Browse / Deriv.com

Deriv.com

See its reports on the map

What gets reported to Deriv.com

• Cross-site Scripting4
• Authentication3
• Misconfiguration2
• Injection and Smuggling1
• Information Disclosure1
• Other weaknesses1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. login to any user's cashier account and full account information disclosureImproper Authentication - Generic
   27 votes
2. Leaking Referrer in Reset Password LinkViolation of Secure Design Principles · low
   $5014 votes
3. Http Response Splitting - Validate linkCRLF Injection
   $7511 votes
4. Email Verification Link can be Used as Password Reset Link!Improper Authentication - Generic
   7 votes
5. CJ vulnerability in subdomainUI Redressing (Clickjacking)
   5 votes
6. Cross Site ScriptingCross-site Scripting (XSS) - Generic
   5 votes
7. Cross site scripting Cross-site Scripting (XSS) - Generic
   $754 votes
8. Full takeover of some binary.com sub domains
   4 votes
9. Cookie bugImproper Authentication - Generic
   4 votes