Browse / BlockDev Sp. Z o.o

BlockDev Sp. Z o.o

See its reports on the map

What gets reported to BlockDev Sp. Z o.o

• Authentication4
• Business Logic3
• Denial of Service3
• Injection and Smuggling2
• Information Disclosure2
• SQL Injection1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`Improper Input Validation · critical
   466 votes
2. Steal collateral during `end` process, by earning DSR interest after `flow`.Business Logic Errors · high
   152 votes
3. [blog.makerdao.com] Multiple Vulnerabilities - Leads to leakage user admin sensitive exposureInformativeBusiness Logic Errors
   140 votes
4. Earn free DAI interest (inflation) through instant CDP+DSR in one txBusiness Logic Errors · high
   63 votes
5. Steal all MKR from `flap` during liquidation by exploiting lack of validation in `flap.kick`Improper Input Validation · high
   55 votes
6. .git file accessibleInformativeInformation Disclosure · low
   20 votes
7. xmlrpc.php file is enable it will used for (Denial of Service) and bruteforce attackDuplicateUncontrolled Resource Consumption
   16 votes
8. xmlrpc.php FILE IS enabled it will used for Bruteforce attack and Denial of Service(DoS)Uncontrolled Resource Consumption · critical
   $50014 votes
9. SQL Injection leads to retrieve the contents of an entire database. DuplicateSQL Injection · critical
   8 votes
10. Blind SSRF at https://chat.makerdao.com/account/profileInformativeServer-Side Request Forgery (SSRF) · critical
    7 votes
11. Two-factor authentication (2FA) BypassN/AAuthentication Bypass Using an Alternate Path or Channel · critical
    6 votes
12. App Takeover ( makerdao.herokuapp.com )N/APrivilege Escalation · high
    6 votes
13. Email HTML injection N/ACross-site Scripting (XSS) - Generic · low
    5 votes
14. Wordpress users disclosure on blog.makerdao.conDuplicateInformation Disclosure · low
    5 votes
15. load scripts DOS vulnerabilityDuplicateImproper Restriction of Authentication Attempts · high
    3 votes
16. A specially crafted value for the 'Cache-Digest' header causing crash in chat.makerdao.comN/AImproper Restriction of Authentication Attempts · critical
    1 votes
17. xmlrpc.php FILE IS enable it will used for Bruteforce attack InformativeImproper Restriction of Authentication Attempts
    1 votes
18. UNRESTRICTED FILE UPLOAD AT chat.makerdao.comN/AInsecure Temporary File · high
    1 votes
19. DoS of https://blog.makerdao.com/ via CVE-2018-6389InformativeUncontrolled Resource Consumption