๐Ÿค–robot.villas
PostsTagsStatsStatusAbout

ยฉ 2025 - 2026 Nat Welch. All rights reserved.

โ† All bots

GitHub Bug Bounty

@github_bug_bounty@robot.villas

Archived GitHub bug bounty disclosures and researcher acknowledgements, with feed entries through 2019.

Source: https://bounty.github.com/feed.atom

Homepage: https://bounty.github.com

Follow from your server

Enter the server your account is on. You'll finish following there.

or
Or search your app for@github_bug_bounty@robot.villas

Don't have an account? Find a server at joinmastodon.org

Posts
100
Followers
0
Following
0

Posts

  • XHR submitted forms bypass CSP form-action #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408368

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408368

    Don't have an account? Find a server at joinmastodon.org

    Jan 20, 2017

  • GitHub Enterprise SAML signature bypass #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408377

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408377

    Don't have an account? Find a server at joinmastodon.org

    Jan 18, 2017

  • GitHub Enterprise SAML signature bypass #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408388

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408388

    Don't have an account? Find a server at joinmastodon.org

    Jan 15, 2017

  • GitHub Enterprise SAML authentication bypass #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408397

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408397

    Don't have an account? Find a server at joinmastodon.org

    Jan 10, 2017

  • SQL Injection in GitHub Enterprise #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408408

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408408

    Don't have an account? Find a server at joinmastodon.org

    Dec 25, 2016

  • Denial of service in babeld #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408419

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408419

    Don't have an account? Find a server at joinmastodon.org

    Nov 13, 2016

  • Private Atom feed access token leak from Referer header #Security #BugBounty #Privacy

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408427

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408427

    Don't have an account? Find a server at joinmastodon.org

    Oct 5, 2016

  • Existence of private repositories revealed by duplicate response header #Security #BugBounty #Privacy

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408438

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408438

    Don't have an account? Find a server at joinmastodon.org

    Sep 30, 2016

  • Bypass organization paid plan billing validation #Security #BugBounty #GitHub

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408447

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408447

    Don't have an account? Find a server at joinmastodon.org

    Sep 26, 2016

  • Wiki content disclosure via forks #Security #OpenSource #BugBounty

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408457

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408457

    Don't have an account? Find a server at joinmastodon.org

    Sep 21, 2016

  • Email replies disclose "mute the thread" token #Security #BugBounty #Privacy

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408465

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408465

    Don't have an account? Find a server at joinmastodon.org

    Sep 14, 2016

  • Leaking secret Gist URLs to analytics provider #Security #BugBounty #GitHub

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408475

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408475

    Don't have an account? Find a server at joinmastodon.org

    Sep 8, 2016

  • Unauthorized branch access using fork collaboration #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408483

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408483

    Don't have an account? Find a server at joinmastodon.org

    Sep 7, 2016

  • Bypassing rate limits #Security #BugBounty #Hacking

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408494

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408494

    Don't have an account? Find a server at joinmastodon.org

    Aug 31, 2016

  • Joining the Developer Program without a paid plan #Security #BugBounty #GitHub

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408503

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408503

    Don't have an account? Find a server at joinmastodon.org

    Aug 12, 2016

  • Lack of rate limiting of current password check for password resets #Security #BugBounty #GitHub

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408519

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408519

    Don't have an account? Find a server at joinmastodon.org

    Aug 1, 2016

  • Internet Explorer OAuth code theft #Security #BugBounty #WebDev

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408508

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408508

    Don't have an account? Find a server at joinmastodon.org

    Aug 1, 2016

  • Hardcoded credentials in GitHub Enterprise #Security #BugBounty #GitHub

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408529

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408529

    Don't have an account? Find a server at joinmastodon.org

    Jul 31, 2016

  • Exposed SNMP service #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408547

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408547

    Don't have an account? Find a server at joinmastodon.org

    Jul 27, 2016

  • Password reset tokens leaking to third-parties #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408536

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408536

    Don't have an account? Find a server at joinmastodon.org

    Jul 27, 2016

  • Phishing vector on Markdown preview endpoint #Security #BugBounty #Phishing

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408566

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408566

    Don't have an account? Find a server at joinmastodon.org

    Jul 20, 2016

  • Gist archive download content spoofing #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408556

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408556

    Don't have an account? Find a server at joinmastodon.org

    Jul 20, 2016

  • Missing sudo authentication for managing organization membership #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408583

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408583

    Don't have an account? Find a server at joinmastodon.org

    Jul 5, 2016

  • Password reset emails delฤฑvered to wrong address #Security #BugBounty #Privacy

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408575

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408575

    Don't have an account? Find a server at joinmastodon.org

    Jul 5, 2016

  • Unrestricted registration to demonstration CI service #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408590

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408590

    Don't have an account? Find a server at joinmastodon.org

    Jun 27, 2016

  • Search API bypasses organization application policies #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408598

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408598

    Don't have an account? Find a server at joinmastodon.org

    Jun 13, 2016

  • XSS in flight-manual.atom.io #Security #BugBounty #XSS

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408605

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408605

    Don't have an account? Find a server at joinmastodon.org

    May 14, 2016

  • Internal infrastructure documentation exposure #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408610

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408610

    Don't have an account? Find a server at joinmastodon.org

    May 11, 2016

  • Organization creation self-XSS #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408616

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408616

    Don't have an account? Find a server at joinmastodon.org

    May 5, 2016

  • XSS in GitHub Desktop #Security #BugBounty #XSS

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408622

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408622

    Don't have an account? Find a server at joinmastodon.org

    Apr 7, 2016

  • RCE in GitHub Enterprise management interface #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408628

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408628

    Don't have an account? Find a server at joinmastodon.org

    Mar 31, 2016

  • Cross-site scripting in task lists #Security #BugBounty #XSS

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408645

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408645

    Don't have an account? Find a server at joinmastodon.org

    Mar 29, 2016

  • Cross-site scripting in Markdown API #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408636

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408636

    Don't have an account? Find a server at joinmastodon.org

    Mar 29, 2016

  • GitHub for Windows remote code execution #Security #BugBounty #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408662

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408662

    Don't have an account? Find a server at joinmastodon.org

    Mar 26, 2016

  • Credentials disclosed in source code #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408653

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408653

    Don't have an account? Find a server at joinmastodon.org

    Mar 26, 2016

  • Insufficient OAuth redirect URL validation #Security #BugBounty #OAuth

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408672

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408672

    Don't have an account? Find a server at joinmastodon.org

    Mar 23, 2016

  • Mercurial remote code execution in Importer #Security #Hacking #Vulnerability

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408681

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408681

    Don't have an account? Find a server at joinmastodon.org

    Mar 21, 2016

  • Insufficient authorization check when uploading OAuth application logo #Security #BugBounty #OpenSource

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408691

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408691

    Don't have an account? Find a server at joinmastodon.org

    Mar 12, 2016

  • Exposed debug information in GitHub Pages #Security #BugBounty #GitHub

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408701

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408701

    Don't have an account? Find a server at joinmastodon.org

    Mar 10, 2016

  • DOM-based XSS via GitHub API #Security #BugBounty #XSS

    Boost from your server

    Enter the server your account is on. The post opens there so you can boost it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408711

    Don't have an account? Find a server at joinmastodon.org

    Favorite from your server

    Enter the server your account is on. The post opens there so you can favorite it.

    or
    Or paste this post's address into your app's search:https://robot.villas/users/github_bug_bounty/posts/22408711

    Don't have an account? Find a server at joinmastodon.org

    Mar 5, 2016
ยซ NewerOlder ยป