07 // acknowledgements
Hall of Fame
Reports the vendors have publicly acknowledged. Reference numbers and status follow the vendor advisory, not our wording.
reports 6
bounty earned $17,337
CVEs 5
vendors 5
status resolved · 1 accepted · 5 6 reports
class Account Takeover · 1 Command Injection · 1 Path Traversal · 1 SSRF · 1
Bugcrowd · 1 reports
Bugcrowd
programs · multiple
Command injection, SSRF and more — cumulative bounty milestone
class: Command InjectionSSRF
reward: $16,000
status: accepted
Google · 1 reports
Google
VRP
Path Traversal
class: Path Traversal
reward: $1,337
status: accepted
Kakao · 2 reports
Kakao
KV-2026-230
Validated and accepted report
reward: none
status: accepted
Kakao
KV-2026-278
Validated and accepted report
reward: none
status: accepted
FindTheGap · 1 reports
FindTheGap
disclosure
Account Takeover (ATO)
class: Account Takeover
reward: none
status: resolved
Reports still awaiting a patch are not listed here. They are added once the vendor goes public.