HexBrain
Sign in

Browse / Other weaknesses

Other weaknesses

656disclosed reports
24weaknesses
$228,252paid in bounties

See it on the mapBypass libraryPayloads

Weaknesses in this class

Most upvoted Other weaknesses reports

AllValidInformativeN/ADuplicate

  1. Takeover an account that doesn't have a Shopify ID and morecritical · Shopify
    3,006 votes
  2. WannaCrypt “Killswitch”HackerOne
    809 votes
  3. June 2022 Incident Reportcritical · HackerOne
    426 votes
  4. An attacker can archive and unarchive any structured scope object on HackerOnehigh · HackerOne
    318 votes
  5. Java (Maven): Actually fix the use of insecure protocol to download/upload artifactsGitHub Security Lab
    $4,000283 votes
  6. TestingHackerOne H1P BBP1
    201 votes
  7. 2020-10-09 Credential Stuffing AttackHackerOne
    196 votes
  8. protected Tweet settings overwritten by other settingsmedium · X / xAI
    178 votes
  9. Незащищённый экземпляр Zeppelin Mail.ru
    $35,000169 votes
  10. Hackerone supports accounts organitation takeovermedium · HackerOne
    $2,500155 votes
  11. Frans Visits Vegas AnnouncementFrans Visits Vegas
    154 votes
  12. `socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extensionhigh · Superhuman (formerly Grammarly)
    140 votes
  13. [URGENT] Opportunity to publish tweets on any twitters accounthigh · X / xAI
    119 votes
  14. How the Arch Angel stole Live EventsHackerOne
    98 votes
  15. Cloudflare CASB Confused Deputy Problemcritical · Cloudflare Public Bug Bounty
    $3,30097 votes
  16. Version problem in wordpress leads to the many vulnearabilityNord Security
    96 votes
  17. Saying goodbye to HackerOne and Gratipay.Gratipay
    96 votes
  18. Direct IP Access to WebsiteInformativecritical · Lichess
    95 votes
  19. Insecure Invitation Link Handlingmedium · ProductBoard, Inc.
    93 votes
  20. `exportReportPdf` mutation shows internal Activityhigh · HackerOne
    92 votes
  21. Groups module can halt chain when handling a proposal with malicious group weights high · Cosmos
    $15,00091 votes
  22. Confirmed #2118458: Intentional redirect from www.hackerone.com to domain which is up for salelow · HackerOne
    91 votes
  23. Ability to link a Google account to another staff account/store owner that isn't linked yetShopify
    84 votes
  24. CVE-2018-0296high · VK.com
    81 votes
  25. admin.shopify.com: Shopify Flow continues sending internal emails to a configured recipient after the staff author is removedInformativeShopify
    78 votes
  26. User deletion is not handled properly everywheremedium · Nextcloud
    $1,00078 votes
  27. Keybase client: downloaded executables lack "com.apple.quarantine" meta-attribute [macOS]Keybase
    $4,00077 votes
  28. Возможность зайти на любой аккаунт https://pandao.ru/Mail.ru
    $2,60076 votes
  29. Any user with invite capabilities can take-over any account on Discoursecritical · Discourse
    $1,02475 votes
  30. Host Header Attacmedium · RubyGems
    74 votes
  31. Port 587 SMPT Open: Can send any mail remotely from the internal mail users to company mail id's.SideFX
    $30071 votes
  32. The hacker has access to the administrative part of the management reports in publish reportlow · HackerOne
    $50071 votes
  33. Yet Another CASB Integration Takeover of Active Integrationshigh · Cloudflare Public Bug Bounty
    68 votes
  34. Initial websocket support for Javascript (SockJS)GitHub Security Lab
    $1,80067 votes
  35. Administrator access to staging.railto.comhigh · Railto LLC
    66 votes
  36. HTTP Parameter Pollution using semicolons in iframe element at hackerone.com/careers allows loading external Greenhouse formsHackerOne
    65 votes
  37. [H1-2006 2020] I successfully solved it!critical · h1-ctf
    64 votes
  38. Broken Link Hijacking on Twitter linkmedium · Panther Labs
    61 votes
  39. Hack The World 2017 Top 2 BonusUber
    $5,00061 votes
  40. Reflected File Download (RFD) in download videomedium · Vimeo
    60 votes
  41. [ruby]: ZipSlip/TarSlip vulnerability detectionGitHub Security Lab
    57 votes
  42. Android: Explanation of Access to app protected components vulnerability██████
    56 votes
  43. 0xc0ffee's 50M-CTF Submission50m-ctf
    56 votes
  44. CWE-195 in ExternalMemoryAccounter::Increase()InformativeNode.js
    55 votes
  45. Overwrite any file of the web serverFile Manipulation · critical · MOD Supply Chain VDP
    55 votes
  46. ReDoS Vulnerability in HTTP Accept Headers Parsingmedium · Internet Bug Bounty
    $2,64255 votes
  47. Bedrock Guardrails Evasion with Prompt FormattingInformativeAWS VDP
    53 votes
  48. Critical Data Breach - Big Data for all domainsmedium · Basecamp
    53 votes
  49. [BrakTooth] Bluetooth vulnerability allows attacker to disconnect or deny reconnection to BT devices connected to a target. Attack #2Intel Corporation
    $3,00052 votes
