Browse / Bypasses / Other protections

Getting past other protections

Bypasses of checks that fit none of the groups above. 257 disclosed reports got past one; the 100 most upvoted are below.

1. Insufficient validation on Digits bridgeImproper Authentication - Generic · X / xAI
   263 votes
2. User with removed manage shops permissions is still able to make changes to a shop Improper Access Control - Generic · medium · Shopify
   145 votes
3. character limitation bypass can lead to DoS on Twitter App and 500 Internal Server ErrorUncontrolled Resource Consumption · medium · X / xAI
   141 votes
4. SMAP bypassImproper Access Control - Generic · medium · PlayStation
   110 votes
5. Banned user still able to invited to reports as a collabrator and reset the passwordImproper Access Control - Generic · medium · HackerOne
   107 votes
6. Safe Redirect Bypass Security Through Obscurity · low · X / xAI
   $56098 votes
7. Race Condition Enables Bypassing Verification CheckConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') · high · Tools for Humanity
   $3,00095 votes
8. Bypass of biometrics security functionality is possible in Android application (com.shopify.mobile)Improper Authentication - Generic · low · Shopify
   $50090 votes
9. A user can bypass approval step in Hacker Publishing feature, allowing them to publish reports immediatelyIncorrect Authorization · medium · HackerOne
   $2,50090 votes
10. Integrity checks according to policies can be circumvented in Node.js 20 and Node.js 18Insufficient Verification of Data Authenticity · medium · Internet Bug Bounty
    $1,27082 votes
11. TLS PSK/ALPN Callback Exceptions Bypass Error Handlers, Causing DoS and FD LeakUncontrolled Resource Consumption · medium · Node.js
    81 votes
12. Stored XSS on https://app.crowdsignal.com/surveys/[Survey-Id]/question - BypassCross-site Scripting (XSS) - Stored · high · Automattic
    78 votes
13. SSRF with bypass leads to client side hosting / vulnerabilities ( XSS and others )Server-Side Request Forgery (SSRF) · medium · DuckDuckGo
    $50077 votes
14. Employee-only Area BypassImproper Access Control - Generic · medium · LinkedIn
    77 votes
15. RCE, SQLi, IDOR, Auth Bypass and XSS at [staff.███.edu.eg ]Cross-site Scripting (XSS) - Generic · ██████
    72 votes
16. Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking linksSecurity Through Obscurity · medium · X / xAI
    $56070 votes
17. Bypass subscriptionBusiness Logic Errors · medium · Imgur
    67 votes
18. Race Condition in Folder Creation Allows Bypassing Folder LimitBusiness Logic Errors · medium · Dust
    65 votes
19. URL Scheme Validation Bypass in Shopify Mobile App Allows Javascript ExecutionForced Browsing · low · Shopify
    65 votes
20. Username Validation BypassImproper Authentication - Generic · medium · Revive Adserver
    64 votes
21. Approval app's file-freshness check can be bypassed by omitting the etag parameter, allowing approval of unreviewed file changesBusiness Logic Errors · medium · Nextcloud
    $15063 votes
22. Splatoon 3 In-Match Integrity Bypass via Consensus Reflection Attack on Unordered Peer SubmissionClient-Side Enforcement of Server-Side Security · high · Nintendo
    62 votes
23. Bypassing x profile verification to receive instant blue checkmark and unlimited profile changesBusiness Logic Errors · low · X / xAI
    $25060 votes
24. Insecure Direct Object Reference Protection bypass by changing HTTP method in IBM Your Learning endpoint. Insecure Direct Object Reference (IDOR) · critical · IBM
    57 votes
25. Bypassing Inbox Privacy Settings and Enabling Spam on Pixiv.netImproper Access Control - Generic · low · pixiv
    53 votes
26. Staff who only have apps and channels permission can do a takeover account at the wholesale store (Bypass get invitation link)Improper Access Control - Generic · medium · Shopify
    $1,60053 votes
27. Premium Email Address Check Bypass - HeyBusiness Logic Errors · medium · Basecamp
    53 votes
28. Password Strength Policy Bypass via Server-Side Validation FlawBusiness Logic Errors · low · Tucows (VDP)
    52 votes
29. Bypassing domain deny_list rule in Smokescreen via trailing dot leads to SSRFServer-Side Request Forgery (SSRF) · low · Stripe
    51 votes
30. CVE-2023-42663: Apache Airflow: Bypass permission verification to view task instances of other dagsImproper Access Control - Generic · low · Internet Bug Bounty
    $54050 votes
31. ASAR Integrity bypass via filetype confusionImproper Access Control - Generic · medium · Internet Bug Bounty
    $2,54049 votes
32. CVE-2024-2466: TLS certificate check bypass with mbedTLS (reward request)Improper Certificate Validation · medium · Internet Bug Bounty
