Browse / HackerOne

HackerOne

See its reports on the map

Attack surface: 127 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to HackerOne

• Information Disclosure160
• Misconfiguration99
• Access Control71
• Authentication48
• Business Logic40
• Cross-site Scripting32

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Session hijacking attackN/AImproper Authentication - Generic
   21 votes
2. Ability to monitor reports' submission in real timeN/APrivilege Escalation
   16 votes
3. Report title and issue information prepopulated N/AInformation Disclosure
   15 votes
4. Reputation Manipulation (Theoretical)N/AViolation of Secure Design Principles
   9 votes
5. Spamming any user from Reset Password FunctionN/AViolation of Secure Design Principles
   5 votes
6. Reputation gain split by company can be used to track the existence of otherwise undisclosed reportsN/AInformation Disclosure · low
   4 votes