HexBrain
Sign in

Browse / Injection and Smuggling

Injection and Smuggling

389disclosed reports
18weaknesses
$172,582paid in bounties

See it on the mapBypass libraryPayloads

Weaknesses in this class

Often found together with

Most upvoted Injection and Smuggling reports

AllValidInformativeN/ADuplicate

  1. Bypass for #488147 enables stored XSS on https://paypal.com/signin againHTTP Request Smuggling · high · PayPal
    $20,0002,687 votes
  2. Mass account takeovers using HTTP Request Smuggling on https://slackb.com/ to steal session cookiesHTTP Request Smuggling · critical · Slack
    870 votes
  3. Stored XSS on https://paypal.com/signin via cache poisoningHTTP Request Smuggling · high · PayPal
    $18,900685 votes
  4. Request smuggling on admin-official.line.me could lead to account takeoverHTTP Request Smuggling · high · LY Corporation
    565 votes
  5. Stealing Zomato X-Access-Token: in Bulk using HTTP Request Smuggling on api.zomato.comHTTP Request Smuggling · critical · Eternal
    559 votes
  6. Password theft login.newrelic.com via Request SmugglingHTTP Request Smuggling · New Relic
    $3,000490 votes
  7. Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`Improper Input Validation · critical · BlockDev Sp. Z o.o
    466 votes
  8. CRLF injectionCRLF Injection · medium · X / xAI
    439 votes
  9. Bypass of GitLab CI runner slash fix in YAML validationImproper Input Validation · critical · GitLab
    363 votes
  10. CRLF Injection in urllibCRLF Injection · medium · Internet Bug Bounty
    $1,000341 votes
  11. XXE at ecjobs.starbucks.com.cn/retail/hxpublic_v6/hxdynamicpage6.aspxXML External Entities (XXE) · critical · Starbucks
    319 votes
  12. HTTP Request Smuggling via HTTP/2HTTP Request Smuggling · critical · Basecamp
    $7,500300 votes
  13. HTTP request SmugglingHTTP Request Smuggling · high · Helium
    300 votes
  14. XXE on pulse.mail.ruXML External Entities (XXE) · Mail.ru
    $6,000264 votes
  15. XXE on sms-be-vip.twitter.com in SXMP ProcessorXML External Entities (XXE) · medium · X / xAI
    258 votes
  16. HTTP request smuggling (?) canpol.deti.mail.ruHTTP Request Smuggling · Mail.ru
    $5,000241 votes
  17. XXE on https://duckduckgo.comXML External Entities (XXE) · critical · DuckDuckGo
    218 votes
  18. Phone Call to XXE via Interactive Voice ResponseXML External Entities (XXE) · ██████
    172 votes
  19. HTTP Request Smuggling on https://labs.data.govHTTP Request Smuggling · high · GSA Bounty
    $750160 votes
  20. LLM01: Invisible Prompt InjectionLLM01: Prompt Injection · medium · HackerOne
    159 votes
  21. Partial bypass of #483774 with Blind XXE on https://duckduckgo.comXML External Entities (XXE) · high · DuckDuckGo
    159 votes
  22. DMARC Not found for paragonie.com URGENTSpamXML External Entities (XXE) · critical · Paragon Initiative Enterprises
    147 votes
  23. HTTP Request Smuggling at app.workbox.dkHTTP Request Smuggling · Visma Public
    $500139 votes
  24. XXE through injection of a payload in the XMP metadata of a JPEG fileXML External Entities (XXE) · critical · Informatica
    138 votes
  25. HTTP Response Header Injection in shopify/pitchfork + Rack 3HTTP Response Splitting · low · Shopify
    $800136 votes
  26. HTTP Request Smuggling due to CR-to-Hyphen conversionHTTP Request Smuggling · high · Node.js
    134 votes
  27. Arbitrary local system file read on open-xchange server Resource Injection · Open-Xchange
    $2,000125 votes
  28. HTTP Request Smuggling on vpn.lob.comHTTP Request Smuggling · Lob
    $500123 votes
  29. Improper HTTP header block termination in llhttpHTTP Request Smuggling · medium · Node.js
    122 votes
  30. HTTP Request Smuggling in Transform Rules using hexadecimal escape sequences in the concat() functionHTTP Request Smuggling · critical · Cloudflare Public Bug Bounty
    $6,000116 votes
  31. XXE in Site Audit function exposing file and directory contentsXML External Entities (XXE) · critical · Semrush
    115 votes
  32. XXE Injection through SVG image upload leads to SSRFXML External Entities (XXE) · Zivver
    112 votes
  33. HTML injection in support.razer.com [IE only]Improper Handling of URL Encoding (Hex Encoding) · Razer
    $250109 votes
  34. HTTP request smuggling using malformed Transfer-Encoding headerHTTP Request Smuggling · critical · Node.js
