Browse / PlayStation
PlayStation
20disclosed reports
$122,200paid in bounties
What gets reported to PlayStation
Most upvoted reports
AllValidInformativeN/ADuplicate
- Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' ApplicationCode Injection · critical$15,000780 votes
- Use-After-Free In IPV6_2292PKTOPTIONS leading To Arbitrary Kernel R/W PrimitivesUse After Free · high$10,000741 votes
- bd-j exploit chainPrivilege Escalation · high$20,000298 votes
- SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECKDouble Free · high$10,000298 votes
- size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drivesIncorrect Calculation of Buffer Size · high$10,000280 votes
- sys_fsc2h_ctrl kernel stack freeUse After Free · high$10,000236 votes
- Double fdrop on a socket through sys_netcontrolDouble Free · high$10,000228 votes
- Remote vulnerabilities in sppClassic Buffer Overflow · high$12,500197 votes
- Access token stealing.Missing Authorization · high$1,200177 votes
- SSRF chained to hit internal host leading to another SSRF which allows to read internal images.Server-Side Request Forgery (SSRF) · high$1,000148 votes
- Access Token Smuggling from my.playstation.com via Referer HeaderViolation of Secure Design Principles · high$1,000147 votes
- Blu-ray Disc Java Sandbox Escape via two vulnerabilities Execution with Unnecessary Privileges · medium$5,000146 votes
- Use-after-free in setsockopt IPV6_2292PKTOPTIONS (CVE-2020-7457)Use After Free · high$10,000143 votes
- SMAP bypassImproper Access Control - Generic · medium110 votes
- SSRF on image rendererServer-Side Request Forgery (SSRF) · high$1,000103 votes
- Reflected XSS on transact.playstation.com using postMessage from the opening windowCross-site Scripting (XSS) - Reflected · high$1,00098 votes
- PS4 BD-J privilege escalation using nested JARPrivilege Escalation · medium$2,50086 votes
- Remote kernel heap overflowHeap Overflow · high86 votes
- Authorization Token on PlayStation Network Leaks via postMessage functionViolation of Secure Design Principles · high$1,00074 votes
- Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of applicationMissing Authorization · high$1,00049 votes