Hacktivity
Every decision, on the record.
Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.
Disclosed
1
Paid in this view
$665k
Filtered by program:nimbus-mail ×
- lowPGN-10368
Bridge IMAP IDLE handler accepts unauthenticated NOOP that resets rate limiter
Accepted at Low with a demonstrated 10x increase in login attempts per minute against a researcher account.
Nimbus Mail@ptr_nullImproper Restriction of Excessive Authentication Attempts22 Sept 2026triage 4.3hresolved 2.9d$600Resolved
Hacktivity
Connecting- Bridge IMAP IDLE handler accepts unauthenticated NOOP that resets rate limiterlow$600