Browse / Lab45

Lab45

See its reports on the map

What gets reported to Lab45

• Cross-site Scripting13
• Cross-Site Request Forgery5
• Information Disclosure2
• Insecure Direct Object Reference1
• Server-Side Request Forgery1
• Injection and Smuggling1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. PII of Users Disclosure using "/members/invite/" endpointInformation Disclosure · high
   54 votes
2. Cross Site Scripting via CVE-2018-5230 on https://apps.topcoder.comCross-site Scripting (XSS) - Reflected · medium
   43 votes
3. IDOR on deleting drafts on https://apps.topcoder.com/wiki/users/viewmydrafts.action via discardDraftId parameterInsecure Direct Object Reference (IDOR) · medium
   34 votes
4. SSRF to AWS file readServer-Side Request Forgery (SSRF) · critical
   30 votes
5. Reflected XSS in https://www.topcoder.com/blog/category/community-stories/Cross-site Scripting (XSS) - Reflected · low
   22 votes
6. Blind stored XSS due to insecure contact form at https://www.topcoder.com leads to leakage of session token and other PIICross-site Scripting (XSS) - Stored · high
   19 votes
7. Reflected XSS on https://apps.topcoder.com/wiki/page/Cross-site Scripting (XSS) - Reflected · medium
   19 votes
8. SVG file upload leads to XML injectionXML Injection · low
   14 votes
9. IDOR at https://fast.trychameleon.com/observe/v2/profiles/ via uid parameter discloses users' PII dataInformation Disclosure · medium
   13 votes
10. Reflected XSS on https://apps.topcoder.com/wiki/Cross-site Scripting (XSS) - Reflected · medium
    13 votes
11. Stored-Xss at connect.topcoder.com/projects/ affected on project chat membersCross-site Scripting (XSS) - Stored · high
    11 votes
12. Stored XSS on https://apps.topcoder.com/wiki/pages/editpage.actionCross-site Scripting (XSS) - Stored · high
    10 votes
13. Reflected-XSS on https://www.topcoder.com/tc via pt parameterCross-site Scripting (XSS) - Reflected · medium
    9 votes
14. CSRF on https://apps.topcoder.com/wiki/pages/doattachfile.actionCross-Site Request Forgery (CSRF) · medium
    7 votes
15. CSRF on https://apps.topcoder.com/wiki/users/editmyprofilepicture.actionCross-Site Request Forgery (CSRF) · medium
    6 votes
16. Stored XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.actionCross-site Scripting (XSS) - Stored · high
    6 votes
17. Reflected XSS on https://apps.topcoder.com/wiki/pages/createpage.actionCross-site Scripting (XSS) - Reflected · medium
    6 votes
18. CSRF on https://apps.topcoder.com/wiki/users general and email preferencesCross-Site Request Forgery (CSRF) · medium
    4 votes
19. CSRF on https://apps.topcoder.com/wiki/users/editmyprofile.actionCross-Site Request Forgery (CSRF) · medium
    4 votes
20. Reflected XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.actionCross-site Scripting (XSS) - Reflected · medium
    4 votes
21. Reflected XSS on error page on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.actionCross-site Scripting (XSS) - Reflected · medium
    3 votes
22. CSRF on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.actionCross-Site Request Forgery (CSRF) · medium
    3 votes
23. Post Based Reflected XSS on https://apps.topcoder.com/wiki/plugins/socialbookmarking/updatebookmark.actionCross-site Scripting (XSS) - Reflected · medium
    3 votes