Browse / Enter

Enter

See its reports on the map

What gets reported to Enter

• Misconfiguration7
• Cross-site Scripting3
• Authentication2
• Information Disclosure2
• Cross-Site Request Forgery1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. [CRITICAL]-Taking over entire subdomain of romit.ioImproper Authentication - Generic
   $51335 votes
2. Session FixationViolation of Secure Design Principles
   $5012 votes
3. Email Enumeration (POC)Violation of Secure Design Principles
   12 votes
4. Error stack traceInformation Disclosure
   7 votes
5. IDOR on remoing ShareViolation of Secure Design Principles
   $2506 votes
6. CSRF token leakageInformativeCross-Site Request Forgery (CSRF)
   6 votes
7. The csrf token remains same after user logs inViolation of Secure Design Principles
   $504 votes
8. Stored XSS in api key of operator walletCross-site Scripting (XSS) - Generic
   4 votes
9. GA code not verified on the server side allows sending Verification Documents on behalf of another userImproper Authentication - Generic
   $2503 votes
10. stored xss in transactionCross-site Scripting (XSS) - Generic
    3 votes
11. Potential for financial loss, negative Values for "Buy fee" and "Sell Fee"Violation of Secure Design Principles
    $2502 votes
12. Cross site scriptingCross-site Scripting (XSS) - Generic
    2 votes
13. Frictionless Transferring of Wallet OwnershipViolation of Secure Design Principles
    $502 votes
14. No rate limit which leads to "Users information Disclosure" including verfification documents etc.Violation of Secure Design Principles
    $2501 votes
15. HTML injection in email sent by romit.ioCommand Injection - Generic
    $501 votes
16. Server responds with the server error logs on account creationInformation Disclosure
    $501 votes