Browse / ██████

██████

See its reports on the map

What gets reported to ██████

• Access Control2
• Code Execution2
• Cross-site Scripting2
• Injection and Smuggling1
• Path Traversal1
• Cryptography1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Golden techniques to bypass host validations in Android appsImproper Access Control - Generic
   278 votes
2. Remote Command execution due to image tragickCode Injection
   184 votes
3. Phone Call to XXE via Interactive Voice ResponseXML External Entities (XXE)
   172 votes
4. Directory Traversal in uftpd 2.6-2.10Path Traversal
   136 votes
5. DOM based XSS on *.██████.com via document.domain sink in SafariCross-site Scripting (XSS) - DOM
   87 votes
6. Remote Code Execution on Proxy Service (as root)Code Injection
   80 votes
7. AWS Credentials leaked: access to production database backups, SSL certs and moreCryptographic Issues - Generic
   78 votes
8. RCE, SQLi, IDOR, Auth Bypass and XSS at [staff.███.edu.eg ]Cross-site Scripting (XSS) - Generic
   72 votes
9. Android: Explanation of Access to app protected components vulnerability
   56 votes
10. Same Origin Policy Bypass at ██████.comImproper Access Control - Generic
    50 votes
11. Cross-site request forgery vulnerability resulting in the deletion of a user's account.Cross-Site Request Forgery (CSRF)
    44 votes