Browse / Bime

Bime

See its reports on the map

Attack surface: 100 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Bime

• Information Disclosure3
• Cross-site Scripting1
• Access Control1
• Misconfiguration1
• Other weaknesses1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Subdomain takeover due to unclaimed Amazon S3 bucket on a2.bime.ioCross-site Scripting (XSS) - Generic
   77 votes
2. Urgent: attacker can access every data source on BimeInformation Disclosure
   56 votes
3. Attacker can access graphic representation of every queryInformation Disclosure
   39 votes
4. XXE in the Connector DesignerInformation Disclosure
   15 votes
5. SSRF in the Connector Designer (REST and Elastic Search)Privilege Escalation
   7 votes
6. Subdomain takeover at ws.bimedb.com due to unclaimed Amazon S3 bucketMisconfiguration
   6 votes
7. The JDBC driver used by the Vertica connector allows to create files on the backends
   6 votes
8. SSRF issueCommand Injection - Generic
   5 votes