I've come across an entire category of security vulnerabilities

There are a lot of sites affected. What bug bounty programs would you recommend? Or how do I disclose something when it's not just specific to a single piece of software or website? There are a lot of things that are vulnerable to this. I am being vague on purpose.

Is the vulnerability linked to a bug in the dubs checking algorithm?