Browse / Liberapay

Liberapay

See its reports on the map

Attack surface: 36 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Liberapay

• Information Disclosure8
• Authentication7
• Misconfiguration7
• Cross-Site Request Forgery6
• Business Logic6
• Access Control4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Broken Authentication and session management OWASP A2N/AImproper Authentication - Generic
   24 votes
2. Improper Data Validation / Unvalidated InputN/AClassic Buffer Overflow
   8 votes
3. twitter api access token leaked on github N/ACleartext Storage of Sensitive Information
   4 votes
4. Cross site scripting (content-sniffing)N/ACross-site Scripting (XSS) - DOM
   3 votes
5. Unsecure changing passwordN/AImproper Authentication - Generic
   3 votes
6. Publicly editable GitHub wikisN/AImproper Access Control - Generic · high
   2 votes
7. Buffer overflowN/AClassic Buffer Overflow
   1 votes
8. Returning back from the browser after logging off will disclose some informationN/ABusiness Logic Errors
   1 votes