Peregrine
Start hunting
Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
2
Paid in this view
$665k
Severityallcriticalhighmediumlow
Stateallresolvedtriagednewduplicateinformative
Filtered by @ptr_null ×
  • criticalPGN-10433

    Electron renderer escapes sandbox through embed preview protocol handler

    A crafted embed URL reached a privileged protocol handler from the renderer. Proof launched the calculator on the researcher's own machine.

    Quillnote@ptr_nullImproper Control of Dynamically-Managed Code Resources13 Oct 2026triage 17hresolved 9.9d
    $28,000
    Resolved
  • lowPGN-10368

    Bridge IMAP IDLE handler accepts unauthenticated NOOP that resets rate limiter

    Accepted at Low with a demonstrated 10x increase in login attempts per minute against a researcher account.

    Nimbus Mail@ptr_nullImproper Restriction of Excessive Authentication Attempts22 Sept 2026triage 4.3hresolved 2.9d
    $600
    Resolved
Hacktivity
Connecting
  • Bounty paidQuillnote@ptr_null
    Electron renderer escapes sandbox through embed preview protocol handler
    critical
    $28k
  • Bounty paidNimbus Mail@ptr_null
    Bridge IMAP IDLE handler accepts unauthenticated NOOP that resets rate limiter
    low
    $600
All disclosed reports →