesh kumavat https://hackerone.com/0x240x23elu https://twitter.com/0x240x23elu - Reported Information Disclosure / Reported Server-side request forgery (SSRF) and Cross-site scripting (XSS) vulnerabilities.
Shail Patel - LinkedIn: Linkedin: https://www.linkedin.com/in/shail-patel-8b005565/, X: https://x.com/AppSecFreak - Reported Broken Access Control, Default Credentials, 2FA Bruteforce and Information Disclosure vulnerabilities, Unauthenticated Access to APIs/ reported "Disclosure of PII data", Open redirect, GMaps API Key Disclosure.
Sharanya. M - twitter.com/@SharanyaM_99 - Reported Broken Access Control.
Shashank Dixit - Reported a misconfiguration.
Shaun Budding - https://twitter.com/pudsec - Reported Information Disclosure.
Shay ben tikva - WEB/LINKEDIN/TWITTER/FB - Reported Information Disclosure.
Shay Hagai - www.linkedin.com/in/shay-hagai - Reported Information Disclosure.
Sherin Panikar - Kerala Cyber Squad-India: Reported vulnerabilities.
Shesha Sai C - http://linkedin.com/in/shesha-sai-c-18585b125 - Reported Information Disclosure and Open Redirect.
Shivam Dhingra - https://linkedin.com/in/shivam-dhingra - Reported Other.
Shivam Kamboj Dattana - https://twitter.com/sechunt3r | https://www.linkedin.com/in/sechunt3r/ - Reported broken authentication mechanism.
Shivam Pravin Khambe - linkedin.com/in/shivam-khambe-9a982b180/ - https://twitter.com/ShivaRa42316756 - Reported Host header injection.
Shivam Shrivastav (Laalaji) - https://twitter.com/shubshrivastav?t=M-qxJ-jWbxIL2gs34FLNHA&s=09 https://www.linkedin.com/in/shivam-shrivastav-laalaji - Reported Information Disclosure, Other, Default login.
Shivang Maurya - https://www.linkedin.com/in/shivangmauryaa/ - Reported Cross-site scripting (XSS) / Reported Reflected HTML Injection.
Shivang Trivedi https://www.linkedin.com/in/shivang-trivedi-a149b2190/ - Reported Remote Code Execution (RCE).
Shobhit Gautam: Authentication issues.
shoponalom29 - https://x.com/shoponalom29 - Reported Information Disclosure.
Shpend Kurtishaj - @shpendk: Open redirect.
Shrikant Antre - @shrikant_hell: Reported Clickjacking Attack.
Shubham Garg - twitter.com/nullb0t - Reported Information Disclosure.
Shubham Singh Jijania, kush_kira, kushkira, Paypal.me/kushkira - Reported Possible DoS Attack.
Shuvo Kumar Saha (syper shuvo) - LinkedIn https://www.linkedin.com/in/syper-shuvo/ - Reported Information Disclosure.
Shwetabh Suman - @SHWETABHSUMAN11/ https://www.facebook.com/profile.php?id=100011024580051 - Reported CSP bypass vulnerability.
Sibusiso Sishi https://twitter.com/sibusisosishi - Reported Information Disclosure.
Siddharth Prasad - LinkedIn - https://www.linkedin.com/in/siddharth-prasad-3b0310151 - Reported Default login / Reported Server-side request forgery (SSRF) vulnerabilities / Reported Clickjacking vulnerabilities / Reported Unsecured communication vulnerabilities / Reported Information Disclosure and HTTP header vulnerabilities.
Siddesh Ningappa - http://linkedin.com/in/siddesh-n-609178186 - Reported Open Redirect.
Simon Bräuer - @redshark1802: Reported SQL Injection, RCEs, XSS, auth bypass, Clickjacking and Information Disclosure vulnerabilities.
Simon Michalke - Reported Security misconfiguration.
Simone Memoli twitter.com/Simon90_Italy: Reflected XSS.
Siranjeevi V - Reported Unauthenticated Access to APIs / Reported Open redirection.
