HexBrain
Sign in

Browse / Other weaknesses

Other weaknesses

656disclosed reports
24weaknesses
$228,252paid in bounties

See it on the mapBypass libraryPayloads

Weaknesses in this class

Most upvoted Other weaknesses reports

AllValidInformativeN/ADuplicate

  1. Takeover an account that doesn't have a Shopify ID and morecritical · Shopify
    3,006 votes
  2. WannaCrypt “Killswitch”HackerOne
    809 votes
  3. June 2022 Incident Reportcritical · HackerOne
    426 votes
  4. An attacker can archive and unarchive any structured scope object on HackerOnehigh · HackerOne
    318 votes
  5. 2020-10-09 Credential Stuffing AttackHackerOne
    196 votes
  6. protected Tweet settings overwritten by other settingsmedium · X / xAI
    178 votes
  7. Hackerone supports accounts organitation takeovermedium · HackerOne
    $2,500155 votes
  8. Frans Visits Vegas AnnouncementFrans Visits Vegas
    154 votes
  9. `socket` command allows sending data over WebSockets to arbitrary origins from Grammarly Extensionhigh · Superhuman (formerly Grammarly)
    140 votes
  10. [URGENT] Opportunity to publish tweets on any twitters accounthigh · X / xAI
    119 votes
  11. How the Arch Angel stole Live EventsHackerOne
    98 votes
  12. Cloudflare CASB Confused Deputy Problemcritical · Cloudflare Public Bug Bounty
    $3,30097 votes
  13. Saying goodbye to HackerOne and Gratipay.Gratipay
    96 votes
  14. Insecure Invitation Link Handlingmedium · ProductBoard, Inc.
    93 votes
  15. `exportReportPdf` mutation shows internal Activityhigh · HackerOne
    92 votes
  16. Groups module can halt chain when handling a proposal with malicious group weights high · Cosmos
    $15,00091 votes
  17. Confirmed #2118458: Intentional redirect from www.hackerone.com to domain which is up for salelow · HackerOne
    91 votes
  18. Ability to link a Google account to another staff account/store owner that isn't linked yetShopify
    84 votes
  19. CVE-2018-0296high · VK.com
    81 votes
  20. User deletion is not handled properly everywheremedium · Nextcloud
    $1,00078 votes
  21. Any user with invite capabilities can take-over any account on Discoursecritical · Discourse
    $1,02475 votes
  22. Host Header Attacmedium · RubyGems
    74 votes
  23. Port 587 SMPT Open: Can send any mail remotely from the internal mail users to company mail id's.SideFX
    $30071 votes
  24. The hacker has access to the administrative part of the management reports in publish reportlow · HackerOne
    $50071 votes
  25. Yet Another CASB Integration Takeover of Active Integrationshigh · Cloudflare Public Bug Bounty
    68 votes
  26. Administrator access to staging.railto.comhigh · Railto LLC
    66 votes
  27. HTTP Parameter Pollution using semicolons in iframe element at hackerone.com/careers allows loading external Greenhouse formsHackerOne
    65 votes
  28. [H1-2006 2020] I successfully solved it!critical · h1-ctf
    64 votes
  29. Broken Link Hijacking on Twitter linkmedium · Panther Labs
    61 votes
  30. Hack The World 2017 Top 2 BonusUber
    $5,00061 votes
  31. Reflected File Download (RFD) in download videomedium · Vimeo
    60 votes
  32. Overwrite any file of the web serverFile Manipulation · critical · MOD Supply Chain VDP
    55 votes
  33. ReDoS Vulnerability in HTTP Accept Headers Parsingmedium · Internet Bug Bounty
    $2,64255 votes
  34. Critical Data Breach - Big Data for all domainsmedium · Basecamp
    53 votes
  35. [Zomato for Business Android] Vulnerability in exported activity WebViewmedium · Eternal
    52 votes
  36. reverb.twitter.com redirects to vulnerable reverb.guruX / xAI
    50 votes
  37. Broken parsing of Git diff allows an attacker to inject arbitrary Ruby scripts to Casks on official tapscritical · Homebrew
    49 votes
  38. Same site Scripting low · DRIVE.NET, Inc.
    49 votes
  39. Real impersonationHackerOne
    48 votes
  40. Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commandshigh · Ian Dunn
    47 votes
  41. CVE-2024-32760 in nginxmedium · Internet Bug Bounty
    $2,60046 votes
  42. bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keysInsecure Default Initialization of Resource · medium · AWS VDP
    45 votes
  43. Repeated mediation requests and multiple emails possible on a report.HackerOne
    $50044 votes
  44. Timeout-based race conditions make Uint8Array/Buffer.alloc non-zerofilledImproper Initialization · high · Node.js
    43 votes
  45. Cache Pollution via Unkeyed GET Parameters on www.omise.comedium · Omise
    43 votes
  46. Es posible poder navegar a cualquier pagina en Point Smart applicationlow · MercadoLibre
    41 votes
  47. Мини-уязвимость в обработке ссылокlow · VK.com
    41 votes
  48. Assertion error in node_url.cc via malformed URL format leads to Node.js crashReachable Assertion · medium · Node.js
    40 votes
  49. Weak credentials found in Jenkins endpointcritical · IBM
    40 votes
  50. CVE-2018-6389 exploitation - using scripts loadermedium · Publitas
    40 votes
  51. Web API key registration allows registering multiple keys by reusing `request_id` low · Valve
