HexBrain

Browse / Liberapay

Liberapay

49disclosed reports
$200paid in bounties
36known subdomains

See its reports on the map

Attack surface: 36 known subdomains

liberapay.orgcacsdadeeleneoesfddkimfifrgahuiditjakomailcheckmsnbnlplptrorusksv

36subdomains across 2 root domains

All subdomainsLoading…

    Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

    What gets reported to Liberapay

    Most upvoted reports

    AllValidInformativeN/ADuplicate

    1. Csrf token does not meet security designDuplicateCross-Site Request Forgery (CSRF)
      1 votes
    2. The csrf token remains same after user logs inDuplicateViolation of Secure Design Principles
      1 votes