ycdxsb

[ycdxsb @ycdxsb]

@crispr_x @msftsecresponse 今年全是衣服，我一直以为会有个包😂

[ycdxsb @ycdxsb]

Congrats to all MVRs! 🥂

[Microsoft Security Response Center @msftsecresponse]

The Microsoft Researcher Recognition Program offers public thanks and recognition to security researchers who help protect our customers by discovering and sharing security vulnerabilities under Coordinated Vulnerability Disclosure.

Today, we are excited to recognize this year’s 100 Most Valuable Researchers (MVRs), based on the total number of points earned for each valid report. Please join us in celebrating this year’s MVRs, including our top 10:
1. 🥇 VictorV (@vv474172261)
2. 🥈 wkai
3. 🥉 Suresh Chelladurai
4. Anonymous
5. Adnan (@adnanthekhan)
6. Dhiral Patel (@dhiralpatel94)
7. Nan Wang (@eternalsakura13) and Ziling Chen
8. Anonymous
9. @0x140ce
10. Azure Yang (@4zure9)

See the full list of this year’s 100 MVRs, in addition to our Azure, Office, Windows, and Dynamics 365 leaderboards: https://t.co/8vhDhDpr3E

#bugbounty

[ycdxsb @ycdxsb]

Awesome! I'm going for it – aiming to be the first researcher in the MSRC Top 100 for 2025 with nothing but points.🤣 ps: eop in visual studio or visual studio code.

[ycdxsb @ycdxsb]

@pfiatde no

[ycdxsb @ycdxsb]

A perfect 1-click RCE. Don't open or clone any untrusted projects with VS. #visualstudio

[ycdxsb @ycdxsb]

@crispr56338851 Microsoft will not fix it because opening a Visual Studio project is an insecure operation.😂

[ycdxsb @ycdxsb]

@Vd6Gvq 可是0.7*12*18只有151.2万啊