Sireesha: Reported XSS vulnerability.
six2dez - six2dez.com / Six2dez (@Six2dez1) / Twitter - Reported Remote Code Execution (RCE), Server-side request forgery (SSRF), Cross-site scripting (XSS), Reported Information Disclosure.
Sönke Behrendt - Repoted vulnerability in Speedport firmware.
Soham Lad - linkedin.com/in/soham-lad-8a336020a - Reported Information Disclosure.
soman verma - twitter.com/somanverma13 - Reported Missing rate limit.
Souhaib Naceri - https://www.linkedin.com/in/souhaib-naceri - Reported Information Disclosure / Reported Default Credentials.
Souvik Mondal - https://www.linkedin.com/in/souvik-mondal-8b3a0a1b3/ - Reported Security misconfiguration.
spookhorror - Reported Broken Access Control.
Spyridon Chatzimichail - https://gr.linkedin.com/in/spyridon-chatzimichail-07467928 - Reported XSS Vulnerabilities.
Sreekanth Reddy - https://x.com/sree_appsec - Reported information disclosure.
Srikar V https://linkedin.com/in/exp1o1t9r exp1o1t9r.com - Reported Information Disclosure.
Sriram Naidu: Reported XSS vulnerability.
Ştefan Cicoş - Stefan Cicos (@StefanCicos) / Twitter - Meldung von Cross-site scripting (XSS) Schwachstellen.
Stefan Schurtz – www.darksecurity.de : Reported XSS vulnerabilities.
Steven - https://twitter.com/keritzy - Reported XSS vulnerabilities.
subhasish mukherjee https://www.linkedin.com/in/subhasish-mukherjee-40208b29/ - Reported Other.
Sudhir Gaikwad - http://facebook.com/suhas00001: Reported XSS vulnerabilities.
Sudo Apt PURPLE TEAMER MALDEV - https://x.com/Wild_Carrd - Reported "SQL Injection".
Suga - https://www.facebook.com/sugaa.mogar.1 - Reported Open Redirect.
Suhas Sunil Gaikwad - https://fb.me/suhas00001: Reported XSS vulnerabilities.
Sumit Bhadouriya - https://www.linkedin.com/in/sumit-b-1b74b8258 - Reported Missing Rate Limiting on Registration Form.
Sumit Grover - twitter.com/sumgr0 - Reported Subdomain takeover, Cross-site scripting (XSS).
Sumit Sahoo - www.facebook.com/54H00: Reported XSS und Path Disclosure vulnerabilities.
Sunil Modi: Reported Logout CSRF (Cross Site Request Forgery) vulnerabilities.
Suraj Bhosale - linkedin.com/in/suraj-bhosale-876b2937 - Reported Cross-site scripting (XSS).
Suraj Gupta - https://www.linkedin.com/in/suraj-gupta-661734273 - Reported Information Disclosure.
Suresh Mahto - https://www.linkedin.com/in/suresh0mahto - Reported CSRF vulnerability.
Suresh Nadar - https://twitter.com/snadar73 - Reported Cross-site scripting (XSS).
surg4bij4k - https://webpentester.com/ - Reported SQL injection.
Surprise Adepitan - Twitter: @catchmeifyuucan - Reported Unrestricted file upload.
Suyash Bavalekar - https://bugcrowd.com/Suyash_777 - Reported Clickjacking vulnerabilities.
Suyog Palav (S.P.) - facebook.com/suyog.palav & linkedin.com/in/suyog-palav - Reported security mechanism bypass.
Sven Großmann - twitter.com/svennergr / https://grossmann.dev - Reported Critical Information Disclosure.
Sven Morgenroth - @asdizzle_ http://asdizzle.com/ - Reported XSS vulnerabilities.
Swapneil Kumar Dash - https://in.linkedin.com/in/swapneil-dash-7256a5b0 - Cross Site Scripting.
Swapnil A. Thaware - @swapnilthaware: Reported CSRF and Clickjacking vulnerabilities.
Swathi - https://www.linkedin.com/in/pasupuleti-swathi - Reported Cross-site scripting (XSS).

