HexBrain
Sign in

Browse / Phabricator

Phabricator

73disclosed reports
$13,400paid in bounties

See its reports on the map

What gets reported to Phabricator

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Git flag injection leads to arbitrary file writePath Traversal · high
    54 votes
  2. Command injection on Phabricator instance with an evil hg branch nameCommand Injection - Generic · critical
    41 votes
  3. IDOR bug to See hidden slowvote of any user even when you dont have access rightInsecure Direct Object Reference (IDOR)
    $30036 votes
  4. SSRF in notifications.server configurationServer-Side Request Forgery (SSRF) · medium
    $30028 votes
  5. Broken Authentication and Session ManagementImproper Authentication - Generic
    26 votes
  6. Phabricator is vulnerable to padding oracle attacks and chosen-ciphertext attacks.Missing Required Cryptographic Step · medium
    $75023 votes
  7. Markdown parsing issue enables insertion of malicious tagsCross-site Scripting (XSS) - Stored
    21 votes
  8. Log in a user to another accountCross-Site Request Forgery (CSRF)
    $30021 votes
  9. User can link non-public file attachments, leading to file disclose on edit by higher-privileged userBusiness Logic Errors · medium
    $50020 votes
  10. Window.opener protection BypassImproper Access Control - Generic
    $30019 votes
  11. Possible to make restricted files public on Phabricator via DiffusionImproper Access Control - Generic
    $2,00017 votes
  12. Bypass auth.email-domainsImproper Authentication - Generic
    $1,00015 votes
  13. User with only Viewing Privilege can send message to RoomPrivilege Escalation · low
    $30014 votes
  14. Login CSRF using Twitter OAuthCross-Site Request Forgery (CSRF)
    14 votes
  15. Improperly implemented password recovery link functionalityImproper Authentication - Generic
    $30014 votes
  16. Bypass auth.email-domains (2)Improper Authentication - Generic
    $50013 votes
  17. Exposing voting results on the Slowvote application without actually votingInformation Disclosure · low
    $30012 votes
  18. Window.opener fix bypassImproper Access Control - Generic · low
    $30012 votes
  19. HTML in Diffusion not escaped in certain circumstancesCross-site Scripting (XSS) - Generic
    12 votes
  20. Administrator can create user without entering high security modeImproper Authentication - Generic · low
    11 votes
  21. Global default settings page is accessible to non-administratorsImproper Access Control - Generic
    $30010 votes
  22. Differential "Show Raw File" feature exposes generated files to unauthorised usersInformation Disclosure · medium
    10 votes
  23. OAuth Stealing Attack (New)Open Redirect
    $40010 votes
  24. Conduit feed.publish API allows you to spoof other users or make it look like you have access to a restricted objectImproper Access Control - Generic
    $3009 votes
  25. OAuth access_token stealing in PhabricatorOpen Redirect
    $4509 votes
  26. Issue:Form does not contain an anti-CSRF tokenN/ACross-Site Request Forgery (CSRF) · high
    8 votes
  27. Fetching binaries (for software installation) over HTTP without verification (RCE as ROOT by MITM)Code Injection
    $3008 votes
  28. Forgot Password IssueImproper Authentication - Generic
    8 votes
  29. Persistent XSS: Editor linkCross-site Scripting (XSS) - Generic
    $3008 votes
  30. Control character allowed in username
    $3008 votes
  31. Deprecated owners.query API bypasses object view policyImproper Access Control - Generic
    $3007 votes
  32. TOTP Key is shorter than RFC 4226 recommended minimumCryptographic Issues - Generic
    $3007 votes
  33. IRC-Bot exposes informationInformation Disclosure · medium
    7 votes
  34. UnAuthorized Editorial Publishing to BlogsImproper Authentication - Generic
    $3007 votes
  35. Slowvote and Countdown can cause Denial of Service due to recursive inclusionUncontrolled Resource Consumption
