Browse / Ian Dunn
Ian Dunn
41disclosed reports
$450paid in bounties
What gets reported to Ian Dunn
Most upvoted reports
AllValidInformativeN/ADuplicate
- Multiple server ssh usernames leaked in your github repositoryN/AInformation Disclosure · medium7 votes
- Potential Open-RedirectionN/AOpen Redirect7 votes
- HTML injection-WordCamp Talks pluginN/ACross-site Scripting (XSS) - Generic · medium6 votes
- Path Disclosure VulnerabilityN/AInformation Disclosure6 votes
- xmlrpc.php FILE IS enable on Main websiteN/AViolation of Secure Design Principles5 votes
- stored SELF xss on Basic Google Maps Placemarks Settings pluginN/ACross-site Scripting (XSS) - Generic4 votes
- CSRF in changing settings of Basic Google Maps PlacemarksN/ACross-Site Request Forgery (CSRF)4 votes
- SSL certificate public key less than 2048 bitN/ACryptographic Issues - Generic4 votes
- XSS in Tagregator pluginN/ACross-site Scripting (XSS) - Generic4 votes
- SSRF Possible through /wordpress/xmlrpc.phpN/AServer-Side Request Forgery (SSRF)3 votes
- Dos https://iandunn.name/ via CVE-2018-6389 exploitationN/AUncontrolled Resource Consumption3 votes
- Send emails to all users using CamptixN/ACross-Site Request Forgery (CSRF)3 votes
- Brute force on wp-loginN/AViolation of Secure Design Principles3 votes
- User enumeration in wp-adminN/AImproper Authentication - Generic2 votes
- xmlrpc.php FILE IS enable it can be used for conducting a Bruteforce attack and Denial of Service(DoS)N/AUncontrolled Resource Consumption1 votes
- Google Authenticator0.6 - PHP Version DosclosureN/AInformation Disclosure1 votes
- Google Authenticator - Cross Site ScriptingN/ACross-site Scripting (XSS) - Generic1 votes
- bypass to csv injectionN/ACommand Injection - Generic1 votes