Browse / Airbnb

Airbnb

See its reports on the map

What gets reported to Airbnb

• Information Disclosure3
• Cross-site Scripting2
• Injection and Smuggling1
• Authentication1
• Business Logic1
• Cross-Site Request Forgery1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. [m.airbnb.com] CRLF InjectionHTTP Response Splitting · low
   $2,50037 votes
2. ████ discloses valid Airbnb SSO login names via Google Search ResultsInformation Disclosure
   21 votes
3. [airbnb.com] XSS via Cookie flashDuplicateCross-site Scripting (XSS) - Generic · medium
   17 votes
4. Generating Unlimited Free Travel Gift Invites | IDORInformativeInformation Disclosure
   11 votes
5. I Can Delete Any Airbnb Users Symbol!Improper Authentication - Generic
   5 votes
6. Call back number not verifiedInformativeBusiness Logic Errors
   4 votes
7. Nginx Version DisclosureInformativeInformation Disclosure · medium
   4 votes
8. authenticity_token is not random across page loadsCross-Site Request Forgery (CSRF)
   4 votes
9. Vulnerability type xss uncovered in airbnb.esCross-site Scripting (XSS) - Generic
   4 votes
10. SSL IssuesCryptographic Issues - Generic
    3 votes