Browse / Cryptography

Cryptography

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Cryptographic Issues - Generic223
• Improper Certificate Validation69
• Man-in-the-Middle33
• Use of a Broken or Risky Cryptographic Algorithm14
• Missing Required Cryptographic Step11
• Improper Validation of Certificate with Host Mismatch8
• Inadequate Encryption Strength7
• Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)6
• Use of Hard-coded Cryptographic Key5
• Use of Insufficiently Random Values5
• Improper Check for Certificate Revocation5
• Reusing a Nonce, Key Pair in Encryption4
• Use of a Key Past its Expiration Date4
• Improper Verification of Cryptographic Signature3
• Reliance on Reverse DNS Resolution for a Security-Critical Action2
• Exploiting Incorrectly Configured SSL/TLS2
• Insufficient Verification of Data Authenticity1
• Reversible One-Way Hash1
• Improper Validation of Certificate Expiration1
• Improper Following of a Certificate's Chain of Trust1

Most upvoted Cryptography reports

AllValidInformativeN/ADuplicate

1. Key Reinstallation Attacks: Breaking WPA2 by forcing nonce reuseReusing a Nonce, Key Pair in Encryption · medium · Internet Bug Bounty
   191 votes
2. Slack DTLS uses a private key that is in the public domain, which may lead to SRTP stream hijackUse of Hard-coded Cryptographic Key · high · Slack
   $2,000170 votes
3. Build fetches jars over HTTPMan-in-the-Middle · medium · PortSwigger Web Security
   $1,000135 votes
4. Account takeover due to misconfigurationUse of a Key Past its Expiration Date · low · Mattermost
   133 votes
5. [3DS][SSL] Improper certificate validation allows an attacker to perform MitM attacksImproper Certificate Validation · Nintendo
   129 votes
6. connect.8x8.com/api/v1: JWT Algorithm Confusion VulnerabilityImproper Verification of Cryptographic Signature · high · 8x8
   $1,337111 votes
7. elections.k8s.io uses weak session secret key, may place elections at riskCryptographic Issues - Generic · high · Kubernetes
   $25086 votes
8. Integrity checks according to policies can be circumvented in Node.js 20 and Node.js 18Insufficient Verification of Data Authenticity · medium · Internet Bug Bounty
   $1,27082 votes
9. Invite tokens have Insufficient entropy in GHES Management Console Use of Insufficiently Random Values · medium · GitHub
   81 votes
10. SMTP interaction theft via MITMCryptographic Issues - Generic · medium · PortSwigger Web Security
    78 votes
11. Grammarly Keyboard for Android "Authorization Code with PKCE" flow implementation vulnerability that allows account takeoverUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) · medium · Superhuman (formerly Grammarly)
    76 votes
12. SameSite restrictions are lifted, and SameSite:Strict cookie are being sent.Improper Certificate Validation · high · Brave Software
    73 votes
13. HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate APIMissing Required Cryptographic Step · low · CoinMate.io
    66 votes
14. Takeover of hackerone.engineering via Medium Reliance on Reverse DNS Resolution for a Security-Critical Action · low · HackerOne
    63 votes
15. Incomplete fix for CVE-2026-21637: loadSNI() in _tls_wrap.js lacks try/catch leading to Remote DoSCryptographic Issues - Generic · high · Node.js
    59 votes
16. 0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)Use of a Broken or Risky Cryptographic Algorithm · high · Mars
    58 votes
17. Able to change password by entering wrong old passwordCryptographic Issues - Generic · Stripo Inc
    56 votes
18. Splatoon 3 Anticheat Seed Randomization WeaknessUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) · Nintendo
    55 votes
19. CVE-2025-5025: No QUIC certificate pinning with wolfSSLImproper Certificate Validation · medium · curl
    54 votes
20. Man-in-the-middle through broken SSL certificate verificationMan-in-the-Middle · medium · Nintendo
    53 votes
21. HashDoS in V8Cryptographic Issues - Generic · high · Node.js
    53 votes
22. CVE-2020-8286: Inferior OCSP verificationImproper Certificate Validation · medium · curl
    51 votes
23. Mystery with a leaked token and Reusability of email confirmation link leading to Account TakeoverInadequate Encryption Strength · low · Sorare
    $30049 votes
24. CVE-2024-2466: TLS certificate check bypass with mbedTLS (reward request)Improper Certificate Validation · medium · Internet Bug Bounty
    $2,58048 votes
25. In App purchase Hack Use of a Key Past its Expiration Date · critical · Kaspersky
    47 votes
26. The POODLE attack (SSLv3 supported) at status.slack.comCryptographic Issues - Generic · medium · Slack
    44 votes
27. CVE-2025-10966: missing SFTP host verification with wolfSSHImproper Certificate Validation · low · curl
    43 votes
28. CVE-2025-4947: QUIC certificate check skip with wolfSSLImproper Validation of Certificate with Host Mismatch · medium · curl
    43 votes
