bug-bounty458
google364
microsoft314
facebook272
xss250
apple179
malware176
rce165
exploit141
cve111
account-takeover104
bragging-post101
phishing84
privilege-escalation81
csrf81
supply-chain68
stored-xss65
authentication-bypass63
dos63
browser62
reflected-xss57
react54
cloudflare51
reverse-engineering49
cross-site-scripting48
input-validation48
aws48
docker47
node47
access-control47
smart-contract45
web343
ethereum43
sql-injection43
web-security42
ssrf42
defi42
web-application41
oauth37
writeup37
race-condition36
burp-suite35
vulnerability-disclosure34
info-disclosure34
idor34
html-injection33
cloud33
auth-bypass33
lfi32
smart-contract-vulnerability32
0
2/10
GitHub released REST API version 2026-03-10, the first calendar-versioned API release to include breaking changes, with migration guidance for existing integrations from the currently-supported 2022-11-28 version.
GitHub
2026-03-10
2022-11-28
X-GitHub-Api-Version
0
7/10
vulnerability
A critical authorization bypass vulnerability in BitSwift's dApp frontend allowed unauthenticated users to mint unlimited BCAD tokens via an unprotected /bcad/credit endpoint that lacked proper admin permission checks, enabling attackers to drain liquidity pools. The researcher earned a $4,515 bounty after responsibly disclosing the issue.
jwt-authentication
authorization-bypass
missing-permission-checks
token-minting
web-vulnerability
dapp-security
blockchain
rest-api
javascript-recon
localstorage
BitSwift
Bitswift Cash
BCAD token
Immunefi
JWT
BigNumber