Browse / Endless Group

Endless Group

See its reports on the map

What gets reported to Endless Group

• Information Disclosure2
• Misconfiguration1
• Code Execution1
• Cross-site Scripting1
• Denial of Service1
• Cryptography1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Weak Password Policy via DirectAdmin Password Change FunctionalityViolation of Secure Design Principles
   33 votes
2. Modify Host Header which is sent to emailCode Injection · high
   30 votes
3. CVE-2020-14179 on https://jira.theendlessweb.com/secure/QueryComponent!Default.jspa leads to information disclosureInformation Disclosure · medium
   25 votes
4. Enumeration of username on password reset pageInformation Exposure Through an Error Message · low
   13 votes
5. XSS on https://fax.pbx.itsendless.org/ (CVE-2017-18024)Cross-site Scripting (XSS) - Generic · medium
   12 votes
6. CVE-2017-8779 exploit on open rpcbind port could lead to remote DoSUncontrolled Resource Consumption · medium
   11 votes
7. Lets Encrypt Certificates affected by CAA Rechecking IncidentImproper Certificate Validation · medium
   1 votes