That isn't quite fair to the OP. Wanting to make money for your efforts is not mutually exclusive to doing the right thing. That said, if you really want to do

That isn't quite fair to the OP. Wanting to make money for your efforts is not mutually exclusive to doing the right thing. That said, if you really want to do the right thing, you'd submit it to the companies running the bug bounties. They aren't going to pay you first just to hear what it is. That'd be blackmail. Either you trust the big companies to be fair and pay you, or you don't, but you should choose which.