T

Tahmid Islam - https://facebook.com/tahmidnil - Reported Server-side request forgery (SSRF) / Reported Authentication Bypass / Reported Broken Access Control vulnerabilities.
Taiwo Owolabi - detotowolabi.carrd.com x.com/d4rkpanth3r?s=21 ng.linkedin.com/in/otowolabi reported nginx version low finding
Talha Gunay - https://twitter.com/redStarP2 - Reported SQL injection, Cross-site scripting (XSS).
Tameem Khalid– https://www.linkedin.com/in/tameem-khalid-641a4b192/ - Vulnerability Disclosure
Tarikul Islam https://sa1tama0.com https://x.com/sa1tama0 https://www.linkedin.com/in/sa1tama0. Reported Reflected Cross-Site Scripting (XSS) due to Unhandled Exception in Login Form
Tarun Mahour - https://twitter.com/sratarun?s=09 / https://www.facebook.com/tarunhacks - Reported XSS vulnerabilities.
Tarunkant Gupta (SpyD3r) - https://twitter.com/TarunkantG - Reported Remote Code Execution (RCE).
T4 - http://twitter.com/llt4l - Reported multiple vulnerabilities.
Taufique Azad - taufique@indianhans.org (www.facebook.com/tauazad): Reflected XSS.
Tcaciuc Bogdan Vasile - https://twitter.com/xenonxesece - Reported XSS vulnerabilities.
Tejash Patel - @tejash1991: Open Redirect.
Teemu Kääriäinen - https://www.nixu.com - Reported Remote Code Execution vulnerabilities.
Th. Michael Eißele: Multiple XSS vulnerability.
Thierno Diop - Reported outdated and vulnerable software.
TightropeMonkey - https://tightropemonkey.dev/ - Reported Broken Authentication.
Tijo Davis - https://www.linkedin.com/in/tijo-davis-a906a7141 - Reported Clickjacking, Host Header Injection, HTTP connection, Session Management misconfiguration, XML-RPC vulnerabilities and CSRF vulnerabilities.
Tim Philipp Schäfers - IT Consulting Schäfers: Reported XSS vulnerabilities.
Tim Wranik - IT-EXPERT - tw@it-expert.de - Reported multiple VoIP Phone firmware vulnerabilities.
Timo Lins - www.timolins.at: Reported XSS vulnerabilities.
Tobias Augustin (STARK IT-Security GmbH) - www.stark-its.de - Reported Cross-site scripting (XSS).
Tobias Holl - https://tholl.xyz/ - Reported Cross-site request forgery (CSRF), Broken Authentication, Remote Code Execution (RCE).
Tobias Lins - @tobiaslin5: Reported XSS vulnerabilities.
Tolgahan Demirayak - https://tol.ga - Reflected Cross-Site Scripting (XSS) Vulnerability.
Tomas Labuda (Tomas.Labud@gmail.com): Reported SQL injection.
Tommy Elco Geraldi https://www.linkedin.com/in/tommyelcogeraldi/ - Reported Clickjacking, Cross-site scripting (XSS) and Information Disclosure / Reported Server-side request forgery (SSRF) vulnerabilities
Tony Tunde Obisesan - https://www.vistahand.com - Reported Broken Access Control/ reported "HTML Injection".
Tran Gia Phu - Reported Remote Code Execution (RCE).
tuo4n8 - VNG Security Response Center@VNG Corporation - https://vsrc.vng.com.vn/ - Reported Remote Code Execution (RCE).
tuo4n8 - Verichains Cyber Force - https://verichains.io - Reported Privilege escalation for server/application and Remote Code Execution (RCE).
Tushar Rajhans Kumbhare: Reported XSS vulnerability.
Tushar Sharma - https://www.linkedin.com/in/tushar-sharma-700657139/ - Reported Text Injection vulnerabilities.
Tushar Vyas - @iamtusharvyas - Reported several Information Disclosure / Reported User Enumeration / Reported HTTP header vulnerabilities / Reported path traversal vulnerabilities.
Tusuubira Emmanuel (kenjoe41) - twitter.com/kenjoe41 - Reported Information Disclosure / Reported User Enumeration.

