ymsora's profile picture
Security researcher profile

ymsora

@ymsora
China Joined 17 days ago
Researcher metrics Updated daily
Reputation 120
points
Hacker power34
Hacker rate54
Research patterns

Top weaknesses

CWE-first trends, with CAPEC used when no CWE is assigned

CWE-862 · Missing Authorization
15
CWE-470 · Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
3
CWE-918 · Server-Side Request Forgery (SSRF)
3
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
2
CWE-94 · Improper Control of Generation of Code ('Code Injection')
2
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
1
Recognition vault

Achievements & Hall of Fame

2 unlocks
Supporter badge Oct 2026
Achievement unlocked Supporter

Awarded for giving back through a valid report to a program that does not offer a bounty.

Newcomer badge Oct 2026
Achievement unlocked Newcomer

Thank you for joining the Hackrate bug bounty community and beginning your ethical hacking journey.

Hackrate

Our platform helps companies to identify software vulnerabilities in a cost-efficient way. It provides a secure and centralized view of ethical hacking projects for your company.

US Patent Applied for HackGATE #63/645,845

Checking service status...
Company
Products
From the Blog
Hackrate is ISO 27001 certified

Hackrate Ethical Hacking Platform |
2026 ©

CVE Program Numbering Authority