Browse / Hiro

Hiro

See its reports on the map

What gets reported to Hiro

• Information Disclosure4
• Authentication2
• Other weaknesses2
• Misconfiguration2
• Open Redirect1
• Access Control1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Security Issue into Wallet lock protection Improper Authentication - Generic · high
   $20052 votes
2. Logout Bypass Vulnerability in Hiro.soInformativeInsufficient Session Expiration · medium
   $15045 votes
3. No Confirmation Email For Email ChangeInformativeInformation Disclosure · low
   28 votes
4. Information DisclosureInformativeInformation Disclosure · medium
   21 votes
5. EXIF Geolocation Data Not Stripped From Uploaded ImagesInformation Disclosure · low
   $5020 votes
6. REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITYInformativeOpen Redirect · medium
   20 votes
7. Can view all username leaked in https://core.blockstack.orgInformativeImproper Access Control - Generic
   14 votes
8. Missing restriction on string size of Full Name at browser.blockstack.orgInformative
   12 votes
9. blockstack.org - is vulnerable to (CVE-2016-2183, CVE-2016-6329)InformativeCryptographic Issues - Generic
   9 votes
10. Invalidate active sessions after password changeInformativeViolation of Secure Design Principles · low
    9 votes
11. Blockstack Browser For Mac leaks "Core API Password" to 3rd partiesInformativeInformation Disclosure · low
    8 votes
12. Weak crossdomain.xmlInformative
    1 votes
13. Cross site request forgeryInformativeCross-Site Request Forgery (CSRF)
14. Clickjacking https://blockstack.org/InformativeUI Redressing (Clickjacking)