CVE Program partner

Hackrate

Hackrate Kft.

API
CVEs, 365 days88 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationHackrate Kft.
RoleCNA
TypeBug Bounty Provider
Reports toicscert → CISA
ScopeVulnerabilities that are discovered, validated, and coordinated through the Hackrate Ethical Hacking Platform, including: software, web applications, APIs, and cloud services; vulnerabilities validated and triaged by our internal security team; and findings disclosed under our coordination that are not in another CNA’s scope.
Advisorieshttps://www.hckrt.com/hacktivity

Latest CVEs · RSS

  • CVE-2026-105985 2026-10-06 · CVSS 8.7
    Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user w
  • CVE-2026-79987 2026-09-10 · CVSS 8.7
    A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.
  • CVE-2026-79991 2026-09-02 · CVSS 7.1
    Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments(),
  • CVE-2026-79990 2026-09-02 · CVSS 8.7
    Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments(),
  • CVE-2026-79989 2026-09-02 · CVSS 8.7
    The vulnerability allows any authenticated user to change their own password without providing the current password or having an active elevated session. It als
  • CVE-2026-79988 2026-08-27 · CVSS 8.7
    The Twig sandbox mechanism in Craft CMS is configured to allow dangerous functionality from the Yii framework, leading to authenticated RCE similar to previousl
  • CVE-2026-78416 2026-08-24 · CVSS 8.7
    Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in control panel e
  • CVE-2026-2345 2026-02-11 · CVSS 3.6
    Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('message', ...) handlers t

All CVE Program partners