Delete anyone’s content spotlight remotely.
Snapchat disclosed a bug submitted by prickn9: https://hackerone.com/reports/1819832 - Bounty: $15000 [Source]
SQL Injection in CVE Discovery Search
HackerOne disclosed a bug submitted by rcoleman: https://hackerone.com/reports/1893800 [Source]
Extraction of Pages build scripts, config values, tokens, etc. via symlinks
Cloudflare Public Bug Bounty disclosed a bug submitted by mattipv4: https://hackerone.com/reports/1754811 - Bounty: $500 [Source]
Object injection in `stripe-billing-typographic` GitHub project via /auth/login
Stripe disclosed a bug submitted by phor3nsic: https://hackerone.com/reports/1183335 - Bounty: $100 [Source]