Browse / Keybase

Keybase

See its reports on the map

What gets reported to Keybase

• Access Control10
• Misconfiguration5
• Cross-site Scripting4
• Business Logic4
• Information Disclosure4
• Denial of Service3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Persistent XSS on keybase.io via "payload" field in `/user/sigchain_signature.toffee` templateCross-site Scripting (XSS) - Stored
   266 votes
2. Linux privilege escalation via trusted $PATH in keybase-redirector Privilege Escalation
   $5,000245 votes
3. Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" featureRemote File Inclusion
   $5,000196 votes
4. SOP bypass using browser cacheImproper Access Control - Generic
   185 votes
5. XSS on Desktop ClientCross-site Scripting (XSS) - DOM
   175 votes
6. Privilege Escalation via Keybase HelperPrivilege Escalation
   115 votes
7. Keybase client: downloaded executables lack "com.apple.quarantine" meta-attribute [macOS]
   $4,00077 votes
8. Claiming ownership of GitHub handles via forked GitHub gists.Business Logic Errors
   $1,00071 votes
9. From nobody to somebodyPrivilege Escalation
   47 votes
10. macOS privilege escalationPrivilege Escalation
    44 votes
11. Privilege Escalation via Keybase Helper (incomplete security fix)Privilege Escalation
    42 votes
12. [keybase.io] Open RedirectOpen Redirect
    $50040 votes
13. Race conditions can be used to bypass invitation limitImproper Access Control - Generic
    39 votes
14. Keybase extension hostname-validation regular expression issue.Business Logic Errors
    $2,00037 votes
15. Difference in query string parameter processing between Hacker News and Keybase Chrome extension spawns chat to incorrect userViolation of Secure Design Principles
    $50035 votes
16. Keybase /AppData/Local/Keybase/uploadtemps folder stores pasted photosCleartext Storage of Sensitive Information
    25 votes
17. Remote Server Restart Lead to Denial of Service by only one Request.Uncontrolled Resource Consumption
    $25025 votes
18. Local privilege escalation bug using Keybase redirector on macOSPrivilege Escalation
    23 votes
19. Universal Cross-Site Scripting in Keybase Chrome extensionCross-site Scripting (XSS) - DOM
    $50023 votes
20. Register multiple users using one invitation (race condition)Business Logic Errors
    23 votes
21. Privilege Escalation through Keybase Installer via HelperPrivilege Escalation
    $2,50017 votes
22. macOS privilege escalation via keybase installPrivilege Escalation
    $1,25012 votes
23. Fix bypass of different processing of usernames on HackernewsBusiness Logic Errors
    $10011 votes
24. Denial of Service through set_preference.jsonUncontrolled Resource Consumption
    9 votes
25. No rate limiting for sensitive actions (like "forgot password") enables user enumerationViolation of Secure Design Principles
    $2506 votes
26. Stealing CSRF TokensCross-Site Request Forgery (CSRF)
    6 votes
27. SMTP protection not usedViolation of Secure Design Principles
    4 votes
28. Un-handled exception leads to Information DisclosureInformation Disclosure
    3 votes
29. xss Cross-site Scripting (XSS) - Generic
    3 votes
30. Sensitive server-side/application information disclosureInformation Disclosure
    2 votes
31. Full path disclosure at https://keybase.io/_/api/1.0/invitation_request.jsonInformation Disclosure
    $1002 votes
32. Content spoofing due to the improper behavior of the not-found meesageViolation of Secure Design Principles
    1 votes
33. Content Sniffing not disabledCryptographic Issues - Generic
    1 votes
34. NO SPF RECORDS Violation of Secure Design Principles
    1 votes
35. Remote Server Restart Lead to Denial of Server by only one Request.Uncontrolled Resource Consumption
    $250