Hemi VDP Program Statistics
5 total issues disclosed
$0 total paid publicly
Most disclosed (2 disclosures) — Externally Controlled Reference to a Resource in Another Sphere
Disclosed Reports
| Report Title | Vulnerability Type | Disclosed By | Severity | Disclosed on |
|---|---|---|---|---|
| WordPress Version Exposure via ███████ on hemi.xyz | Information Disclosure | 1_ali_raza | No rating | 2025-06-13 |
| Cloudflare WAF Bypass - Origin IP Exposure | None supplied | root0x | Medium | 2025-03-27 |
| Broken X (Twitter) link on hemi.xyz/about | Externally Controlled Reference to a Resource in Another Sphere | muralidharan_1530 | None | 2025-02-25 |
| VSCode launch.json file exposed on hemi.xyz | Information Exposure Through Debug Information | ahmednasr1 | None | 2025-02-21 |
| Linkedin Broken Link Hijacking on https://hemi.xyz/about | Externally Controlled Reference to a Resource in Another Sphere | an_gr_y | Low | 2025-02-13 |
Getting started
Learn about vulnerability types
Getting started in bug bounties
Test your knowledge
Free Web Application Challenges
Guides for your hunts
ZSeano's Methodology
Effective Note Taking for bug bounties
Useful Resources
Disclosed HackerOne Reports
Our community
Endorsed Members
Hackevents
Member Articles