U

Udhaya Prakash - https://www.facebook.com/udhayaprakash.isro, https://www.linkedin.com/in/udhayaisro - Reported RCE.
Umraz Ahmed - www.twitter.com/umrazahmed: Reported XSS vulnerabilities.
un_kn0wn - twitter.com/W3ld35u5W - Reported Information Disclosure / Reported Path traversal vulnerabilities.
Usama Shahzad - https://www.linkedin.com/in/usama-shahzad/
Regards - Reported Default login vulnerabilities.

V

Vaibhav Khatke- https://in.linkedin.com/in/javaibs- Reported HTML Injection.
Vaibhav Lakhani - twitter.com/vlakhani28 - linkedin.com/in/vaibhav-lakhani - Reported Clickjacking, cross-site scripting (XSS) and security misconfiguration / Reported Information Disclosure and Data manipulation / Reported Broken Access Control / Reported Information Disclosure / Reported User Enumeration / Reported User Enumeration.
Vaibhav Nitin Gaikwad - linkedin.com/in/vaibhav-gaikwad-55071b152 - Reported Information Disclosure.
Vaibhav Shinde - LinkedIn https://www.linkedin.com/in/vaibhav-shinde-28b811242 - Reported of expired certiticates.
Vaidik Pandya (h4x0r_fr34k) - linkedin.com/in/vaidikpandya - Reported Default login and Cross-site scripting (XSS) / Reported Server-side request forgery (SSRF) vulnerabilities.
Vaisha Bernard - https://www.linkedin.com/in/vaishabernard/ - Reported Authentication Bypass.
Valeriy Shevchenko https://twitter.com/Krevetk0Valeriy https://krevetk0.medium.com - Reported Remote Code Execution (RCE).
Varun Kakumani - Internshala.
Vasil A. - https://twitter.com/flexxpoint: Reflected XSS.
Vasim Shaikh - https://www.linkedin.com/in/vasim-shaikh-094507110 - https://twitter.com/Vasimsk49 - Reported multiple vulnerabilities.
Vasu Deva: Reported Full Path Disclosure vulnerabilities.
Vedachala - @vedachalaka: Reported clickjacking vulnerability.
Vedachala & Ajay Negi: Reported XSS vulnerability.
Vedant Shinde https://www.linkedin.com/in/vedantshinde15 - Reported Clickjacking.
VEDHA PRAKASH ACHARY TALLOJU - @iamvedhaprakash - Reported Clickjacking vulnerabilities / Reported HTTP Header Injection vulnerabilities.
Veli-Pekka Vainio: Reported XSS vulnerability.
Venkata Sateesh Netti - https://twitter.com/str4n63r - Reported Other.
Venkateswara Reddy Yaruva & Abhijeth D - Reported XSS vulnerabilities.
Venugopal Thotakura - @venugopalt: Reported XSS vulnerability.
Victor Curălea - https://twitter.com/VictorCuralea/ - Reported Remote Code Execution (RCE).
Vidhan thakur - LinkedIn profile: https://linkedin.com/in/vidhan-thakur -Reported Information disclosure and HTML Injection and Broken Authentication and Session Management > Failure to Invalidate Session.
Vikas Arora - fb.com/vicky.arora.756412 RMAR Technologies Pvt. Ltd: (www.rmar.in): Reflected XSS.
Vikash Chaudhary - URL: www.hackersera.in- Reported XSS vulnerabilities.
Vikas ShivChandra Yadav - Twitter: @iamvikasyadav: Reported clickjacking vulnerabilities.
Vikas Srivastava, India - linkedin.com/in/007vikaxh - twitter.com/007vikaxh - Reported Information Disclosure / Reported User Enumeration / Reported HTTP header and Broken Access Control and text Injection/context spoofing vulnerabilities.
Vinayak Chaturvedi - linkedin.com/in/vinayak-chaturvedi-348b071a1 - Reported Clickjacking.
Vindhyachala: CSS.
Vineet Kumar - https://bughunter.withgoogle.com/profile/80ae25f5-877d-4402-94e8-7902cacdb4b9 - Reported incorrect DNS entries.
Vinesh N. Redkar - @b0rn2pwn AVsecurity.in: Open Redirect, Click Jacking.
Vinit Lakra - linkedin.com/in/vinithacker - Reported several HTTP header, Broken Access Control, Broken Authentication vulnerabilities / Reported Clickjacking, Reported Open Redirect, Reported Broken Access Control / Reported HTTP header / Reported Missing rate limit/ Reported several Clickjacking, Reported Information Disclosure / Reported HTML/CSS injection vulnerabilities and Cross-site scripting (XSS) / Reportet Default login vulnerabilities.
Vinod Kumar Deekonda - Reported Information Disclosure.
Vinod Tiwari - @war_crack: Reported clickjacking vulnerability.
Vinod Tiwari & Sumit Shinde: Reported ClickJacking and CSRF vulnerabilities.
Vinod Tiwari & Himanshu Thakur: Reported XSS vulnerabilities.
v1nzen - https://twitter.com/2021_neo - Reported Path traversal, Reported Broken Access Control.
Virang (imwaiting18) - linkedin.com/in/rajyaguruvirang - Reported Information Disclosure.
Vishal Barot https://twitter.com/vflexo - Reported Cross-site scripting (XSS).
Vishnu Raghav - https://www.linkedin.com/in/vishnu-raghav-783162171 - Reported Open Redirect.
Vismit Sudhir Rakhecha - twitter.com/th3_druk - Reported Cross-site request forgery (CSRF).

