Azbuka Vkusa Bug Bounty Program Statistics | BugBountyHunter.com

**You are viewing our old website - new website soon...!**

We are getting close to releasing BugBountyHunter v2 which will introduce a brand new website, including member platforms, new features, challenges, guides, videos, and the long awaited zseano methodology v2. Right now, all of the content on this website is considered out-dated, however our members section continues to operate for members.

Stay tuned for updates coming soon!

Azbuka Vkusa Program Statistics

9 total issues disclosed

$4,150 total paid publicly

Most disclosed (2 disclosures) — Cross-site Scripting (XSS) - Reflected

Disclosed Reports

Report Title	Vulnerability Type	Disclosed By	Severity	Disclosed on
Unauthorized access to choice.av.ru control panel	Missing Authorization	takeyourheart	Medium	2021-12-19
Open redirect (DOM-based) on av.ru via "return_url" parameter (Login form)	Open Redirect	zophi	Medium	2021-12-19
Endpoint without access control leads to order informations and status changes	Information Disclosure	cabelo	Critical	2021-12-09
Reflected XSS in photogallery component on [https://market.av.ru]	Cross-site Scripting (XSS) - Reflected	haxta4ok00	Medium	2021-12-01
Reflected XSS on av.ru via `q` parameter at https://av.ru/collections/*	Cross-site Scripting (XSS) - Reflected	ronr	Medium	2021-11-19
Мисконфигурация Cisco Smart Install	Misconfiguration	kerbyj	Critical	2021-11-16
Corporate Jira credentials disclosed in public gist	Information Disclosure	mkhazov	High	2021-11-15
IDOR - Other user's delivery address disclosed	Insecure Direct Object Reference (IDOR)	sachin_kumar_	High	2021-11-15
Leak of Google Sheets API credentials	Cleartext Transmission of Sensitive Information	adsec2s	High	2021-11-15