Reports in hostinger program: S.No Title Bounty 1 GCM sender key leak $0.0 2 Implement rate limit on internal password checks $0.0 3 IDOR at https://cpanel.hostinger.com/billing/change-order-period $0.0 4 http://cpanel.hostinger.com/demo exposes Notifications and PII info $0.0 5 subdomain takeover at status.hosting24.com $0.0 6 Able to take over .zyrosite.com subdomains via /v3/publish/connect-domain-hostinger API endpoint $0.0