  50. [Zomato for Business Android] Vulnerability in exported activity WebViewmedium · Eternal
    52 votes
  51. Error in processing gif imagesMail.ru
    $25052 votes
  52. reverb.twitter.com redirects to vulnerable reverb.guruX / xAI
    50 votes
  53. Broken parsing of Git diff allows an attacker to inject arbitrary Ruby scripts to Casks on official tapscritical · Homebrew
    49 votes
  54. Same site Scripting low · DRIVE.NET, Inc.
    49 votes
  55. Real impersonationHackerOne
    48 votes
  56. Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commandshigh · Ian Dunn
    47 votes
  57. Kryptor/SECURITY.md missing HACKERONE program update.Kryptor
    47 votes
  58. CVE-2024-32760 in nginxmedium · Internet Bug Bounty
    $2,60046 votes
  59. bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keysInsecure Default Initialization of Resource · medium · AWS VDP
    45 votes
  60. Personal data of all Dutch public transport cards ("OV-Chipkaart") accessibleOV-chipkaart
    45 votes
  61. Repeated mediation requests and multiple emails possible on a report.HackerOne
    $50044 votes
  62. Timeout-based race conditions make Uint8Array/Buffer.alloc non-zerofilledImproper Initialization · high · Node.js
    43 votes
  63. Cache Pollution via Unkeyed GET Parameters on www.omise.comedium · Omise
    43 votes
  64. [CPP]: Add query for CWE-805: Buffer Access with Incorrect Length Value using some functionsGitHub Security Lab
    $1,80043 votes
  65. [https://pandao.ru] - PUT method availableMail.ru
    $1,00043 votes
  66. Vulnerabilities in exported activity WebViewShipt
    $35042 votes
  67. Es posible poder navegar a cualquier pagina en Point Smart applicationlow · MercadoLibre
    41 votes
  68. [Java] CWE-326: Query to detect weak encryption with an insufficient key sizeGitHub Security Lab
    $4,50041 votes
  69. Мини-уязвимость в обработке ссылокlow · VK.com
    41 votes
  70. Assertion error in node_url.cc via malformed URL format leads to Node.js crashReachable Assertion · medium · Node.js
    40 votes
  71. Weak credentials found in Jenkins endpointcritical · IBM
    40 votes
  72. CVE-2018-6389 exploitation - using scripts loadermedium · Publitas
    40 votes
  73. Web API key registration allows registering multiple keys by reusing `request_id` low · Valve
    40 votes
  74. The taint flag is not propagated at JSON.parseInformativeRuby
    40 votes
  75. I am because bugSpamcritical · Paragon Initiative Enterprises
    40 votes
  76. Rails Debug Mode Enabled On ( https://44.208.145.207/testrail/files.md5 ) low · Malwarebytes
    39 votes
  77. Email link poisoning / Host header attackBoozt Fashion AB
    $20038 votes
  78. Session Timeout Does Not Enforce Re-Authentication on AWS Access PortalDuplicateReusing Session IDs (aka Session Replay) · medium · AWS VDP
    36 votes
  79. Script breaking tag (Forces website to render blank) (Informative)Unchecked Error Condition · low · XVIDEOS
    $15036 votes
  80. Windows filename sanitizer misses Unicode COM/LPT reserved device namesInformativecurl
    35 votes
  81. Credentials forwarded to HTTP after HTTPS→HTTP same-port redirect — url_set_data_creds uses scheme-blind comparatorInformativecurl
    35 votes
  82. S3 bucket takeover [learn2.khanacademy.org]high · Khan Academy
    35 votes
  83. api.icq.com / возможность смотреть аватарку и название приватного чатаMail.ru
    34 votes
  84. CVE-2024-2004: Usage of disabled protocolMisinterpretation of Input · low · curl
    33 votes
  85. Java: Fix NashornScriptEngine detection in ScriptEngine queryGitHub Security Lab
    33 votes
  86. Java (Maven): Use of insecure protocol to download/upload artifactsGitHub Security Lab
    $2,30033 votes
  87. A quiet New Year wish for security researchersSpamcurl
    32 votes
  88. Github app(link) Takeover Listed on "https://docs.doppler.com/docs/github-actions" pagelow · Doppler
    32 votes
  89. Taking position in a discontinued forex pair without executing any tradesmedium · EXNESS
    32 votes
  90. ReDoS in IPAddrRuby
    32 votes
  91. Обход комиссии при оплате картойQIWI
    32 votes
  92. I am because bugSpamcritical · Nextcloud
    32 votes
  93. MQTT CONNACK Packet Type Bypass leads to RCE via Malicious BrokerInformativeASI05: Unexpected Code Execution (RCE) · critical · curl
    31 votes
  94. download file type warning on Windows does not appear if "ask where to save file before downloading" setting is enabledhigh · Brave Software
    31 votes
  95. SMB READ_ANDX DataOffset not validatedN/Ahigh · curl
    30 votes
  96. Отправка подарков/стикерпаков не теряя голоса.medium · VK.com
    $20030 votes
  97. GNIP subdomain take overhigh · X / xAI
    30 votes
  98. Non-secure requests are not automatically upgraded to HTTPSHackerOne
    30 votes
  99. Adding your account to victim's app via deeplinkNew Relic
    $10029 votes
  100. Dropbox employee benefits documents are available in a test Dropbox folderDropbox
    $55929 votes