HexBrain

Browse / Chaturbate

Chaturbate

52disclosed reports
$13,000paid in bounties
23,056known subdomains

See its reports on the map

Attack surface: 23,056 known subdomains

highwebmedia…securegatewa…realcouplesu…usershdfsstreammailsmtpardeeieshiitjpkonlptrutrzhemaildevdemociteforumohx

23,056subdomains across 3 root domains

All subdomainsLoading…

    Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

    What gets reported to Chaturbate

    Most upvoted reports

    AllValidInformativeN/ADuplicate

    1. Cross-origin resource sharing: arbitrary origin trusted on chatws25.stream.highwebmedia.comInformativeImproper Access Control - Generic
      14 votes
    2. Leaking Username and Password in the URLs via Virustotal, can leads to account takeoverInformativeInformation Exposure Through Sent Data
      11 votes
    3. A 10GB file is reachableInformativeInformation Disclosure
      4 votes
    4. Missing CSRF Protection in /stats EndPoint.InformativeCross-Site Request Forgery (CSRF)
      4 votes
    5. Internal loop going to infinite for cb.setTimeout(func, msecs) for broadcast app.InformativeBusiness Logic Errors
      1 votes