Browse / Hanno's projects

Hanno's projects

See its reports on the map

Attack surface: 52 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Hanno's projects

• Open Redirect4
• Cross-site Scripting3
• SQL Injection2
• Server-Side Request Forgery1
• Misconfiguration1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. [bugs.fuzzing-project.org] HTML Injection via 'custom_field_7[]' parameter in '/view_all_set.php'Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) · medium
   38 votes
2. Open redirect on the https://tt.hboeck.deOpen Redirect · low
   25 votes
3. Bypassing the fix of #503922Open Redirect · medium
   18 votes
4. Open redirect on https://blog.fuzzing-project.orgOpen Redirect · medium
   16 votes
5. blind sql injectionSQL Injection · high
   14 votes
6. Reflected xss in Serendipity's /index.phpCross-site Scripting (XSS) - Reflected · medium
   7 votes
7. SQL injection in Serendipity (serendipity_fetchComments)SQL Injection · high
   4 votes
8. SSRF in rompager-checkInformativeServer-Side Request Forgery (SSRF) · low
   3 votes
9. Reflected Cross-Site Scripting in Serendipity (serendipity.SetCookie)Cross-site Scripting (XSS) - Reflected · medium
   3 votes
10. Open redirect in Serendipity (exit.php)DuplicateOpen Redirect
    2 votes
11. Text injection at https://media.hboeck.deN/AViolation of Secure Design Principles · low
    1 votes