W

Wai Yan Aung – @waiyanaun9: Reported IP-address disclosure
Wan Ikram (@rinakikun): Content Spoofing & URL Redirection.
Wang Jing - http://tetraph.com/wangjing/ - @justqdjing: Reported open redirect vulnerabilities.
Waqeeh Ul Hasan - Twitter: @dowaqeeh: xss vulnerabilities.
Wasi Qazi: Reported XSS vulnerability.
Web Security Geeks, Narendra Bhati (R00t Sh3ll) - @NarendraBhatiB: Reported directory listing vulnerability.
Wen Bin Kong - @kongwenbin / https://www.linkedin.com/in/kongwenbin - Reported XSS vulnerabilities.
Wesley Santos - https://www.linkedin.com/in/wesley-santos-34984815b/ - Reported Server-side request forgery (SSRF).
Whitesector from Serbia - URL: https://whitesector.wordpress.com, Twitter: https://twitter.com/DistrictWhit3 - Reported an open redirect vulnerability.
WSecure - We Secure IT - http://www.wsecure.de - Reported> XSS/MiTM/HSTS/CSP
wtm - http://offensi.com - Reported directory listing / information disclosure vulnerabilities.
WuXie - https://x.com/wuxie_sec - Reported Default login.

X

Xalgord - https://www.linkedin.com/in/xalgord/, https://github.com/xalgord - Reported Cross-site scripting (XSS).

