HexBrain
Sign in

Browse / Aiven Ltd

Aiven Ltd

6disclosed reports
$22,000paid in bounties
69known subdomains

See its reports on the map

Attack surface: 69 known subdomains

aiapiinternalazureconsolegcphandbookvideoadmin-apiapi-http2-pr…aquariumaquarium-lib…awsblogcareerscareers-stag…cloudcomconprevconsole-betadcdeveloperdevelopersdocseventsfeedbackfoogo

69subdomains across 1 root domain

All subdomainsLoading…
    Download all 69

    Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

    What gets reported to Aiven Ltd

    Most upvoted reports

    AllValidInformativeN/ADuplicate

    1. Apache Flink RCE via GET jar/plan API EndpointCommand Injection - Generic · critical
      $6,000134 votes
    2. Zero day path traversal vulnerability in Grafana 8.x allows unauthenticated arbitrary local file readPath Traversal · high
      $1,000105 votes
    3. Grafana RCE via SMTP server parameter injectionCRLF Injection · critical
      $5,00072 votes
    4. [Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal JolokiaUnrestricted Upload of File with Dangerous Type · critical
      $5,00056 votes
    5. Kafka Connect RCE via connector SASL JAAS JndiLoginModule configurationDeserialization of Untrusted Data · critical
      $5,00045 votes
    6. 0-day Cross Origin Request Forgery vulnerability in Grafana 8.x .Cross-Site Request Forgery (CSRF) · high
      27 votes