Unverified50% confidenceEventExact time
UP主曾在某SRC平台挖到一个任意用户登录漏洞，获得1000元的严重赏金
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/19/2026
First Seen
Valid until: 11/17/2026
Sources
Related Claims
UnverifiedMost domestic SRC platforms classify vulnerabilities into four levels—critical, high, medium, and low—and at certain leading internet companies, a single critical vulnerability can yield rewards of tens of thousands of yuan, while low-severity vulnerabilities may only receive point rewards of a few dozen to a few hundred yuan.66% similarUnverified漏洞赏金计划由HackerOne、Bugcrowd等平台承载，企业通过设置奖金激励白帽黑客挖掘漏洞61% similarUnverifiedUPnP has serious security vulnerabilities due to its lack of an authentication mechanism; malware can exploit UPnP to open ports without the user's knowledge.60% similarVerifiedSRC（安全应急响应中心）是企业设立的漏洞收集平台，企业付费购买未公开的安全漏洞，安全研究者发现并提交后审核通过可获得赏金59% similarUnverifiedIn historical reports on mainstream bug bounty platforms such as HackerOne and Bugcrowd, exposed configuration files and .git directories are among the most frequently rewarded high-value vulnerability types.57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/772569API
curl https://kongchang.com/api/v1/knowledge/claims/772569MCP
get_claim(id=772569)