Browse / Passit

Passit

See its reports on the map

What gets reported to Passit

• Authentication7
• Misconfiguration3
• Code Execution1
• Information Disclosure1
• Open Redirect1
• Other weaknesses1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. URL is vulnerable to clickjacking https://app.passit.io/UI Redressing (Clickjacking)
   28 votes
2. Old sessions does not expire On changing password via https://app.passit.io/account/change-password Insufficient Session Expiration
   21 votes
3. password rest link not expired after change the passwordImproper Authentication - Generic
   19 votes
4. Session not changed after password resetImproper Authentication - Generic
   13 votes
5. CSV-injection in export functionalityCommand Injection - Generic
   12 votes
6. app.passit.io is vulnerable against username enumerationInformation Exposure Through Debug Information
   9 votes
7. Insecure opening of external links in app.passit.io/list allows for reverse tabnabbingOpen Redirect
   9 votes
8. X-Content-Type-Options has not been set at app.passit.io
   9 votes
9. `X-XSS-Protection` header has not been set at app.passit.ioCross-site Scripting (XSS) - Generic
   8 votes
10. Authentication Required When password change Improper Authentication - Generic
    8 votes
11. Missing HSTS (Strict Transport Security)Violation of Secure Design Principles
    7 votes
12. Authorization Token is Not expiring After LogoutImproper Authentication - Generic
    7 votes
13. Weak Password Policy on SignupImproper Authentication - Generic
    5 votes
14. Insecure Account RemovalViolation of Secure Design Principles
    4 votes
15. app.passit.io is vulnerable against Brute Force password quessing attackBrute Force
    4 votes