HexBrain
Sign in

Browse 15,244 disclosed bug bounty reports

By vulnerability class and weakness, or by the program they were reported to. Stuck behind a filter or a fix? See the bypass library, the payloads and the CVE library.

15,244disclosed reports
18vulnerability classes
215weaknesses
428programs

Vulnerability classes

Weaknesses in each class

Cross-site Scripting 2,587 reports

  • Cross-site Scripting (XSS) - Generic 1,048
  • Cross-site Scripting (XSS) - Reflected 674
  • Cross-site Scripting (XSS) - Stored 663
  • Cross-site Scripting (XSS) - DOM 182
  • Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) 17
  • Cross-Site Scripting (XSS) 2
  • Reflected XSS 1

Cross-Site Request Forgery 530 reports

  • Cross-Site Request Forgery (CSRF) 530

Server-Side Request Forgery 329 reports

  • Server-Side Request Forgery (SSRF) 329

SQL Injection 332 reports

  • SQL Injection 330
  • Blind SQL Injection 1
  • NoSQL Injection 1

Insecure Direct Object Reference 373 reports

  • Insecure Direct Object Reference (IDOR) 373

Code Execution 831 reports

  • Code Injection 430
  • Command Injection - Generic 234
  • OS Command Injection 68
  • Deserialization of Untrusted Data 54
  • Remote File Inclusion 18
  • Unrestricted Upload of File with Dangerous Type 13
  • Malware 4
  • Exposed Dangerous Method or Function 3
  • Use of Inherently Dangerous Function 3
  • Inclusion of Functionality from Untrusted Control Sphere 3
  • Download of Code Without Integrity Check 1

Path Traversal 296 reports

  • Path Traversal 264
  • Externally Controlled Reference to a Resource in Another Sphere 13
  • Path Traversal: '.../...//' 6
  • External Control of File Name or Path 5
  • Relative Path Traversal 3
  • Uncontrolled Search Path Element 1
  • Improper Link Resolution Before File Access ('Link Following') 1
  • Untrusted Search Path 1
  • PHP Local File Inclusion 1
  • Path Traversal: 'dir\..\..\filename' 1

Authentication 1,365 reports

  • Improper Authentication - Generic 955
  • Improper Restriction of Authentication Attempts 159
  • Insufficiently Protected Credentials 43
  • Insufficient Session Expiration 43
  • Authentication Bypass Using an Alternate Path or Channel 28
  • Authentication Bypass by Primary Weakness 19
  • Session Fixation 15
  • Use of Hard-coded Credentials 13
  • Weak Password Recovery Mechanism for Forgotten Password 11
  • Plaintext Storage of a Password 11
  • Weak Cryptography for Passwords 11
  • Password in Configuration File 9
  • Missing Authentication for Critical Function 8
  • Reliance on Cookies without Validation and Integrity Checking in a Security Decision 8
  • Authentication Bypass 6
  • Unverified Password Change 5
  • Storing Passwords in a Recoverable Format 4
  • Missing Critical Step in Authentication 3
  • Use of Hard-coded Password 3
  • Use of Default Credentials 2
  • Key Exchange without Entity Authentication 2
  • Authentication Bypass by Spoofing 2
  • Brute Force 2
  • Weak Password Requirements 1
  • Authentication Bypass by Capture-replay 1
  • Unprotected Transport of Credentials 1

Access Control 1,494 reports

  • Improper Access Control - Generic 888
  • Privilege Escalation 464
  • Improper Authorization 55
  • Client-Side Enforcement of Server-Side Security 20
  • Forced Browsing 14
  • Incorrect Authorization 13
  • Reliance on Untrusted Inputs in a Security Decision 8
  • Improper Privilege Management 7
  • Missing Authorization 7
  • Improper Handling of Insufficient Permissions or Privileges 4
  • Incorrect Permission Assignment for Critical Resource 3
  • Execution with Unnecessary Privileges 3
  • Improper Export of Android Application Components 2
  • Incorrect Privilege Assignment 2
  • Incorrect Default Permissions 2
  • Access Control Check Implemented After Asset is Accessed 1
  • Improper Preservation of Permissions 1

Information Disclosure 1,996 reports

  • Information Disclosure 1,552
  • Privacy Violation 83
  • Cleartext Storage of Sensitive Information 74
  • Insecure Storage of Sensitive Information 55
  • Cleartext Transmission of Sensitive Information 45
  • Information Exposure Through an Error Message 41
  • Information Exposure Through Directory Listing 36
  • Information Exposure Through Debug Information 35
  • Information Exposure Through Sent Data 30
  • File and Directory Information Exposure 11
  • Missing Encryption of Sensitive Data 10
  • Exposure of Data Element to Wrong Session 6
  • LLM06: Sensitive Information Disclosure 5
  • Information Exposure Through Timing Discrepancy 3
  • Leftover Debug Code (Backdoor) 3
  • Exposure of Sensitive Information Due to Incompatible Policies 2
  • Use of Cache Containing Sensitive Information 1
  • Inclusion of Sensitive Information in an Include File 1
  • Cleartext Storage in a File or on Disk 1
  • Insertion of Sensitive Information into Log File 1
  • Improper Removal of Sensitive Information Before Storage or Transfer 1

