HexBrain

Browse / Ian Dunn

Ian Dunn

41disclosed reports
$450paid in bounties

See its reports on the map

What gets reported to Ian Dunn

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Multiple server ssh usernames leaked in your github repositoryN/AInformation Disclosure · medium
    7 votes
  2. Potential Open-RedirectionN/AOpen Redirect
    7 votes
  3. HTML injection-WordCamp Talks pluginN/ACross-site Scripting (XSS) - Generic · medium
    6 votes
  4. Path Disclosure VulnerabilityN/AInformation Disclosure
    6 votes
  5. xmlrpc.php FILE IS enable on Main websiteN/AViolation of Secure Design Principles
    5 votes
  6. stored SELF xss on Basic Google Maps Placemarks Settings pluginN/ACross-site Scripting (XSS) - Generic
    4 votes
  7. CSRF in changing settings of Basic Google Maps PlacemarksN/ACross-Site Request Forgery (CSRF)
    4 votes
  8. SSL certificate public key less than 2048 bitN/ACryptographic Issues - Generic
    4 votes
  9. XSS in Tagregator pluginN/ACross-site Scripting (XSS) - Generic
    4 votes
  10. SSRF Possible through /wordpress/xmlrpc.phpN/AServer-Side Request Forgery (SSRF)
    3 votes
  11. Dos https://iandunn.name/ via CVE-2018-6389 exploitationN/AUncontrolled Resource Consumption
    3 votes
  12. Send emails to all users using CamptixN/ACross-Site Request Forgery (CSRF)
    3 votes
  13. Brute force on wp-loginN/AViolation of Secure Design Principles
    3 votes
  14. User enumeration in wp-adminN/AImproper Authentication - Generic
    2 votes
  15. xmlrpc.php FILE IS enable it can be used for conducting a Bruteforce attack and Denial of Service(DoS)N/AUncontrolled Resource Consumption
    1 votes
  16. Google Authenticator0.6 - PHP Version DosclosureN/AInformation Disclosure
    1 votes
  17. Google Authenticator - Cross Site ScriptingN/ACross-site Scripting (XSS) - Generic
    1 votes
  18. bypass to csv injectionN/ACommand Injection - Generic
    1 votes