    $2,58048 votes
33. Bypass restrict of member subscription to use custom background in https://3d.cs.money without prime subscriptionImproper Access Control - Generic · medium · CS Money
    48 votes
34. CSRF (protection bypassed) to force a below 18 user into viewing an nsfw subreddit !Cross-Site Request Forgery (CSRF) · medium · Reddit
    47 votes
35. Logout Bypass Vulnerability in Hiro.soInsufficient Session Expiration · medium · Hiro
    $15045 votes
36. Bypass t.co link shortener in Twitter direct messagesBusiness Logic Errors · low · X / xAI
    44 votes
37. Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` NamespaceCode Injection · AWS VDP
    43 votes
38. Bypass "Industry Documents" ValidationImproper Access Control - Generic · low · TikTok
    $5043 votes
39. Worker permission bypass via InternalWorker leak in diagnosticsImproper Access Control - Generic · high · Node.js
    42 votes
40. Unauthenticated SSRF via Public Reference API -Sharing Token BypassServer-Side Request Forgery (SSRF) · Nextcloud
    41 votes
41. 403 Forbidden Bypass at www.██████.milForced Browsing · medium · U.S. Dept Of Defense
    41 votes
42. SSRF - Image Sources in HTML Snippets - 727234 bypassServer-Side Request Forgery (SSRF) · Open-Xchange
    $40041 votes
43. Bypass User Interaction to initiate a VoIP call to Another UserPrivilege Escalation · low · VK.com
    $50041 votes
44. RBAC bypass on App log endpoints via `permissionRequired` typo — any authenticated user reads admin-only Enterprise App logsImproper Access Control - Generic · medium · Rocket.Chat
    40 votes
45. CSRF To Add New App In Developer Account And Bypassing Json FormatCross-Site Request Forgery (CSRF) · medium · TikTok
    $20039 votes
46. Race conditions can be used to bypass invitation limitImproper Access Control - Generic · Keybase
    39 votes
47. CVE-2024-2379: QUIC certificate check bypass with wolfSSLImproper Certificate Validation · low · Internet Bug Bounty
    $56037 votes
48. SSRF - URL Attachments - 725307 bypassServer-Side Request Forgery (SSRF) · Open-Xchange
    $40037 votes
49. (BYPASS) Open redirect and XSS in supporthiring.shopify.comCross-Site Request Forgery (CSRF) · Shopify
    37 votes
50. CVE-2024-8096: OCSP stapling bypass with GnuTLSImproper Certificate Validation · medium · curl
    36 votes
51. Unquoted body background attribute enables CSS injection that bypasses remote image blockingResource Injection · medium · Nextcloud
    35 votes
52. Uncatchable "Maximum call stack size exceeded" error on Node.js via async_hooks leads to process crashes bypassing error handlersImproper Handling of Exceptional Conditions · medium · Node.js
    35 votes
53. Verifying email bypassImproper Access Control - Generic · low · Stripe
    35 votes
54. Bypass the reverse proxy. Request adminImproper Restriction of Authentication Attempts · Mail.ru
    34 votes
55. "Bad Protocols Validation" Bypass in "wp_kses_bad_protocol_once" using HTML-encoding without trailing semicolonsCross-site Scripting (XSS) - Generic · medium · WordPress
    34 votes
56. CVE-2026-7009: OCSP stapling bypass with Apple SecTrustImproper Certificate Validation · medium · curl
    33 votes
57. Host header injection that bypassed protection and allowed accessing multiple subdomainsServer-Side Request Forgery (SSRF) · medium · Urban Company
    $50033 votes
58. A disabled account's API key still works on BMO's Mojolicious /rest/ routes, including for security-group bugs filed after the disableImproper Authentication - Generic · high · Mozilla
    $4,00032 votes
59. response manipulation leads to bypass in register at employee website than 0 click account takeoverImproper Authentication - Generic · critical · IBM
    32 votes
60. Bypass parsing of transaction data, users on the phishing site will transfer/approve ERC20 tokens without being alertedImproper Input Validation · low · MetaMask
    $1,00032 votes
61. MQTT CONNACK Packet Type Bypass leads to RCE via Malicious BrokerASI05: Unexpected Code Execution (RCE) · critical · curl
    31 votes
62. Subscription check bypass of NordVPN service Improper Authorization · Nord Security
    31 votes
63. SDC bypass on calendar.mail.ruAuthentication Bypass Using an Alternate Path or Channel · Mail.ru
    $1,50031 votes
64. Open redirect bypass & SSRF Security VulnerabilityServer-Side Request Forgery (SSRF) · Smule
    31 votes
65. SSH/SFTP connection reuse can bypass SSH key identity after ssh_config_matches removalAuthentication Bypass by Primary Weakness · high · curl
    30 votes
66. Passcode bypass on Talk Android appImproper Access Control - Generic · low · Nextcloud
