Browse / Greenhouse.io

Greenhouse.io

See its reports on the map

Attack surface: 791 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Greenhouse.io

• Misconfiguration2
• Information Disclosure2
• Denial of Service2
• Authentication2
• Access Control1
• Cross-site Scripting1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Subdomain Takeover on demo.greenhouse.io pointing to unbouncepagesPhishing · high
   76 votes
2. Open S3 Bucket Accessible by any Aws UserImproper Access Control - Generic · low
   $10053 votes
3. Debug information disclosure on oauth-redirector.services.greenhouse.ioInformation Exposure Through Debug Information · medium
   34 votes
4. Subdomain Takeover using blog.greenhouse.io pointing to HubspotCross-site Scripting (XSS) - Generic
   34 votes
5. Cache poisoning using NULL bytes and long URLsImproper Null Termination · medium
   32 votes
6. Bypass of request line length limit to DoS via cache poisoningUncontrolled Resource Consumption · medium
   24 votes
7. DoS through cache poisoning using invalid HTTP parametersUncontrolled Resource Consumption · medium
   24 votes
8. Open Redirect in <customer>.greenhouse.ioOpen Redirect · high
   9 votes
9. SSH port on store.greenhouse.io is vulnerable to brute force attacksInformativeImproper Restriction of Authentication Attempts · low
   8 votes
10. [greenhouse.io] CRLF Injection / Insecure nginx configurationCRLF Injection
    8 votes
11. Content Spoofing on link.greenhouse.ioViolation of Secure Design Principles
    6 votes
12. SMTP protection not used (please read carefully )InformativeImproper Authentication - Generic
    2 votes
13. openssh-server Forced Command Handling Information Disclosure Vulnerability on blog.greenhouse.ioInformation Disclosure