    105 votes
  35. Bypass "No Links" Restriction in Biography via Protocol-Relative URL (//)Improper Input Validation · low · Mozilla
    98 votes
  36. CRLF injection leads to internal XSS on PangleGlobalCRLF Injection · medium · TikTok
    97 votes
  37. HTML Injection on tiktoktutorials via firstName parameterImproper Input Validation · low · TikTok
    97 votes
  38. XXE in DoD website that may lead to RCEXML External Entities (XXE) · critical · U.S. Dept Of Defense
    97 votes
  39. Creating malformed URLs via new line character in-between two URLs leads to misrepresented hyperlinks in Tweets/DMsCRLF Injection · low · X / xAI
    96 votes
  40. Bypass of Restricted Keyword "Mozilla" in Display Name Field via Unicode Homoglyphs on addons.allizom.orgImproper Input Validation · low · Mozilla
    $50093 votes
  41. Possibility of Request smuggling attackHTTP Request Smuggling · high · Internet Bug Bounty
    $4,66093 votes
  42. moderate: Apache HTTP Server: mod_rewrite proxy handler substitution (CVE-2024-39573) CWE-20 Improper Input ValidationImproper Input Validation · medium · Internet Bug Bounty
    $2,60089 votes
  43. Deadlock in x86 HVM standard VGA handlingImproper Input Validation · medium · Internet Bug Bounty
    $2,16288 votes
  44. Blind XXE via Powerpoint filesXML External Entities (XXE) · Open-Xchange
    $2,00086 votes
  45. Improper UUID validation results in bypass of #419896Improper Input Validation · high · HackerOne
    82 votes
  46. LFI and SSRF via XXE in emblem editorXML External Entities (XXE) · critical · Rockstar Games
    $1,50079 votes
  47. Prompt Injection via GitHub Patch in Brave AI Chat (Leo)InformativeLLM01: Prompt Injection · high · Brave Software
    77 votes
  48. Html injection on subscription emailFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) · medium · CS Money
    $30077 votes
  49. #**CSV Injection in shared passwords leads to complete Private Vault Exfiltration**InformativeImproper Neutralization of Formula Elements in a CSV File · 1Password - Enterprise Password Manager
    75 votes
  50. Pause-based desync in Apache HTTPDHTTP Request Smuggling · high · Internet Bug Bounty
    $4,00074 votes
  51. HTTP Smuggling multiple issues in Squid 3.x & squid 4.xHTTP Response Splitting · critical · Internet Bug Bounty
    74 votes
  52. HTTP SMUGGLING EXPOSED HMAC/DOS HTTP Request Smuggling · medium · Magic
    74 votes
  53. ImageId Format Injection in Image Upload EndpointImproper Input Validation · medium · Lichess
    73 votes
  54. Nextcloud Desktop Client RCE via malicious URI schemesResource Injection · medium · Nextcloud
    $1,00073 votes
  55. jitsi-meet: Prosody/Jigasi missing header whitelist in mod_filter_iq_rayo allows arbitrary SIP header injection and Caller ID spoofingImproper Input Validation · low · 8x8
    $10072 votes
  56. Residual Malicious Payloads on HackerOne after Vulnerability FixesImproper Input Validation · medium · HackerOne
    72 votes
  57. Grafana RCE via SMTP server parameter injectionCRLF Injection · critical · Aiven Ltd
    $5,00072 votes
  58. [API] ICQ user's avatar can be manipulated remotelyImproper Input Validation · Mail.ru
    $1,00070 votes
  59. blind XXE in autodiscover parserXML External Entities (XXE) · Mail.ru
    70 votes
  60. Cache poisoning via X-Forwarded-Host in www.shopify.com/partners/blogImproper Neutralization of HTTP Headers for Scripting Syntax · low · Shopify
    $1,00067 votes
  61. Host Header Injection - internal.qa.delivery.indrive.comCRLF Injection · low · inDrive
    66 votes
  62. [Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyResource Injection · critical · Nintendo
    65 votes
  63. Incorrect Deep-link validation leading to unresponsive application and deviceImproper Input Validation · medium · Flickr
    64 votes
  64. LLM03: Training Data Poisoning via ASCII decoding InformativeLLM01: Prompt Injection · HackerOne
    61 votes
  65. Security bug https://bugzilla.mozilla.org/oauth/authorize - CRLF Header injection via "redirect_uri" parameterCRLF Injection · low · Mozilla
    $20061 votes
  66. HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressResource Injection · low · GitLab
    $1,06061 votes