Open Redirect 357 reports

  • Open Redirect 357

Business Logic 488 reports

  • Business Logic Errors 415
  • Time-of-check Time-of-use (TOCTOU) Race Condition 25
  • Modification of Assumed-Immutable Data (MAID) 19
  • Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 18
  • Expected Behavior Violation 4
  • External Control of Critical State Data 3
  • Incorrect Comparison 2
  • Leveraging Race Conditions 1
  • Partial String Comparison 1

Memory Corruption 917 reports

  • Memory Corruption - Generic 395
  • Use After Free 90
  • Buffer Over-read 67
  • Classic Buffer Overflow 59
  • Heap Overflow 55
  • Out-of-bounds Read 49
  • NULL Pointer Dereference 42
  • Stack Overflow 35
  • Integer Overflow 28
  • Double Free 17
  • Array Index Underflow 16
  • Improper Null Termination 11
  • Type Confusion 9
  • Incorrect Calculation of Buffer Size 8
  • Use of Externally-Controlled Format String 8
  • Buffer Underflow 7
  • Off-by-one Error 6
  • Integer Underflow 5
  • Buffer Under-read 4
  • Write-what-where Condition 3
  • Free of Memory not on the Heap 1
  • Integer Overflow to Buffer Overflow 1
  • Missing Release of Memory after Effective Lifetime 1

Denial of Service 636 reports

  • Uncontrolled Resource Consumption 582
  • Allocation of Resources Without Limits or Throttling 28
  • Denial of Service 19
  • XML Entity Expansion 3
  • Uncontrolled Recursion 2
  • Loop with Unreachable Exit Condition ('Infinite Loop') 1
  • LLM04: Model Denial of Service 1

Injection and Smuggling 389 reports

  • CRLF Injection 109
  • Improper Input Validation 76
  • HTTP Request Smuggling 72
  • XML External Entities (XXE) 43
  • Resource Injection 35
  • HTTP Response Splitting 20
  • Improper Handling of URL Encoding (Hex Encoding) 5
  • LDAP Injection 5
  • Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) 4
  • Improper Neutralization of HTTP Headers for Scripting Syntax 4
  • Improper Neutralization of Escape, Meta, or Control Sequences 4
  • LLM01: Prompt Injection 3
  • XML Injection 3
  • Improper Neutralization of Value Delimiters 2
  • Improper Neutralization of Formula Elements in a CSV File 1
  • Improper Output Neutralization for Logs 1
  • Improper Neutralization of Whitespace 1
  • File Content Injection 1

Cryptography 405 reports

  • Cryptographic Issues - Generic 223
  • Improper Certificate Validation 69
  • Man-in-the-Middle 33
  • Use of a Broken or Risky Cryptographic Algorithm 14
  • Missing Required Cryptographic Step 11
  • Improper Validation of Certificate with Host Mismatch 8
  • Inadequate Encryption Strength 7
  • Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 6
  • Use of Hard-coded Cryptographic Key 5
  • Use of Insufficiently Random Values 5
  • Improper Check for Certificate Revocation 5
  • Reusing a Nonce, Key Pair in Encryption 4
  • Use of a Key Past its Expiration Date 4
  • Improper Verification of Cryptographic Signature 3
  • Reliance on Reverse DNS Resolution for a Security-Critical Action 2
  • Exploiting Incorrectly Configured SSL/TLS 2
  • Insufficient Verification of Data Authenticity 1
  • Reversible One-Way Hash 1
  • Improper Validation of Certificate Expiration 1
  • Improper Following of a Certificate's Chain of Trust 1

Misconfiguration 1,263 reports

  • Violation of Secure Design Principles 839
  • Misconfiguration 173
  • UI Redressing (Clickjacking) 151
  • Phishing 41
  • Insufficient Logging 24
  • Security Through Obscurity 7
  • Improper Check or Handling of Exceptional Conditions 6
  • User Interface (UI) Misrepresentation of Critical Information 6
  • Cache Poisoning 4
  • Insecure Temporary File 4
  • Acceptance of Extraneous Untrusted Data With Trusted Data 3
  • Using Components with Known Vulnerabilities 2
  • Origin Validation Error 1
  • Content Spoofing 1
  • Improper Handling of Exceptional Conditions 1

Other weaknesses 656 reports

  • Unclassified 630
  • Use of Incorrectly-Resolved Name or Reference 4
  • File Manipulation 1
  • Insecure Default Initialization of Resource 1
  • Improper Initialization 1
  • Reachable Assertion 1
  • Reusing Session IDs (aka Session Replay) 1
  • Unchecked Error Condition 1
  • Misinterpretation of Input 1
  • ASI05: Unexpected Code Execution (RCE) 1
  • LLM09:2025 Misinformation 1
  • Improper Resource Shutdown or Release 1
  • Improper Handling of Case Sensitivity 1
  • Improper Handling of Unexpected Data Type 1
  • Server Side Request Forgery 1
  • LLM05: Supply Chain Vulnerabilities 1
  • Improper Handling of Unicode Encoding 1
  • Improper Handling of Highly Compressed Data (Data Amplification) 1
  • Encoding Error 1
  • Embedded Malicious Code 1
  • Improper Validation of Syntactic Correctness of Input 1
  • Wrap-around Error 1
  • Inconsistency Between Implementation and Documented Design 1
  • Improper Synchronization 1

Programs