HexBrain
Sign in

Browse / Linux Foundation Decentralized Trust

Linux Foundation Decentralized Trust

26disclosed reports
$6,500paid in bounties
52known subdomains

See its reports on the map

Attack surface: 52 known subdomains

listsbesuwwwaws-le-testchallengechatcloudcnconfluenced2devdiscussdltlandscapeesfabricfrgerritgitgridjajenkinsjenkins-newjirajpll2labslandscape

52subdomains across 1 root domain

All subdomainsLoading…
    Download all 52

    Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

    What gets reported to Linux Foundation Decentralized Trust

    Most upvoted reports

    AllValidInformativeN/ADuplicate

    1. Brute Force of fabric-ca server admin accountImproper Restriction of Authentication Attempts · high
      61 votes
    2. Docker Secret Disclosure via GitHub Actions Cache PoisoningInformation Disclosure · high
      56 votes
    3. many commands can be manipulated to delete identities or affiliationsImproper Authentication - Generic · medium
      $50043 votes
    4. POOL_UPGRADE request handler may allow an unauthenticated attacker to remotely execute code on every node in the network. Command Injection - Generic · critical
      $2,00039 votes
    5. CVE-2023-46132Deserialization of Untrusted Data · high
      34 votes
    6. Remote denial of service in HyperLedger FabricUncontrolled Resource Consumption · high
      32 votes
    7. Code exec on Github runner via Pull request nameCode Injection · medium
      26 votes
    8. Memory Leak in bytes_to_hexstring FunctionUse After Free · low
      25 votes
    9. Unauthorized packages modification or secrets exfiltration via GitHub actionsImproper Access Control - Generic · high
      $1,50025 votes
    10. DOS validator nodes of blockchain to block external connectionsUncontrolled Resource Consumption · high
      $1,50020 votes
    11. Remote denial of service in HyperLedger FabricUncontrolled Resource Consumption · high
      12 votes
    12. RCE vulnerability in Hyperledger Fabric SDK for JavaDeserialization of Untrusted Data · medium
      $20012 votes
    13. Fix : (Security) Mitigate Path Traversal BugPath Traversal · low
      $2006 votes
    14. Enrolling to a CA that returns an empty response crashes the node processUncontrolled Resource Consumption · medium
      $5006 votes
    15. CVE-2017-5929: Hyperledger - Arbitrary Deserialization of Untrusted Data
      5 votes
    16. [indy_node]POOL_UPGRADE command injection, Trustee Node can execute command in any other Node`s system.OS Command Injection
      2 votes