    40 votes
  52. Rails Debug Mode Enabled On ( https://44.208.145.207/testrail/files.md5 ) low · Malwarebytes
    39 votes
  53. Script breaking tag (Forces website to render blank) (Informative)Unchecked Error Condition · low · XVIDEOS
    $15036 votes
  54. S3 bucket takeover [learn2.khanacademy.org]high · Khan Academy
    35 votes
  55. CVE-2024-2004: Usage of disabled protocolMisinterpretation of Input · low · curl
    33 votes
  56. Github app(link) Takeover Listed on "https://docs.doppler.com/docs/github-actions" pagelow · Doppler
    32 votes
  57. Taking position in a discontinued forex pair without executing any tradesmedium · EXNESS
    32 votes
  58. ReDoS in IPAddrRuby
    32 votes
  59. download file type warning on Windows does not appear if "ask where to save file before downloading" setting is enabledhigh · Brave Software
    31 votes
  60. Отправка подарков/стикерпаков не теряя голоса.medium · VK.com
    $20030 votes
  61. GNIP subdomain take overhigh · X / xAI
    30 votes
  62. Non-secure requests are not automatically upgraded to HTTPSHackerOne
    30 votes
  63. UI Consent Bypass via Comma Injection in `addAutoApproveTarget` — User-Approval Dialog and Persistence Layer Disagree on Target Scope, Yielding AuthenLLM09:2025 Misinformation · PortSwigger Web Security
    28 votes
  64. Take over subdomains of r2.dev using R2 custom domainsmedium · Cloudflare Public Bug Bounty
    $1,12528 votes
  65. View Failed Approval and Pending videos other userslow · Chaturbate
    $20028 votes
  66. Уязвимость в методе auth.restoreVK.com
    27 votes
  67. 4 severe remote + several minor OpenVPN vulnerabilitieshigh · Internet Bug Bounty
    27 votes
  68. Subdomain takeover on one of the subdomain under mozaws.netImproper Resource Shutdown or Release · medium · Mozilla
    26 votes
  69. ReDoS in PsychRuby
    26 votes
  70. CVE-2024-56374: Denial-of-service vulnerability in IPv6 validationmedium · Internet Bug Bounty
    $2,16225 votes
  71. Is the Google Bucket Meant To Be Publicly Listable? https://cdn.shopify.com/shop-assets/Shopify
    25 votes
  72. https://help.nextcloud.com::: Web cache poisoning attackhigh · Nextcloud
    25 votes
  73. Navigation to protocol handler URL from the opened page displayed as a request from this page.medium · Brave Software
    25 votes
  74. Nextcloud Tables app - inserting rows to an arbitrary table possiblemedium · Nextcloud
    24 votes
  75. Уязвимый класс WebViewmedium · VK.com
    $20024 votes
  76. Rails::HTML::Sanitizer.allowed_uri? returns true for entity-encoded control-character-split javascript: URLslow · Ruby on Rails
    23 votes
  77. A peer can remotely fill the pending block queue to an extremely high size, with blocks that will never leave the queue.Monero
    23 votes
  78. Transactions in invalid blocks are kept in tx-pool without undergoing certain checks.Monero
    23 votes
  79. [www.zomato.com] Abusing LocalParams to Inject Code through ███████ queryhigh · Eternal
    23 votes
  80. Calendar attachments of local files are offered to downloadedImproper Handling of Unexpected Data Type · medium · Nextcloud
    22 votes
  81. URI parser's RFC3986 regular expression has poor performance when there are two # characters, leading to ReDoSmedium · Ruby
    22 votes
  82. Ability to potentially hit internal NGINX locations on *.myshopify.com by making use of the `X-Accel-Redirect` header via a configured App ProxyShopify
    22 votes
  83. Download full backup [Mtn.co.rw]critical · MTN Group
    21 votes
  84. Privilege Esacalation at Apache Airflow 2.5.1 medium · Internet Bug Bounty
    $2,40020 votes
  85. Attacker can unpin posts from companies he's not part of.low · LinkedIn
    20 votes
  86. Bypassing HTML filter in "Packing Slip Template" Lead to SSRF to Internal Kubernetes EndpointsServer Side Request Forgery · low · Shopify
    20 votes
  87. Round-trip instability in REXMLmedium · Ruby
    20 votes
  88. ПРОСМОТР ЛЮБЫХ ПРИВАТНЫХ ФОТО + ПРЕВЬЮ ЛЮБОГО ПРИВАТНОГО ВИДЕО.critical · VK.com
    $70020 votes
  89. HTTP-Response-Splitting on v.shopify.comShopify
    $50020 votes
  90. Staff Member can Get POS Access Without User Interactionmedium · Shopify
    19 votes
  91. Improper Host Detection During Team Up on tweetdeck.twitter.comX / xAI
    19 votes
  92. Reverse Tab-nabbing at www.instacart.com/store/partner_recipe?recipe_url=Instacart
    19 votes
  93. GNU Bourne-Again Shell (Bash) 'Shellshock' VulnerabilityInternet Bug Bounty
    19 votes
  94. Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatImproper Handling of Unicode Encoding · high · Node.js
    18 votes
  95. Twitter Account hijack through broken link in https://runpanther.iolow · Panther Labs
    18 votes
  96. ReDoS in Rack::Multiparthigh · Ruby on Rails
    18 votes
  97. Баг с оплатой подпискиmedium · VK.com
    $30018 votes
  98. Clients do not verify server public keylow · Nextcloud
    $25018 votes
  99. [H1-2006 2020] Flag for H1-CTFh1-ctf
    18 votes
  100. Server-side cache poisoning leads to the http://my.dev.owox.com inaccessibilityhigh · OWOX, Inc.
    18 votes