3907

?/? [0x5] Smart contracts with over 70+ vulnerabilities

github.com/3907-bh/terminator

24/7 [0x4] Unauthenticated signing with operator keys

github.com/3907-bh/unlock-insecure-cosmos

24/7 [0x3] Use-after-free in friend request handling lets any Tox user crash qTox remotely

github.com/3907-bh/qrashTox

24/7 [0x2] Unauthenticated Firebase custom-token mint for arbitrary UID leading to cross-session read/write of PayPal's production checkout message bus

github.com/3907-bh/pffffummm

21/7 [0x1] Auth Bypass leading to data r/w and arbitrary file upload

github.com/3907-bh/NullCheck