Y

YAHYA JABER ALABDALI - https://www.linkedin.com/mwlite/in/yahya-alabdli - Reported Cross-site scripting (XSS).
Yakup Sait B. and Ekin Yazıcı - https://twitter.com/YakupSaitByk, https://twitter.com/yzcekin - Reported Missing rate limit.
Yanuar Yusuf, - https://www.linkedin.com/in/yanuar-yusuf/
Yaranis Fonseca - @GordonShomway01: Reported XSS vulnerabilities.
Yash kushwah - (@cyberyash951) Linkdin: https://www.linkedin.com/mwlite/in/yash-kushwah-a80449229 - Reported Information Disclosure and User Enumeration..
Yash Pandya - www.facebook.com/yash.hacking: Reported XSS vulnerabilities and Information Disclosure.
Yasir Altaf Zargar Website - www.cybercoderss.blogspot.com: Reported XSS vulnerabilities.
Yasser Eltaweel - https://x.com/Badyasseer - Reported Visible Detailed Error/Debug Page.
Yasser Ezzat - https://twitter.com/yassergersy - Reported Information Disclosure, HTTP header.
Yasser Janah https://www.linkedin.com/in/yasserjanah/- Reported Remote Code Execution (RCE).
Yebo Cao - https://www.linkedin.com/in/yebocao/ - Reported several Information Disclosure.
Yogeesh Seralathan - @y0g1337h: Reported XSS vulnerabilities.
Yogesh Modi - facebook.com/mistercracker: CSRF.
Yousef Mohamed - linkedin.com/in/yousef-mohamed-124484203 - Reported Default login and Cross-site scripting (XSS) vulnerabilities, Security misconfiguration.
Youssef ABYAA - https://twitter.com/josef0x - Reported Open Redirect vulnerabilities.
Youssef Ahmed (yghonem) - https://www.facebook.com/yghonem14 - Reported Missing rate limit vulnerabilities.
Youssef A. Mohamed - generaleg0x01.com - Reported Arbitrary File Upload.
Yousef Mohamed - linkedin.com/in/yousef-mohamed15 - Reported several Broken Authentication, Server Security Misconfiguration > Using Default Credentials, Authentication bypass
Y. Srikanth - entersoft.co.in: Reflected XSS.
Yuji Kosuga - @yujikosuga: Reported XSS vulnerability.
Yukesh Kumar [ 3th1c_yuk1 ] - Reported Information Disclosure /
Yunus AYDIN https://twitter.com/aydinnyunuss - Reported Information Disclosure / Reported SQL Injection / Reported Possible DoS Attack.
Yunus YILMAZ - https://twitter.com/ynsy34 - Reported XSS (Reflected) vulnerabilities / Reported Open Redirect / Reported Security misconfiguration.
Yusuf Abdulmalik Adeolu - Twitter: https://x.com/cybersage112?s=21 - Information Disclosure.

Z

Zachary S. Stashis @Nu11ifidian https://redseersecurity.com/ https://www.linkedin.com/in/zacharysstashis/ - Reported several Information Disclosure and several Open Redirect vulnerabilities / Reported HTTP header vulnerabilities / Reported Broken Access Control.
Zain Iqbal - https://www.linkedin.com/in/zain-iqbal-971b76254 - Reported Insecure Data Transport Link.
Zakaria Amous - https://www.linkedin.com/in/zamous - Reported XSS vulnerabilities.
Zax Asif - twitter.com/itsZ4X - Reported Information Disclosure.
Zaza Arjevanidze - https://github.com/Anhedoniczz - Reported Security misconfiguration.
Zehra Karabiber - https://twitter.com/ezehrakarabiber - Reported XSS Vulnerability.
Zeyad Azima https://www.linkedin.com/in/zeyad-abdelazim-1357911a7/ - Reported Cross-site request forgery (CSRF).
Zhenwarx - Twitter.com/ZhenwarX - Reported Information Disclosure; Open Redirect.
Zin Min Phyo - x.com/zin_min_phyo - Reported Remote Code Execution and Secret Disclosure / Reported Reflected DOM-based XSS / Reported Clickjacking/ Reported "Unauthenticated Access to Business Customer Support Data" / Reported "Error-Based SQL Injection"/ Reported "Open redirect on the logout flow of the application via a parameter", Reported "Unauthenticated PII Disclosure", Reported " Disclosure of Secrets for Publicly Accessible Asset".
Zoltan Panczel - https://twitter.com/SilentSignalHU - Reported XXE and File Inclusion vulnerabilities.
ZSEC Red Team - https://hackerone.com/zalogroup - Reported Server-side request forgery (SSRF).
Zythop - twitter.com/HaboubiAnis - Reported Path traversal.

0-9

13ph03nix - twitter.com/13ph03nix - WEB/LINKEDIN/TWITTER/FB - Reported Cross-site scripting (XSS).
19whoami19 - https://x.com/19whoami19 - Reported Information Disclosure.

Bug bounty

Information about our bug bounty program for security vulnerabilities.

Go to the bug bounty program