HexBrain
Sign in

Browse / Phabricator

Phabricator

73disclosed reports
$13,400paid in bounties

See its reports on the map

What gets reported to Phabricator

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Git flag injection leads to arbitrary file writePath Traversal · high
    54 votes
  2. Command injection on Phabricator instance with an evil hg branch nameCommand Injection - Generic · critical
    41 votes
  3. IDOR bug to See hidden slowvote of any user even when you dont have access rightInsecure Direct Object Reference (IDOR)
    $30036 votes
  4. SSRF in notifications.server configurationServer-Side Request Forgery (SSRF) · medium
    $30028 votes
  5. Broken Authentication and Session ManagementImproper Authentication - Generic
    26 votes
  6. Phabricator is vulnerable to padding oracle attacks and chosen-ciphertext attacks.Missing Required Cryptographic Step · medium
    $75023 votes
  7. Markdown parsing issue enables insertion of malicious tagsCross-site Scripting (XSS) - Stored
    21 votes
  8. Log in a user to another accountCross-Site Request Forgery (CSRF)
    $30021 votes
  9. User can link non-public file attachments, leading to file disclose on edit by higher-privileged userBusiness Logic Errors · medium
    $50020 votes
  10. Window.opener protection BypassImproper Access Control - Generic
    $30019 votes
  11. Possible to make restricted files public on Phabricator via DiffusionImproper Access Control - Generic
    $2,00017 votes
  12. Bypass auth.email-domainsImproper Authentication - Generic
    $1,00015 votes
  13. User with only Viewing Privilege can send message to RoomPrivilege Escalation · low
    $30014 votes
  14. Login CSRF using Twitter OAuthCross-Site Request Forgery (CSRF)
    14 votes
  15. Improperly implemented password recovery link functionalityImproper Authentication - Generic
    $30014 votes
  16. Bypass auth.email-domains (2)Improper Authentication - Generic
    $50013 votes
  17. Exposing voting results on the Slowvote application without actually votingInformation Disclosure · low
    $30012 votes
  18. Window.opener fix bypassImproper Access Control - Generic · low
    $30012 votes
  19. HTML in Diffusion not escaped in certain circumstancesCross-site Scripting (XSS) - Generic
    12 votes
  20. Administrator can create user without entering high security modeImproper Authentication - Generic · low
    11 votes
  21. Global default settings page is accessible to non-administratorsImproper Access Control - Generic
    $30010 votes
  22. Differential "Show Raw File" feature exposes generated files to unauthorised usersInformation Disclosure · medium
    10 votes
  23. OAuth Stealing Attack (New)Open Redirect
    $40010 votes
  24. Conduit feed.publish API allows you to spoof other users or make it look like you have access to a restricted objectImproper Access Control - Generic
    $3009 votes
  25. OAuth access_token stealing in PhabricatorOpen Redirect
    $4509 votes
  26. Fetching binaries (for software installation) over HTTP without verification (RCE as ROOT by MITM)Code Injection
    $3008 votes
  27. Forgot Password IssueImproper Authentication - Generic
    8 votes
  28. Persistent XSS: Editor linkCross-site Scripting (XSS) - Generic
    $3008 votes
  29. Control character allowed in username
    $3008 votes
  30. Deprecated owners.query API bypasses object view policyImproper Access Control - Generic
    $3007 votes
  31. TOTP Key is shorter than RFC 4226 recommended minimumCryptographic Issues - Generic
    $3007 votes
  32. IRC-Bot exposes informationInformation Disclosure · medium
    7 votes
  33. UnAuthorized Editorial Publishing to BlogsImproper Authentication - Generic
    $3007 votes
  34. Slowvote and Countdown can cause Denial of Service due to recursive inclusionUncontrolled Resource Consumption
    5 votes
  35. SSRF vulnerability (access to metadata server on EC2 and OpenStack)Information Disclosure
    $3004 votes
  36. Autoclose can close any task regardless of policies/spaces
    3 votes
  37. Phabricator Diffusion application allows unauthorized users to delete mirrorsImproper Authentication - Generic
    $3003 votes
  38. XSS in editor by any userCross-site Scripting (XSS) - Generic
    $1,0003 votes
  39. Passphrase credential lock bypassInformation Disclosure
    2 votes
  40. Multiple so called 'type juggling' attacks. Most notably PhabricatorUser::validateCSRFToken() is 'bypassable' in certain cases.Cross-Site Request Forgery (CSRF)
    2 votes
  41. XSS with Time-of-Day FormatCross-site Scripting (XSS) - Generic
    2 votes
  42. Phabricator Phame Blog Skins Local File InclusionCode Injection
    $5002 votes
  43. Open redirection on secure.phabricator.comOpen Redirect
    2 votes
  44. Abusing daemon logs for Privilege escalation under certain scenariosPrivilege Escalation
    $3002 votes
  45. Information leakage through Graphviz blocksInformation Disclosure
    1 votes
  46. Dashboard panel embedded onto itself causes a denial of serviceUncontrolled Resource Consumption
    1 votes
  47. Abusing VCS control on phabricatorPrivilege Escalation
    $6001 votes
  48. Extended policy checks are buggy
  49. libphutil: removing bytes from a PhutilRope does not work as intended