Browse / Factlink

Factlink

See its reports on the map

What gets reported to Factlink

• Misconfiguration5
• Information Disclosure4
• Authentication3
• Cross-Site Request Forgery2
• Cryptography2
• Denial of Service1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Proxy discloses internal web serversInformation Disclosure
   10 votes
2. Proxy service crash DoSUncontrolled Resource Consumption
   9 votes
3. File name/folder enumeration.Information Disclosure
   7 votes
4. Meta characters not filtered on signupViolation of Secure Design Principles
   7 votes
5. Login CSRF using Twitter oauthCross-Site Request Forgery (CSRF)
   7 votes
6. Session not expired on logoutInformativeImproper Authentication - Generic
   5 votes
7. Password Complexity very low.Improper Authentication - Generic
   5 votes
8. Click-Jacking due to missing X-frame headerInformativeViolation of Secure Design Principles
   4 votes
9. Missing SPF for factlink.com and Staging.factlink.comCryptographic Issues - Generic
   4 votes
10. Leaking of password reset token through refererInformativeInformation Disclosure
    4 votes
11. HTML5 cross-origin resource sharing
    4 votes
12. XSS 01 on staging.fct.liCross-site Scripting (XSS) - Generic
    3 votes
13. X/Csrf token problemImproper Authentication - Generic
    3 votes
14. Sign up CSRFCross-Site Request Forgery (CSRF)
    3 votes
15. Anonymous Proxy and IP leak Information Disclosure
    2 votes
16. Password reset link doesn't expire.Violation of Secure Design Principles
    2 votes
17. Url RedirectionInformativeOpen Redirect
    2 votes
18. Click jackingUI Redressing (Clickjacking)
    2 votes
19. Frameset Proxy ProblemInformativeViolation of Secure Design Principles
    1 votes
20. Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)Cryptographic Issues - Generic
    1 votes