    30 votes
67. TLS certificate hostname bypass when the IP is written fullwidth digitsImproper Certificate Validation · high · Node.js
    29 votes
68. Apache Airflow: Bypass permission verification to read code of other dagsImproper Access Control - Generic · low · Internet Bug Bounty
    $54029 votes
69. Permissions policies can be bypassed via Module._load and require.extensions (High) (CVE-2023-30587)Improper Access Control - Generic · high · Internet Bug Bounty
    $1,16529 votes
70. Registration bypass with leaked Invite TokenImproper Authentication - Generic · high · Rocket.Chat
    29 votes
71. Node.js: TLS session reuse can lead to hostname verification bypassMan-in-the-Middle · high · Node.js
    29 votes
72. UI Consent Bypass via Comma Injection in `addAutoApproveTarget` — User-Approval Dialog and Persistence Layer Disagree on Target Scope, Yielding AuthenLLM09:2025 Misinformation · PortSwigger Web Security
    28 votes
73. Existence of completed pods allows for bypass of Kubernetes NetworkPolicyImproper Access Control - Generic · medium · AWS VDP
    28 votes
74. curl leaks destination IP via glibc getaddrinfo() UDP connect, bypassing SOCKS5/TorInformation Disclosure · curl
    28 votes
75. CVE-2023-46218: cookie mixed case PSL bypassInformation Exposure Through Sent Data · medium · curl
    28 votes
76. Open redirect bypassOpen Redirect · low · Flickr
    $30028 votes
77. Local Privilege Escalation during execution of VeraCryptExpander.exe (UAC bypass)Privilege Escalation · medium · Internet Bug Bounty
    $1,25028 votes
78. ..; bypass leading to tomcat scripts [Unauthenticated]Improper Access Control - Generic · medium · Informatica
    27 votes
79. Restricted ZMQ RPC bypasses HTTP restricted-mode resource checksImproper Access Control - Generic · medium · Monero
    26 votes
80. SMIL values and by attributes bypass remote image blocking via unvalidated resource-loading animations, enabling email tracking without consentRemote File Inclusion · medium · Nextcloud
    26 votes
81. [api.krisp.ai] Race condition on /v2/seats endpoint allows bypassing the original seat limitTime-of-check Time-of-use (TOCTOU) Race Condition · low · Krisp
    26 votes
82. cross site scripting bypass session Cross-site Scripting (XSS) - Reflected · Mail.ru
    $1,00025 votes
83. Bypass _token in forms [Merchant.Kartpay.com ]Improper Authentication - Generic · Kartpay
    25 votes
84. TLS certificate hostname bypass when the host loosely resolves to an IP addressImproper Certificate Validation · high · Node.js
    24 votes
85. CVE-2024-0853: OCSP verification bypass with TLS session reuseImproper Authentication - Generic · low · Internet Bug Bounty
    24 votes
86. Monero IPv6 /128 tracking bypasses per-IP limit, enables remote OOMUncontrolled Resource Consumption · high · Monero
    23 votes
87. TOCTOU Race Condition in HTTP/2 Connection Reuse Leads to Certificate Validation BypassTime-of-check Time-of-use (TOCTOU) Race Condition · high · curl
    23 votes
88. CVE-2024-0853: OCSP verification bypass with TLS session reuseImproper Check for Certificate Revocation · low · curl
    23 votes
89. Improper handling of payment callback allows topping up a Swiss Starbucks Card bypassing actual payment via a crafted success messageBusiness Logic Errors · high · Starbucks
    23 votes
90. Able to bypass HSTS using trailing dotMissing Required Cryptographic Step · medium · curl
    22 votes
91. Card requirement bypass for business trialImproper Access Control - Generic · low · Krisp
    22 votes
92. Rounding errors on rewarding a bounty leads to bypassing the 20% H1 commission feeBusiness Logic Errors · low · HackerOne
    22 votes
93. bypass old password with array in /admin/account-user-email.phpArray Index Underflow · low · Revive Adserver
    22 votes
94. "Secure View" aka "Hide Download" can be bypassed easilyImproper Access Control - Generic · high · Nextcloud
    22 votes
95. Suspended users can bypass UGC upload banImproper Access Control - Generic · low · Valve
    $50022 votes
96. [spectacles.com] Bypassing quantity limit in ordersHTTP Request Smuggling · medium · Snapchat
    $25022 votes
97. Full Passcode bypass on Nextcloud App iOSImproper Access Control - Generic · low · Nextcloud
    21 votes
98. URL Spoof / Brave Shield BypassUse of Inherently Dangerous Function · high · Brave Software
    21 votes
99. Bypass global deny-lists by wrapping domains using "[]" in https://github.com/stripe/smokescreenImproper Input Validation · low · Stripe
    20 votes
100. Member still able close another user poll on communities topicImproper Authentication - Generic · VK.com
     20 votes