Browse / Chaturbate
Chaturbate
52disclosed reports
$13,000paid in bounties
23,056known subdomains
Attack surface: 23,056 known subdomains
23,056subdomains across 3 root domains
Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.
What gets reported to Chaturbate
Most upvoted reports
AllValidInformativeN/ADuplicate
- Cross-origin resource sharing: arbitrary origin trusted on chatws25.stream.highwebmedia.comInformativeImproper Access Control - Generic14 votes
- Leaking Username and Password in the URLs via Virustotal, can leads to account takeoverInformativeInformation Exposure Through Sent Data11 votes
- A 10GB file is reachableInformativeInformation Disclosure4 votes
- Missing CSRF Protection in /stats EndPoint.InformativeCross-Site Request Forgery (CSRF)4 votes
- Internal loop going to infinite for cb.setTimeout(func, msecs) for broadcast app.InformativeBusiness Logic Errors1 votes