Peregrine
Start hunting
Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
1
Paid in this view
$665k
Severityallcriticalhighmediumlow
Stateallresolvedtriagednewduplicateinformative
Filtered by program:orbitstack ×
  • lowPGN-10392

    Control-plane gRPC gateway reflects internal service address in error on malformed metadata

    Paid at Low because the address was reachable from the gateway in a follow-up probe; otherwise it would have been informative.

    Orbitstack@vesper.shExposure of Sensitive Information30 Sept 2026triage 6.5hresolved 2.6d
    $1,200
    Resolved
Hacktivity
Connecting
  • Bounty paidOrbitstack@vesper.sh
    Control-plane gRPC gateway reflects internal service address in error on malformed metadata
    low
    $1,200
All disclosed reports →