Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
2
Paid in this view
$665k
  • mediumPGN-10312· undisclosed

    Fleet console session fixation via pre-auth cookie

    Under remediation.

    Axiom Robotics@yara.vSession Fixation07 Nov 2026triage 43h
    —
    Triaged
  • mediumPGN-10318· undisclosed

    Mobile banking PIN retry counter resets on app reinstall

    Not disclosed. Private program.

    Tessera Bank@quietcoilImproper Restriction of Excessive Authentication Attempts06 Nov 2026triage 8.3h
    $5,000
    Triaged
Hacktivity
Connecting