HexBrain

Browse / PlayStation

PlayStation

20disclosed reports
$122,200paid in bounties

See its reports on the map

What gets reported to PlayStation

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' ApplicationCode Injection · critical
    $15,000780 votes
  2. Use-After-Free In IPV6_2292PKTOPTIONS leading To Arbitrary Kernel R/W PrimitivesUse After Free · high
    $10,000741 votes
  3. bd-j exploit chainPrivilege Escalation · high
    $20,000298 votes
  4. SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECKDouble Free · high
    $10,000298 votes
  5. size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drivesIncorrect Calculation of Buffer Size · high
    $10,000280 votes
  6. sys_fsc2h_ctrl kernel stack freeUse After Free · high
    $10,000236 votes
  7. Double fdrop on a socket through sys_netcontrolDouble Free · high
    $10,000228 votes
  8. Remote vulnerabilities in sppClassic Buffer Overflow · high
    $12,500197 votes
  9. Access token stealing.Missing Authorization · high
    $1,200177 votes
  10. SSRF chained to hit internal host leading to another SSRF which allows to read internal images.Server-Side Request Forgery (SSRF) · high
    $1,000148 votes
  11. Access Token Smuggling from my.playstation.com via Referer HeaderViolation of Secure Design Principles · high
    $1,000147 votes
  12. Blu-ray Disc Java Sandbox Escape via two vulnerabilities Execution with Unnecessary Privileges · medium
    $5,000146 votes
  13. Use-after-free in setsockopt IPV6_2292PKTOPTIONS (CVE-2020-7457)Use After Free · high
    $10,000143 votes
  14. SMAP bypassImproper Access Control - Generic · medium
    110 votes
  15. SSRF on image rendererServer-Side Request Forgery (SSRF) · high
    $1,000103 votes
  16. Reflected XSS on transact.playstation.com using postMessage from the opening windowCross-site Scripting (XSS) - Reflected · high
    $1,00098 votes
  17. PS4 BD-J privilege escalation using nested JARPrivilege Escalation · medium
    $2,50086 votes
  18. Remote kernel heap overflowHeap Overflow · high
    86 votes
  19. Authorization Token on PlayStation Network Leaks via postMessage functionViolation of Secure Design Principles · high
    $1,00074 votes
  20. Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of applicationMissing Authorization · high
    $1,00049 votes