Browse / Infogram

Infogram

See its reports on the map

Attack surface: 332 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Infogram

• Cross-site Scripting15
• Authentication7
• Misconfiguration7
• Information Disclosure4
• Access Control3
• Server-Side Request Forgery3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Login Cross Site Request Forgery DuplicateCross-Site Request Forgery (CSRF)
   3 votes
2. No Confirmation or Notification During Email Change which can leads to account takeoverDuplicateImproper Authentication - Generic · medium
   3 votes
3. User enumeration via forgot password error messageDuplicateImproper Authentication - Generic · medium
   2 votes
4. No notification on Password ChangeDuplicateImproper Authentication - Generic · medium
   1 votes