Browse / Aiven Ltd

Aiven Ltd

See its reports on the map

Attack surface: 69 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Aiven Ltd

• Code Execution3
• Path Traversal1
• Injection and Smuggling1
• Cross-Site Request Forgery1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Apache Flink RCE via GET jar/plan API EndpointCommand Injection - Generic · critical
   $6,000134 votes
2. Zero day path traversal vulnerability in Grafana 8.x allows unauthenticated arbitrary local file readPath Traversal · high
   $1,000105 votes
3. Grafana RCE via SMTP server parameter injectionCRLF Injection · critical
   $5,00072 votes
4. [Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal JolokiaUnrestricted Upload of File with Dangerous Type · critical
   $5,00056 votes
5. Kafka Connect RCE via connector SASL JAAS JndiLoginModule configurationDeserialization of Untrusted Data · critical
   $5,00045 votes
6. 0-day Cross Origin Request Forgery vulnerability in Grafana 8.x .Cross-Site Request Forgery (CSRF) · high
   27 votes