Browse / BugPoC

BugPoC

See its reports on the map

What gets reported to BugPoC

• Cross-site Scripting11
• Business Logic2
• Path Traversal1
• Other weaknesses1
• Misconfiguration1
• Access Control1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Improper use of "path" parameter can be used to trick testers into leaking their Front-End PoCBusiness Logic Errors
   $1,00071 votes
2. LFI to steal /etc/passwd - Bypass filter in the <meta property="og:image"> tag via redirect and much morePath Traversal
   $10069 votes
3. XSS ChallengeCross-site Scripting (XSS) - Generic
   $30021 votes
4. XSS :DCross-site Scripting (XSS) - Reflected
   21 votes
5. Solution for XSS challenge calc.buggywebsite.comCross-site Scripting (XSS) - DOM
   21 votes
6. Solution to the XSS Challenge Cross-site Scripting (XSS) - Reflected
   $20019 votes
7. Finally , CTF is Solved
   16 votes
8. XSS Challenge #2 SolutionCross-site Scripting (XSS) - DOM
   14 votes
9. XSS PoC for the wacky.buggywebsite.com challengeCross-site Scripting (XSS) - Generic
   $1007 votes
10. DOM based Cross-site ScriptingCross-site Scripting (XSS) - DOM
    7 votes
11. [BugPOC and Amazon XSS CTF writeup] A CSP Bypass StoryCross-site Scripting (XSS) - DOM
    6 votes
12. Strict Transport Security MisconfigurationMisconfiguration
    5 votes
13. Reading arbitrary files via running arbitrary python codePrivilege Escalation
    5 votes
14. Reflected XSS at wacky.buggywebsite.com/frame.htmlCross-site Scripting (XSS) - Reflected
    3 votes
15. Solution for XSS challenge wacky.buggywebsite.comCross-site Scripting (XSS) - DOM
    $1003 votes
16. csp bypass leads to xss on wacky.buggywebsite.comCross-site Scripting (XSS) - Generic
    $1003 votes
17. LFI from bypassing image parser and faking HEAD response with redirectionFile and Directory Information Exposure
    3 votes
18. Users can Change their Own Email AddressBusiness Logic Errors
    1 votes