  67. HTTP/3 Stream Dependency Cycle ExploitN/AImproper Input Validation · high · curl
    60 votes
  68. [Source Engine] Material path truncation leads to Remote Code ExecutionImproper Input Validation · high · Valve
    $2,50060 votes
  69. [synthetics.newrelic.com] SMTP header injection leads to (mass) arbitrary email sendingCRLF Injection · New Relic
    $50060 votes
  70. HTTP Response Splitting (CRLF injection) in report_storyCRLF Injection · X / xAI
    59 votes
  71. CVE-2024-21733 Apache Tomcat HTTP Request Smuggling (Client- Side Desync) (CWE: 444)HTTP Request Smuggling · high · Internet Bug Bounty
    $4,66057 votes
  72. HTML injection at face.city-mobil.ruImproper Input Validation · Mail.ru
    $50057 votes
  73. Html injection in event Description Improper Input Validation · low · LinkedIn
    55 votes
  74. Content injection in Jira issue title enabling sending arbitrary POST request as victimResource Injection · high · GitLab
    55 votes
  75. CVE-2020-8177: curl overwrite local file with -JImproper Input Validation · medium · curl
    55 votes
  76. Steal all MKR from `flap` during liquidation by exploiting lack of validation in `flap.kick`Improper Input Validation · high · BlockDev Sp. Z o.o
    55 votes
  77. Arbitrary POST request as victim user from HTML injection in Jupyter notebooksResource Injection · high · GitLab
    54 votes
  78. XXE на webdav.mail.ru - PROPFIND/PROPPATCHXML External Entities (XXE) · Mail.ru
    54 votes
  79. Potential HTTP Request Smuggling in ruby webrickHTTP Request Smuggling · low · Ruby
    53 votes
  80. XXE on ██████████ by bypassing WAF ████XML External Entities (XXE) · QIWI
    53 votes
  81. important: Apache HTTP Server weakness with encoded question marks in backreferences (CVE-2024-38474)Improper Input Validation · high · Internet Bug Bounty
    $4,92051 votes
  82. Request Smuggling in Apache Tomcat (Important, CVE-2023-45648)HTTP Request Smuggling · high · Internet Bug Bounty
    $4,66051 votes
  83. HTTP Request Smuggling via Connection: close<TAB> in Node.js llhttp parserHTTP Request Smuggling · medium · Node.js
    49 votes
  84. Host header injection leads to account takeoverDuplicateImproper Neutralization of HTTP Headers for Scripting Syntax · high · Enjin
    47 votes
  85. Render content from untrusted sources via web_preview endpoint on Acronis CloudResource Injection · Acronis
    $20046 votes
  86. HTTP request smuggling with Origin Rules using newlines in the host_header action parameterHTTP Request Smuggling · critical · Cloudflare Public Bug Bounty
    $3,10046 votes
  87. Http request splittingHTTP Response Splitting · medium · Node.js
    45 votes
  88. position: fixed !important bypasses CSS sanitizer's fixed-position mitigation, enabling full-viewport phishing overlays.Resource Injection · medium · Nextcloud
    44 votes
  89. HTML Injection in Contact Form Email Enables Phishing via Legitimate ████████ InfrastructureImproper Output Neutralization for Logs · medium · Essity
    42 votes
  90. CRLF Injection in `--proxy-header` allows extra HTTP headers (CWE-93)N/ACRLF Injection · curl
    42 votes
  91. xmlrpc.php &wp-cron.php files are enabled, and will used for (DDOS),(DOS) and broutforce users attack.XML External Entities (XXE) · Nextcloud
    41 votes
  92. Authenticated XXEXML External Entities (XXE) · medium · WordPress
    41 votes
  93. XML External Entity (XXE) in qiwi.com + waf bypassXML External Entities (XXE) · QIWI
    41 votes
  94. Posts sent via websockets aren't sanitized properlyImproper Input Validation · low · Mattermost
    $15040 votes
  95. HTTP Request Smuggling HTTP Request Smuggling · high · U.S. Dept Of Defense
    40 votes
  96. x-request-id header reflected in server response without sanitizationCRLF Injection · Radancy
    40 votes
  97. When you call your branch the same name as a git hash, it could be checked out by dependentsResource Injection · medium · GitLab
    $2,00039 votes
  98. XXE on DoD web serverXML External Entities (XXE) · critical · U.S. Dept Of Defense
    38 votes
  99. [HTA2] XXE on https://███ via SpellCheck Endpoint.XML External Entities (XXE) · critical · U.S. Dept Of Defense
    37 votes
  100. CSS Injection to disable app & potential message exfilImproper Input Validation · medium · Slack
    37 votes