Browse / Deriv.com

Deriv.com

See its reports on the map

What gets reported to Deriv.com

• Cross-site Scripting4
• Authentication3
• Misconfiguration2
• Injection and Smuggling1
• Information Disclosure1
• Other weaknesses1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. login to any user's cashier account and full account information disclosureImproper Authentication - Generic
   27 votes
2. Leaking Referrer in Reset Password LinkViolation of Secure Design Principles · low
   $5014 votes
3. Http Response Splitting - Validate linkCRLF Injection
   $7511 votes
4. Email Verification Link can be Used as Password Reset Link!Improper Authentication - Generic
   7 votes
5. CJ vulnerability in subdomainUI Redressing (Clickjacking)
   5 votes
6. User Enumeration : Due to rate limiting on registrationInformativeInformation Disclosure
   5 votes
7. Cross Site ScriptingCross-site Scripting (XSS) - Generic
   5 votes
8. Cross site scripting Cross-site Scripting (XSS) - Generic
   $754 votes
9. Full takeover of some binary.com sub domains
   4 votes
10. Cookie bugImproper Authentication - Generic
    4 votes
11. HTML injection via 'underlying' parameterDuplicateCross-site Scripting (XSS) - Generic
    3 votes
12. XSSDuplicateCross-site Scripting (XSS) - Generic
    2 votes