HexBrain

Browse / C2FO

C2FO

7disclosed reports

See its reports on the map

What gets reported to C2FO

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. [admin.c2fo.com] Open RedirectOpen Redirect
    10 votes
  2. c2fo.com is releasing sensitive Information about Database Configuration.Information Disclosure
    4 votes
  3. Password reset token leakage through referrer at https://app.c2fo.com/password/reset/InformativeInformation Disclosure
    4 votes
  4. User guessing/enumeration at https://app.c2fo.com/api/password-resetInformation Disclosure
    4 votes
  5. OPTIONS Method Enabled
    4 votes
  6. The server supports only older protocols for HTTPS connectionsCryptographic Issues - Generic
    2 votes
  7. All Active user sessions should be destroyed when user change his password!Violation of Secure Design Principles
    1 votes