Reports in rbkmoney program: S.No Title Bounty 1 Open Redirection on auth.rbk.money $0.0 2 Text manipulation in https://checkout.rbk.money $0.0 3 Information Disclosure - Composer.lock $0.0 4 IDOR in merchant.rbmonkey.com allows deleting eShops of another user $0.0 5 DOM-based Cross-Site Scripting in redirect url checkout $0.0 6 SUBDOMAIN TAKEOVER [http://dev.rbk.money/] $0.0 7 Apple Pay cryptogram replay and amount tampering $0.0