Browse / Dropcontact

Dropcontact

See its reports on the map

What gets reported to Dropcontact

• Information Disclosure6
• Access Control2
• Misconfiguration1
• Insecure Direct Object Reference1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Sensitive Information DisclosureInformation Disclosure · critical
   47 votes
2. Registering with email [ +70 Chars ] Lead to Disclose some informations [Django Debug Mode ]Information Disclosure · medium
   15 votes
3. Django DEBUG mode enabled and leaked system information.Misconfiguration · high
   12 votes
4. Dropcontact's disclosed report is exposing Private/Confidential informationInformation Disclosure · high
   10 votes
5. User registration using public domain email like gmail in place of professional email.Reliance on Untrusted Inputs in a Security Decision · medium
   8 votes
6. Idor for firstpromoter serviceInsecure Direct Object Reference (IDOR) · high
   8 votes
7. Information Disclosure through DEBUG at Subscription [https://app.dropcontact.io/app/subscription?connector=salesforce](CRITICAL)Information Exposure Through Debug Information · critical
   7 votes
8. Django should not have debug mode enabledInformation Exposure Through Debug Information · low
   4 votes
9. API key is not validated for C.R.M integration [Pipedrive] of LOGGED IN USER, A user can use another USER'S API key for this operation.Improper Authorization · medium
   4 votes
10. Django debug enabled showing information about system, database, configuration files.Information Disclosure · low
    3 votes
11. No Valid SPF RecordsDuplicateImproper Authentication - Generic · medium
    2 votes