# huntr.com

> AI-optimized mirror of huntr.com containing 50 pages totalling 9,420 words of clean markdown content, structured data, and semantic HTML. Original source: https://huntr.com/. Last updated: 2026-06-12T13:10:53.299Z.

Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG).

## Homepage

- [Hack the AI.  Secure the Bag.](/content/site-root.html): The world's first bug bounty platform for AI/ML (236 words)

## Articles & Blog Posts

- [Arbitrary file reading via SQL Injection in [intel/neural-compressor](https://github.com/intel/neural-compressor)](/content/bounties/300bffa9-b240-4201-a1d9-e3ec8d802e4a/index.html): The world's first bug bounty platform for AI/ML (607 words)
- [New challenge worth $15,000](/content/users/hertschuh/index.html): The world's first bug bounty platform for AI/ML (154 words)
- [Arbitrary Code Execution on torch.load() Through Pickle Deserialization in pytorch_v1_3](/content/bounties/84d6dc11-23aa-499a-9a62-45596a4d7ef5/index.html): The world's first bug bounty platform for AI/ML (194 words)
- [Arbitrary Code Execution on Inference Through Keras Lambda Layers in hdf5](/content/bounties/dd2c4524-cd87-4856-8ab9-2a32851e02ae/index.html): The world's first bug bounty platform for AI/ML (254 words)
- [Denial of Service (DoS) via Large Character Payload in API Requests in [tensorflow/serving](https://github.com/tensorflow/serving)](/content/bounties/21653366-4497-4bd9-9510-1770a86f8af2/index.html): The world's first bug bounty platform for AI/ML (134 words)
- [User's session persist after permanently deleting his account in [glpi-project/glpi](https://github.com/glpi-project/glpi)](/content/bounties/62096b15-2b7b-4de3-96d1-32754c5f9d44/index.html): The world's first bug bounty platform for AI/ML (244 words)
- [repos/prefecthq/prefect/index.html](/content/repos/prefecthq/prefect/index.html) (1 words)
- [Unsafe cloudpickle deserialization in Prefect task runners and bundle deserialization in [prefecthq/prefect](https://github.com/prefecthq/prefect)](/content/bounties/124658f5-5643-40e4-a411-fa2886770f87/index.html): The world's first bug bounty platform for AI/ML (323 words)
- [repos/vllm-project/vllm/index.html](/content/repos/vllm-project/vllm/index.html) (1 words)
- [participation-terms/index.html](/content/participation-terms/index.html) (1 words)
- [guidelines/index.html](/content/guidelines/index.html) (1 words)
- [get-started/intro/index.html](/content/get-started/intro/index.html) (1 words)
- [New challenge worth $15,000](/content/users/iamveene/index.html): The world's first bug bounty platform for AI/ML (16 words)
- [New challenge worth $15,000](/content/users/abdallaabdalrhman/index.html): The world's first bug bounty platform for AI/ML (16 words)
- [model.weights.h5: h5py.ExternalLink at Group level silently followed during load_model(), bypassing CVE-2025-9905 fix — information disclosure from arbitrary HDF5 files in [keras-team/keras](https://github.com/keras-team/keras)](/content/bounties/e08fc3b8-0eb6-4e4d-bf46-c12131a56a8d/index.html): The world's first bug bounty platform for AI/ML (265 words)
- [Model Format Vulnerability Formbeta](/content/bounties/disclose/models/index.html): The world's first bug bounty platform for AI/ML (810 words)
- [New challenge worth $15,000](/content/partners/index.html): The world's first bug bounty platform for AI/ML (178 words)
- [New challenge worth $15,000](/content/users/etwithin/index.html): The world's first bug bounty platform for AI/ML (16 words)
- [New challenge worth $15,000](/content/users/skillwager/index.html): The world's first bug bounty platform for AI/ML (16 words)
- [New challenge worth $15,000](/content/users/lemonkiil/index.html): The world's first bug bounty platform for AI/ML (47 words)
- [New challenge worth $15,000](/content/users/seifallahhomrani1/index.html): The world's first bug bounty platform for AI/ML (57 words)
- [New challenge worth $15,000](/content/challenges/1lpl6zjqaperqkefciog4g/v1/leaderboard/index.html): The world's first bug bounty platform for AI/ML (32 words)
- [Huntr Community Code of Conduct](/content/code-of-conduct/index.html): Read our Privacy Policy and understand what we do with your data. (558 words)
- [New challenge worth $15,000](/content/users/seory0/index.html): The world's first bug bounty platform for AI/ML (42 words)
