Browse / Gratipay

Gratipay

See its reports on the map

What gets reported to Gratipay

• Misconfiguration47
• Authentication18
• Information Disclosure18
• Cross-Site Request Forgery9
• Cryptography9
• Cross-site Scripting8

Most upvoted reports

AllValidInformativeN/ADuplicate

1. SQL TESTN/ASQL Injection
   14 votes
2. Host Header Injection/Redirection AttackN/ACommand Injection - Generic
   9 votes
3. Reset Link IssueN/AImproper Authentication - Generic
   4 votes
4. Login csrf.N/ACross-Site Request Forgery (CSRF)
   4 votes
5. This is a test reportN/A
   3 votes
6. implement a cross-domain policy for Adobe productsN/AViolation of Secure Design Principles
   3 votes
7. Bypassing X-frame options N/AUI Redressing (Clickjacking)
   2 votes
8. xss N/ACross-Site Request Forgery (CSRF)
   2 votes
9. set Expires headerN/AImproper Authentication - Generic
   2 votes
10. set Pragma headerN/AImproper Authentication - Generic
    2 votes
11. 400 Bad Request [Use a third-party provider to sign in or create an account on Gratipay]N/AViolation of Secure Design Principles
    1 votes
12. Possible User Session Hijack using Invalid HTTPS certificate on inside.gratipay.com domainN/AViolation of Secure Design Principles · medium
    1 votes
13. PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution BugsN/AViolation of Secure Design Principles
    1 votes