    5 votes
  36. Request vulnerable to CSRFN/ACross-Site Request Forgery (CSRF) · high
    5 votes
  37. The special code in editor has no Authority control and can lead to Information DisclosureInformativeInformation Disclosure · medium
    5 votes
  38. The mailbox verification API interface is unlimited and can be used as a mailbox bombN/AImproper Access Control - Generic · medium
    5 votes
  39. Enumerating emails through "Forgot Password" formInformativeViolation of Secure Design Principles
    5 votes
  40. Content Spoofing through URLInformativeViolation of Secure Design Principles
    5 votes
  41. Broken Authentication and Session Management lead to take over accountN/AImproper Access Control - Generic · high
    4 votes
  42. Error page Text Injection.N/AViolation of Secure Design Principles
    4 votes
  43. SSRF vulnerability (access to metadata server on EC2 and OpenStack)Information Disclosure
    $3004 votes
  44. Password Reset Links Not ExpiringInformativeImproper Authentication - Generic
    4 votes
  45. Edit Policy restriction does not prevent comments.InformativeImproper Access Control - Generic · medium
    3 votes
  46. Autoclose can close any task regardless of policies/spaces
    3 votes
  47. Restricted file access when it exists in old versions of task or wiki documentInformativeViolation of Secure Design Principles
    3 votes
  48. link reset problemN/A
    3 votes
  49. No authentication required to add an email address.InformativeImproper Authentication - Generic
    3 votes
  50. Server Side Request Forgery in macro creationInformativeInformation Disclosure
    3 votes
  51. Phabricator Diffusion application allows unauthorized users to delete mirrorsImproper Authentication - Generic
    $3003 votes
  52. Content spoofingInformativeCross-site Scripting (XSS) - Generic
    3 votes
  53. Password Policy issueInformativeViolation of Secure Design Principles
    3 votes
  54. Back - Refresh - Attack To Obtain User CredentialsInformativeInformation Disclosure
    3 votes
  55. XSS in editor by any userCross-site Scripting (XSS) - Generic
    $1,0003 votes
  56. An unsafe design practice in the Passphrase may result in Secret being accidentally changed.InformativeViolation of Secure Design Principles · high
    2 votes
  57. Passphrase credential lock bypassInformation Disclosure
    2 votes
  58. Multiple so called 'type juggling' attacks. Most notably PhabricatorUser::validateCSRFToken() is 'bypassable' in certain cases.Cross-Site Request Forgery (CSRF)
    2 votes
  59. XSS with Time-of-Day FormatCross-site Scripting (XSS) - Generic
    2 votes
  60. Phabricator Phame Blog Skins Local File InclusionCode Injection
    $5002 votes
  61. Content injection InformativeViolation of Secure Design Principles
    2 votes
  62. Open redirection on secure.phabricator.comOpen Redirect
    2 votes
  63. Abusing daemon logs for Privilege escalation under certain scenariosPrivilege Escalation
    $3002 votes
  64. CSRF token valid even after the session logout of a particular userInformativeCross-Site Request Forgery (CSRF)
    2 votes
  65. The "Download Raw Diff" URL is viewable by everyoneInformativeInformation Disclosure · low
    1 votes
  66. Credential gets exposedInformativeInformation Disclosure · low
    1 votes
  67. Hyper Link Injection In email and Space Characters Allowed at Password Field.InformativeImproper Authentication - Generic · medium
    1 votes
  68. Full path disclosureInformativeInformation Disclosure
    1 votes
  69. Information leakage through Graphviz blocksInformation Disclosure
    1 votes
  70. Dashboard panel embedded onto itself causes a denial of serviceUncontrolled Resource Consumption
    1 votes
  71. Abusing VCS control on phabricatorPrivilege Escalation
    $6001 votes
  72. Extended policy checks are buggy
  73. libphutil: removing bytes from a PhutilRope does not work as intended