Browse / Ian Dunn

Ian Dunn

See its reports on the map

What gets reported to Ian Dunn

• Cross-site Scripting9
• Information Disclosure8
• Code Execution6
• Other weaknesses4
• Misconfiguration3
• Cryptography2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commandshigh
   47 votes
2. CSV Injection at Camptix Event TicketingCommand Injection - Generic
   15 votes
3. XSSI: Quick Navigation Interface - leak of private page/post titlesInformation Disclosure · medium
   $5014 votes
4. Formula injection via CSV exports in WordCamp Talks pluginCommand Injection - Generic · medium
   $5013 votes
5. Multiple XSS in Camptix Event Ticketing PluginCross-site Scripting (XSS) - Generic
   10 votes
6. unchecked unserialize usages in audit-trail-extension/audit-trail-extension.phpmedium
   $509 votes
7. Multiple Path DisclosureInformativeInformation Disclosure
   9 votes
8. Multiple server ssh usernames leaked in your github repositoryN/AInformation Disclosure · medium
   7 votes
9. Potential Open-RedirectionN/AOpen Redirect
   7 votes
10. constant cache_page_secret in regolith
    $257 votes
11. unchecked unserialize usage in WordPress-Functionality-Plugin-Skeleton/functionality-plugin-skeleton.php
    $257 votes
12. Timing Attack in Google Authenticator - Per User PromptInformativeCryptographic Issues - Generic · high
    $256 votes
13. HTML injection-WordCamp Talks pluginN/ACross-site Scripting (XSS) - Generic · medium
    6 votes
14. Path Disclosure VulnerabilityN/AInformation Disclosure
    6 votes
15. xmlrpc.php FILE IS enable on Main websiteN/AViolation of Secure Design Principles
    5 votes
16. Bypassing CSV injection using new line charcterCommand Injection - Generic · low
    5 votes
17. Stored XSS from ticket messages in admin table in SupportFlowCross-site Scripting (XSS) - Generic
    $505 votes
18. Stored XSS in SupportFlow Ticket SubjectCross-site Scripting (XSS) - Generic
    $505 votes
19. CSV Injection in CamptixCommand Injection - Generic · low
    4 votes
20. Potentially vulnerable version of Apache software in and default files on https://iandunn.name/InformativeInformation Disclosure
    4 votes
21. Bypass fix in https://hackerone.com/reports/151516 report.Command Injection - Generic · low
    $1004 votes
22. stored SELF xss on Basic Google Maps Placemarks Settings pluginN/ACross-site Scripting (XSS) - Generic
    4 votes
23. CSRF in changing settings of Basic Google Maps PlacemarksN/ACross-Site Request Forgery (CSRF)
    4 votes
24. SSL certificate public key less than 2048 bitN/ACryptographic Issues - Generic
    4 votes
25. XSS in Tagregator pluginN/ACross-site Scripting (XSS) - Generic
    4 votes
26. Xss in CampTix Event TicketingCross-site Scripting (XSS) - Generic
    4 votes
27. SSRF Possible through /wordpress/xmlrpc.phpN/AServer-Side Request Forgery (SSRF)
    3 votes
28. Dos https://iandunn.name/ via CVE-2018-6389 exploitationN/AUncontrolled Resource Consumption
    3 votes
29. Security issue: Github repo's wiki publicly editableInformativeImproper Access Control - Generic
    3 votes
30. Send emails to all users using CamptixN/ACross-Site Request Forgery (CSRF)
    3 votes
31. Brute force on wp-loginN/AViolation of Secure Design Principles
    3 votes
32. No CAPTCHA ia exist in pagesInformativeViolation of Secure Design Principles
    2 votes
33. All Plugins - Direct file access to plugin files VulnerabilityDuplicateImproper Authentication - Generic
    2 votes
34. [Not just a server configuration issue] Full Path Disclosure InformativeInformation Disclosure
    2 votes
35. User enumeration in wp-adminN/AImproper Authentication - Generic
    2 votes
36. PHP and Wordpress version disclosureInformativeInformation Disclosure
    2 votes
37. Stored XSS in all fields in Basic Google Maps Placemarks SettingsCross-site Scripting (XSS) - Generic
    $252 votes
38. xmlrpc.php FILE IS enable it can be used for conducting a Bruteforce attack and Denial of Service(DoS)N/AUncontrolled Resource Consumption
    1 votes
39. Google Authenticator0.6 - PHP Version DosclosureN/AInformation Disclosure
    1 votes
40. Google Authenticator - Cross Site ScriptingN/ACross-site Scripting (XSS) - Generic
    1 votes
41. bypass to csv injectionN/ACommand Injection - Generic
    1 votes