Browse / Palo Alto Software

Palo Alto Software

See its reports on the map

Attack surface: 2,377 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Palo Alto Software

• Access Control3
• Insecure Direct Object Reference2
• Cross-site Scripting1
• Authentication1
• Path Traversal1
• Misconfiguration1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Stored XSS on upload files leads to steal cookieCross-site Scripting (XSS) - Stored · high
   59 votes
2. weak protection against brute-forcing on login api leads to account takeover Improper Restriction of Authentication Attempts · critical
   24 votes
3. IDOR on notes to HTML injectionInsecure Direct Object Reference (IDOR) · medium
   22 votes
4. IDOR on update user preferencesInsecure Direct Object Reference (IDOR) · critical
   21 votes
5. [Bypass #870709] Unauthorised access to pagespeed global admin at https://webtools.paloalto.com/Improper Access Control - Generic · medium
   20 votes
6. Subdomain takeover of www2.growasyouplan.comExternally Controlled Reference to a Resource in Another Sphere · medium
   15 votes
7. Unauthorised access to pagespeed global admin at https://webtools.paloalto.com/Improper Access Control - Generic
   11 votes
8. DNS Miconfiguration Leads to Subdomain Takeover - max1.liveplan.comPrivilege Escalation · high
   10 votes
9. ClickjackingUI Redressing (Clickjacking)
   8 votes