29. SSL certificate not validated when registering with a providerCryptographic Issues - Generic · medium · Nextcloud
    $30043 votes
30. iOS group chat denial of serviceUse of a Broken or Risky Cryptographic Algorithm · low · LY Corporation
    $30042 votes
31. Web protection component in Anti-Virus products family ignores HSTS security policyMan-in-the-Middle · medium · Kaspersky
    41 votes
32. Type Juggling -> PHP Object Injection -> SQL Injection ChainCryptographic Issues - Generic · ExpressionEngine
    40 votes
33. Twitter iOS fails to validate server certificate and sends oauth tokenCryptographic Issues - Generic · high · X / xAI
    $2,10040 votes
34. burp does not validate the common name of the presented collaborator server certificateMan-in-the-Middle · medium · PortSwigger Web Security
    $1,50039 votes
35. HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934)Exploiting Incorrectly Configured SSL/TLS · medium · Node.js
    37 votes
36. `check_reserve_proof` sums RingCT ECDH amounts without checking the output commitmentMissing Required Cryptographic Step · medium · Monero
    37 votes
37. Improper error handling in async cryptographic operations crashes processCryptographic Issues - Generic · high · Node.js
    37 votes
38. Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.comUse of a Broken or Risky Cryptographic Algorithm · medium · Nextcloud
    37 votes
39. CVE-2024-2379: QUIC certificate check bypass with wolfSSLImproper Certificate Validation · low · Internet Bug Bounty
    $56037 votes
40. CVE-2024-8096: OCSP stapling bypass with GnuTLSImproper Certificate Validation · medium · curl
    36 votes
41. registry.nodejs.org Subdomain TakeoverMan-in-the-Middle · Node.js
    35 votes
42. DiffieHellman doesn't generate keys after setting a keyCryptographic Issues - Generic · medium · Internet Bug Bounty
    $1,80034 votes
43. Acronis True Image (Windows) does not validate server certificate on a TLS connectionImproper Certificate Validation · high · Acronis
    $50034 votes
44. CVE-2026-7009: OCSP stapling bypass with Apple SecTrustImproper Certificate Validation · medium · curl
    33 votes
45. CVE-2025-10148: predictable WebSocket maskReusing a Nonce, Key Pair in Encryption · low · curl
    30 votes
46. TLS certificate hostname bypass when the IP is written fullwidth digitsImproper Certificate Validation · high · Node.js
    29 votes
47. ID4ME does not validate signature or expirationImproper Verification of Cryptographic Signature · medium · Nextcloud
    $75029 votes
48. Node.js: TLS session reuse can lead to hostname verification bypassMan-in-the-Middle · high · Node.js
    29 votes
49. Passive mixed content issues on the site https://*.fanduel.comMan-in-the-Middle · low · FanDuel
    $10029 votes
50. SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hashMissing Required Cryptographic Step · medium · Monero
    28 votes
51. POODLE SSLv3 bug on multiple twitter smtp servers (mx3.twitter.com,199.59.148.204,199.16.156.108 and 199.59.148.204)Cryptographic Issues - Generic · X / xAI
    28 votes
52. X-E2EE-SIGNATURE verification can be bypassed, leading to loss of confidentiality of end-to-end encrypted filesImproper Certificate Validation · medium · Nextcloud
    27 votes
53. Hardware Wallets Do Not Check Unlock TImeMan-in-the-Middle · medium · Monero
    27 votes
54. Insufficient DKIM record with RSA 512-bit key used on WordPress.comInadequate Encryption Strength · medium · Automattic
    27 votes
55. CVE-2019-1551: rsaz_512_sqr overflow bug on x86_64Cryptographic Issues - Generic · Internet Bug Bounty
    26 votes
56. Predictable proposal participant tokens enable unauthorized access and vote submissionUse of Insufficiently Random Values · low · Nextcloud
    $10025 votes
57. TLS certificate hostname bypass when the host loosely resolves to an IP addressImproper Certificate Validation · high · Node.js
    24 votes
58. Usage of unsafe random function in undici for choosing boundaryUse of Insufficiently Random Values · medium · Node.js
    24 votes
59. The initial E2EE password generated by Rocket.Chat mobile can be recovered in a practical timescale.Use of Insufficiently Random Values · high · Rocket.Chat
    23 votes
60. CVE-2024-0853: OCSP verification bypass with TLS session reuseImproper Check for Certificate Revocation · low · curl
    23 votes
61. Phabricator is vulnerable to padding oracle attacks and chosen-ciphertext attacks.Missing Required Cryptographic Step · medium · Phabricator
    $75023 votes
62. TLS Virtual Host ConfusionCryptographic Issues - Generic · Internet Bug Bounty
    23 votes
63. Length extension attack leading to HTML injectionCryptographic Issues - Generic · medium · Eternal
    $10022 votes
64. CBC "cut and paste" attack may cause Open Redirect(even XSS)Cryptographic Issues - Generic · Uber
    $50022 votes
65. Built-in TLS module unexpectedly treats "rejectUnauthorized: undefined" as "rejectUnauthorized: false", disabling all certificate validationImproper Certificate Validation · low · Node.js
