HexBrain
Sign in

Browse / Imgur

Imgur

46disclosed reports

See its reports on the map

What gets reported to Imgur

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Stored XSS on imgur profileCross-site Scripting (XSS) - Stored · medium
    614 votes
  2. RCE by command line argument injection to `gm convert` in `/edit/process?a=crop`Command Injection - Generic · critical
    229 votes
  3. CSRF leads to a stored self xssCross-site Scripting (XSS) - Reflected · low
    145 votes
  4. Remote Code Execution on Git.imgur-dev.com Code Injection · critical
    119 votes
  5. Unauthenticated Docker registryImproper Authentication - Generic
    92 votes
  6. Password Reset Link not expiring after changing the email Leads To Account TakeoverImproper Authentication - Generic · medium
    87 votes
  7. Login to any user account using other facebook app access token Improper Authentication - Generic
    76 votes
  8. No length on passwordWeak Password Recovery Mechanism for Forgotten Password · medium
    74 votes
  9. Bypass subscriptionBusiness Logic Errors · medium
    67 votes
  10. Stored XSS in Post title (PoC)Cross-site Scripting (XSS) - Stored · medium
    63 votes
  11. HTML Injection with XSS possible Cross-site Scripting (XSS) - Stored
    56 votes
  12. SSRF in https://imgur.com/vidgif/urlUncontrolled Resource Consumption
    52 votes
  13. Reflected XSS in m.imgur.comCross-site Scripting (XSS) - Generic
    50 votes
  14. Information disclosure (No rate limting in forgot password & other login)Information Disclosure
    30 votes
  15. SSRF in imgur video GIF conversionServer-Side Request Forgery (SSRF) · high
    28 votes
  16. De-anonymization Attack: Cross Site Information LeakageInformation Disclosure · medium
    23 votes
  17. Xss on community.imgur.comCross-site Scripting (XSS) - Reflected · medium
    20 votes
  18. Sourcemaps and Unminified Source Code Exposed on PagesImproper Access Control - Generic · medium
    19 votes
  19. BUG XSS IN "ADD IMAGES"InformativeCross-site Scripting (XSS) - Stored · medium
    19 votes
  20. Go.imgur.com can be used to phish for account informationPhishing · low
    18 votes
  21. Stored xss in ALBUM DESCRIPTION Cross-site Scripting (XSS) - Generic · medium
    18 votes
  22. self-xss with ClickJacking can leads to account takeover in FirefoxCross-site Scripting (XSS) - DOM · low
    17 votes
  23. Ability to login to the Nexus Repo Manager from https://nexus.imgur.com/ Path Traversal · medium
    17 votes
  24. Reflected Flash XSS using swfupload.swf with an epileptic reloading to bypass the button-eventCross-site Scripting (XSS) - Generic
    16 votes
  25. 8ybhy85kld9zp9xf84x6.imgur.com Subdomain TakeoverMisconfiguration · high
    15 votes
  26. xss reflected on imgur.comCross-site Scripting (XSS) - Reflected
    15 votes
  27. SSRF and local file read in video to gif converterServer-Side Request Forgery (SSRF)
    14 votes
  28. Local file read in image editorCode Injection
    13 votes
  29. SSRF / Local file enumeration / DoS due to improper handling of certain file formats by ffmpegCommand Injection - Generic
    8 votes
  30. Server Side Request Forgery In Video to GIF FunctionalityInformativeCross-Site Request Forgery (CSRF)
    8 votes
  31. Stored XSS in albums on http://m.imgur.com/Cross-site Scripting (XSS) - Generic
    5 votes
  32. XSS via React element spoofingCross-site Scripting (XSS) - Generic
    5 votes
  33. Imgur dev environments facing the InternetInformation Disclosure
    4 votes
  34. Persistent XSS in image titleCross-site Scripting (XSS) - Generic
    4 votes
  35. risk of having secure=false in a crossdomain.xmlMemory Corruption - Generic
    3 votes
  36. XSS m.imgur.comCross-site Scripting (XSS) - Generic
    3 votes
  37. Open Url redirection on login with facebookInformativeCryptographic Issues - Generic
    3 votes
  38. Big Bug in SSL : breach compression attack (CVE-2013-3587) affect imgur.comCryptographic Issues - Generic
    2 votes
  39. XSS in imgur mobile 3Cross-site Scripting (XSS) - Generic
    2 votes
  40. XSS in imgur mobileCross-site Scripting (XSS) - Generic
    2 votes
  41. Crossdomain.xml settings on api.imgur.com too openMemory Corruption - Generic
    2 votes
  42. "Sign me out everywhere" does not work for desktop sessionsCryptographic Issues - Generic
    2 votes
  43. Attack User Privacy Settings - X-Frame-Options missing on m.imgur.com/user/username/settingsUI Redressing (Clickjacking)
    1 votes
  44. Persistent XSS in https://p.imgur.com/albumview.gif and http://p.imgur.com/imageview.gif / post statisticsCross-site Scripting (XSS) - Generic
    1 votes
  45. Csrf near report abuse meme Cross-Site Request Forgery (CSRF)
    1 votes
  46. Content Sniffing not enabledCryptographic Issues - Generic
    1 votes