Browse / Factlink

Factlink

See its reports on the map

What gets reported to Factlink

• Misconfiguration5
• Information Disclosure4
• Authentication3
• Cross-Site Request Forgery2
• Cryptography2
• Denial of Service1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Proxy discloses internal web serversInformation Disclosure
   10 votes
2. Proxy service crash DoSUncontrolled Resource Consumption
   9 votes
3. File name/folder enumeration.Information Disclosure
   7 votes
4. Meta characters not filtered on signupViolation of Secure Design Principles
   7 votes
5. Login CSRF using Twitter oauthCross-Site Request Forgery (CSRF)
   7 votes
6. Password Complexity very low.Improper Authentication - Generic
   5 votes
7. Missing SPF for factlink.com and Staging.factlink.comCryptographic Issues - Generic
   4 votes
8. HTML5 cross-origin resource sharing
   4 votes
9. XSS 01 on staging.fct.liCross-site Scripting (XSS) - Generic
   3 votes
10. X/Csrf token problemImproper Authentication - Generic
    3 votes
11. Sign up CSRFCross-Site Request Forgery (CSRF)
    3 votes
12. Anonymous Proxy and IP leak Information Disclosure
    2 votes
13. Password reset link doesn't expire.Violation of Secure Design Principles
    2 votes
14. Click jackingUI Redressing (Clickjacking)
    2 votes
15. Criptographic Issue: Strisct Transport Security with not good max age..(TOO SHORT!)Cryptographic Issues - Generic
    1 votes