- [New Challenge Worth $15,000](/content/users/kimkou2024/index.html): The world's first bug bounty platform for AI/ML (44 words)
- [New challenge worth $15,000](/content/users/happyhacking-k/index.html): The world's first bug bounty platform for AI/ML (16 words)
- [Leaderboard](/content/leaderboard/index.html): Mirror mirror on the wall who's the best hacker of them all (8 words)
- [New challenge worth $15,000](/content/faq/index.html): The world's first bug bounty platform for AI/ML (122 words)
- [discord/index.html](/content/discord/index.html) (1 words)
- [Get in the Game](/content/challenges/index.html): The world's first bug bounty platform for AI/ML (37 words)
- [New challenge worth $15,000](/content/contact-us/index.html): The world's first bug bounty platform for AI/ML (10 words)
- [repos/keras-team/keras/index.html](/content/repos/keras-team/keras/index.html) (1 words)
- [bounties/a07e3983-7158-4419-af2b-38f1dea01a4f/index.html](/content/bounties/a07e3983-7158-4419-af2b-38f1dea01a4f/index.html) (1 words)
- [repos/netease-youdao/qanything/index.html](/content/repos/netease-youdao/qanything/index.html) (1 words)
- [repos/infiniflow/ragflow/index.html](/content/repos/infiniflow/ragflow/index.html) (1 words)
- [bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0/index.html](/content/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0/index.html) (1 words)
- [Command Injection via Malicious Model Artifacts in [mlflow/mlflow](https://github.com/mlflow/mlflow)](/content/bounties/dc9c1c20-7879-4050-87df-4d095fe5ca75/index.html): The world's first bug bounty platform for AI/ML (542 words)
- [Hacktivity](/content/bounties/hacktivity/index.html): The world's first bug bounty platform for AI/ML (977 words)
- [RAGFlow: Unsafe pickle.loads() in deserialize_b64() Disabled by Default Safety Mechanism in [infiniflow/ragflow](https://github.com/infiniflow/ragflow)](/content/bounties/c811f658-2204-4cb5-b9a6-aa72b76fcc90/index.html): The world's first bug bounty platform for AI/ML (271 words)
- [Programs](/content/bounties/index.html): The world's first bug bounty platform for AI/ML (62 words)
- [New challenge worth $15,000](/content/challenges/1lpl6zjqaperqkefciog4g/v1/rules/index.html): The world's first bug bounty platform for AI/ML (861 words)
- [Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in [vllm-project/vllm](https://github.com/vllm-project/vllm)](/content/bounties/7bd92629-b396-4449-8f88-6c0092530eb4/index.html): The world's first bug bounty platform for AI/ML (1,062 words)
- [Critical Remote Code Execution via Insecure Pickle Deserialization in HuggingFace Transformers in [huggingface/transformers](https://github.com/huggingface/transformers)](/content/bounties/9ef47e5e-8688-4514-93dc-92509cd13acf/index.html): The world's first bug bounty platform for AI/ML (424 words)
- [Incomplete Fix for CVE-2024-39705 — Multiple Unsafe Pickle Loading Paths Remain in NLTK in [nltk/nltk](https://github.com/nltk/nltk)](/content/bounties/86d048f6-ad2e-43a3-831e-c1867958391a/index.html): The world's first bug bounty platform for AI/ML (315 words)
- [Blind SSRF on the RSS Feed in [glpi-project/glpi](https://github.com/glpi-project/glpi)](/content/bounties/a0788aa8-212f-4624-9086-8b7f391dddac/index.html): The world's first bug bounty platform for AI/ML (127 words)
- [RAGFlow RPC Server RCE in [infiniflow/ragflow](https://github.com/infiniflow/ragflow)](/content/bounties/0609e22a-be9b-4fa2-afbe-a15b6ed44003/index.html): The world's first bug bounty platform for AI/ML (240 words)
- [New challenge worth $15,000](/content/challenges/1lpl6zjqaperqkefciog4g/v1/chat/index.html): The world's first bug bounty platform for AI/ML (40 words)
- [This report is not public](/content/bounties/0b8c9e2a-1f7d-4e35-8f25-6f2a00f4d205/index.html): The world's first bug bounty platform for AI/ML (26 words)
- [This report is not public](/content/bounties/0a6e0f85-2d1a-4d1b-9c2b-7d3e6e7d3b3c/index.html): The world's first bug bounty platform for AI/ML (26 words)

## Resources

- [Full Page Index](/index.html): Browse all cached pages with rich metadata
- [About This Cache](/content/about.html): Methodology, technical details, and usage guidelines
- [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery
- [Robots.txt](/robots.txt): Crawler directives