    $15020 votes
66. Some build dependencies are downloaded over an insecure channel (without subsequent integrity checks)Cryptographic Issues - Generic · high · Internet Bug Bounty
    $10020 votes
67. OAuth2 Access Token and App Password Security VulnerabilityUse of a Key Past its Expiration Date · medium · Nextcloud
    20 votes
68. Missing Certificate Authority Authorization ruleCryptographic Issues - Generic · HackerOne
    20 votes
69. HashDoS in V8Cryptographic Issues - Generic · medium · Node.js
    19 votes
70. Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.comUse of a Broken or Risky Cryptographic Algorithm · HackerOne
    19 votes
71. Sandbox User Can Inject Rogue CA Certificate into OS Trust Store via Sudo-Allowed deploy-certificates.shImproper Certificate Validation · medium · AWS VDP
    18 votes
72. CVE-2025-15079: libssh global knownhost override Improper Validation of Certificate with Host Mismatch · low · curl
    18 votes
73. Use of Cryptographically Weak Pseudo-Random Number Generator in WebCrypto keygenCryptographic Issues - Generic · high · Internet Bug Bounty
    $4,00018 votes
74. Acronis True Image 2021 (windows) does not validate server hostname on a login TLS connectionImproper Certificate Validation · high · Acronis
    $25018 votes
75. Insecure password change mechanism may lead to full account takeoverCryptographic Issues - Generic · FantasyTote
    18 votes
76. CVE-2024-2466: TLS certificate check bypass with mbedTLSImproper Validation of Certificate with Host Mismatch · medium · curl
    17 votes
77. Missing Certificate Authority Authorization ruleCryptographic Issues - Generic · HackerOne
    17 votes
78. Ruby OpenSSL Library - IV Reuse in GCM ModeCryptographic Issues - Generic · Ruby
    17 votes
79. Timing side-channel in HMAC verification via memcmp() in crypto_hmac.cc leads to potential MAC forgeryCryptographic Issues - Generic · medium · Node.js
    16 votes
80. Node.js is vulnerable to the Marvin Attack (timing variant of the Bleichenbacher attack against PKCS#1 v1.5 padding)Use of a Broken or Risky Cryptographic Algorithm · medium · Node.js
    16 votes
81. Vulnerability Report - Missing Certificate Authority Authorization ruleCryptographic Issues - Generic · low · MariaDB
    16 votes
82. Gem signature forgeryCryptographic Issues - Generic · medium · RubyGems
    $1,00016 votes
83. Use of a Broken or Risky Cryptographic AlgorithmUse of a Broken or Risky Cryptographic Algorithm · medium · Revive Adserver
    15 votes
84. Remotely trigger an assertion on a TLS server with a malformed certificate stringImproper Certificate Validation · critical · Node.js
    15 votes
85. Invitation reminder emails contain insecure linksCryptographic Issues - Generic · low · Slack
    $35015 votes
86. Critical vulnerability in JSON Web Encryption (JWE) - RFC 7516 Invalid Curve attackCryptographic Issues - Generic · high · Internet Bug Bounty
    $1,00015 votes
87. test.zba.se is vulnerable to SSL POODLE Cryptographic Issues - Generic · medium · Eternal
    15 votes
88. CVE-2023-23919: Multiple OpenSSL error handling issues in nodejs crypto libraryCryptographic Issues - Generic · medium · Internet Bug Bounty
    $1,80014 votes
89. Fragmentation and Aggregation Flaws in Wi-FiCryptographic Issues - Generic · Internet Bug Bounty
    14 votes
90. SSH server compatible with several vulnerable cryptographic algorithmsUse of a Broken or Risky Cryptographic Algorithm · medium · GSA Bounty
    14 votes
91. TLS Triple Handshake AttackCryptographic Issues - Generic · Internet Bug Bounty
    14 votes
92. Improper certificate validation for non-canonical IPv4 hostnames allows DNS SANs to authenticate IP endpointsImproper Certificate Validation · medium · Node.js
    13 votes
93. Desktop client does not verify received singed certificate in end to end encryptionImproper Certificate Validation · medium · Nextcloud
    $1,00013 votes
94. Catch mails sent to an SMTP Server over SSL using an Evil SMTP ServerMan-in-the-Middle · high · Ubiquiti Inc.
    13 votes
95. Insecure Transportation Security Protocol Supported (TLS 1.0) on https://www.jamieweb.netCryptographic Issues - Generic · low · JamieWeb
    13 votes
96. Cross-protocol attack on TLS using SSLv2 (DROWN) (CVE-2016-0800)Cryptographic Issues - Generic · Internet Bug Bounty
    13 votes
97. Connector/C TLS auth-switch bypass exposes plaintext password on hostname verification failureImproper Certificate Validation · MariaDB
    12 votes
98. Industry-Wide MITM Vulnerability Impacting the JVM EcosystemMan-in-the-Middle · high · Internet Bug Bounty
    12 votes
99. RCE on https://█████/ Using CVE-2017-9248Cryptographic Issues - Generic · critical · U.S. Dept Of Defense
    12 votes
100. HTTP MitM on Flash Player settings manager allows attacker to set sandbox settingsCryptographic Issues - Generic · Internet Bug Bounty
     12 votes