浏览报告
16 份报告 · 本页赏金 $500 · 清除筛选
RCE + PAT Exfiltration via pull_request_target in privacy-configuration/auto-respond-pr.yml — Direct Supply Chain to All DDG Browsers其他弱点DuckDuckGo高危—2026-06-11RCE + Supply Chain Attack via pull_request_target in content-scope-scripts/semver-label.yml — Affects All DuckDuckGo Browsers其他弱点DuckDuckGo高危—2026-06-11SSRF with bypass leads to client side hosting / vulnerabilities ( XSS and others )服务端请求伪造DuckDuckGo低危$5002026-09-17Reflected/Stored XSS on duckduckgo.com跨站脚本DuckDuckGo中危—2021-04-10com.duckduckgo.mobile.android - Cache corruption业务逻辑DuckDuckGo低危—2021-09-26DOM XSS on duckduckgo.com search跨站脚本DuckDuckGo低危—2020-08-20XSS on Videos IA跨站脚本DuckDuckGo低危—2020-07-31DOM XSS on duckduckgo.com search跨站脚本DuckDuckGo低危—2020-06-26DOM XSS on duckduckgo.com search其他弱点DuckDuckGo中危—2020-06-14Partial bypass of #483774 with Blind XXE on https://duckduckgo.com注入与走私DuckDuckGo中危—2019-02-25XXE on https://duckduckgo.com注入与走私DuckDuckGo高危—2019-01-31DOM XSS on 50x.html page on proxy.duckduckgo.com跨站脚本DuckDuckGo中危—2018-11-07DOM XSS on 50x.html page跨站脚本DuckDuckGo中危—2018-10-16SSRF on duckduckgo.com/iu/服务端请求伪造DuckDuckGo中危—2018-09-09SSRF vulnerability on proxy.duckduckgo.com (access to metadata server on AWS)其他弱点DuckDuckGo高危—2018-10-31SSRF in proxy.duckduckgo.com via the image_host parameter服务端请求伪造DuckDuckGo中危—2018-08-15