Issues

• [0%] cto.onecode.de subdomain takeover.

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#49 · Filter by author github-actions opened on Oct 5, 2026

• [0%] Storage bucket-existence oracle via NoSuchBucket differential.

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#47 · Filter by author github-actions opened on Oct 5, 2026

• [0%] Pre-auth verification-type enumeration on /verify discloses which OTP channels the proje

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#46 · Filter by author github-actions opened on Oct 5, 2026

• [0%] GoTrue credentialed CORS reflection is unconditional on /verify and survives both respon

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#45 · Filter by author github-actions opened on Oct 5, 2026

• [40%] /api/broadcast realtime channel auth (MISCONFIG,

  ai-hypothesisbug-bountyconfidence-40model-bigpickleonecodepending
  riteshekbote/onecode-hunt#13 · Filter by author github-actions opened on Sep 4, 2026

• [42%] Recovery/invite magic-link token leakage via URL fragment (OATH,

  ai-hypothesisbug-bountyconfidence-40model-bigpickleonecodepending
  riteshekbote/onecode-hunt#12 · Filter by author github-actions opened on Sep 4, 2026

• [0%] www.onecode.de Webflow — low, skip or config.

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#9 · Filter by author github-actions opened on Sep 4, 2026

• [0%] Recovery/invite magic-link token-in-URL-hash leakage (OATH/TOKEN, minor)

  ai-hypothesisbug-bountyconfidence-0model-bigpickleonecodepending
  riteshekbote/onecode-hunt#8 · Filter by author github-actions opened on Sep 4, 2026

• [100%] No repo audit candidates

  ai-hypothesisbug-bountyconfidence-100high-confidencemodel-bigpickleonecodepending
  riteshekbote/onecode-hunt#6 · Filter by author github-actions opened on Sep 3, 2026

• [40%] Railway app API discovery:

  ai-hypothesisbug-bountyconfidence-40model-bigpickleonecodepending
  riteshekbote/onecode-hunt#2 · Filter by author github-actions opened on Sep 3, 2026