>_
IBB Observer
HackerOne Internet Bug Bounty
last collected: 2026-05-02T05:00:00Z
Response Efficiency
76 %
ok
Program Statistics
$750–1,000
Avg Bounty
$4,000–25,000
Top Bounty
$1,545,913
Total Paid
1,057
Resolved
56
Last 90d
Severity Rewards — Finder 80%
USD/KRW 1,473.12
Severity Raw USD Finder USD Finder KRW
critical $9,250 $7,400 ₩10,901,121
high $4,429 $3,543 ₩5,219,574
medium $1,843 $1,474 ₩2,171,974
low $597 $477 ₩703,564
Pending Reports
7 Total Reports
$14,456 Est. Total
₩21,295,488 Est. KRW
No reports pending triage
Report Severity Est. Bounty Triaged Waiting
#3178556 CVE-2025-48432: Potential log injection via unescaped request path medium $1,474 2026-01-29 92d
#3178568 ReDoS Vulnerability in `Rack::Multipart` Module's `handle_mime_head` Method high $3,543 2026-01-29 92d
#3418199 DoS vulnerability in Django redirect functions on Windows via Unicode characters leads to server unresponsiveness medium $1,474 2026-01-29 92d
#3451094 CVE-2025-64460: Potential denial-of-service vulnerability in XML serializer text extraction medium $1,474 2026-01-29 92d
#3537673 CVE-2026-1285: Potential denial-of-service vulnerability in `django.utils.text.Truncator` HTML methods medium $1,474 2026-02-09 81d
#3574783 CVE-2024-56373: Apache Airflow SSTI to Code Execution in Airflow through Shared DB Information high $3,543 2026-03-10 52d
#3582926 CVE-2026-25673: Potential denial-of-service vulnerability in `URLField` via Unicode normalization on Windows medium $1,474 2026-03-10 52d
Efficiency Trend
|
Bounty Trend
|