Browse / FantasyTote

FantasyTote

See its reports on the map

What gets reported to FantasyTote

• Code Execution2
• Misconfiguration2
• Cryptography1
• Denial of Service1
• Other weaknesses1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Insecure password change mechanism may lead to full account takeoverCryptographic Issues - Generic
   18 votes
2. No email verification required when we change email from settingsUncontrolled Resource Consumption
   13 votes
3. Urgent Fix Balance Limit bypass Command Injection - Generic
   10 votes
4. Betting more than max amount
   7 votes
5. Stored number of clicks in the Deposits buttonCommand Injection - Generic
   6 votes
6. Session doesn't expired after loginImproper Authentication - Generic
   5 votes
7. Weak HSTS ageViolation of Secure Design Principles
   3 votes
8. Bypass logout Violation of Secure Design Principles
   3 votes