HexBrain
Sign in

Browse / Coursera

Coursera

6disclosed reports
308known subdomains

See its reports on the map

Attack surface: 308 known subdomains

labsemailcorplabs-devmaillearnhelixapiemail-sggpmv-vpn38cc4-www66492-wwwaboutaccountsadminandroidapi2applyarar-egassessmentsauthenticati…berkeleybeta-testblogbuildbuilding

308subdomains across 1 root domain

All subdomainsLoading…
    Download all 308

    Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

    What gets reported to Coursera

    Most upvoted reports

    AllValidInformativeN/ADuplicate

    1. XSS StoredCross-site Scripting (XSS) - Generic · medium
      28 votes
    2. No Password Verification on Changing Email Address Cause Account takeover Violation of Secure Design Principles · medium
      21 votes
    3. Broken authentication and session management flaw Improper Authentication - Generic
      15 votes
    4. [www.coursera.org] Leaking password reset link on referrer headerViolation of Secure Design Principles
      9 votes
    5. Stored XSS via transloadit.com and imageproxyCross-site Scripting (XSS) - Stored · high
      5 votes
    6. XSS in https://www.coursera.org/courses/Cross-site Scripting (XSS) - Generic
      5 votes