2025
Reflected XSS at the České Budějovice Observatory
A reflected Cross-Site Scripting flaw in the search form of the České Budějovice Observatory websites, and what an attacker could quietly do with it.
won't fix
Livesport bug bounty – Directory traversal at lsid.eu
Directory Traversal vulnerability was identified and responsibly reported through Livesport’s official bug bounty program.
$500
Livesport - Vertical privilege escalation(s)
Business logic flaw that allowed manipulation with bonuses and competition results.
$200
