Browse / PlayStation

PlayStation

See its reports on the map

Attack surface: 10,273 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to PlayStation

• Memory Corruption8
• Access Control6
• Server-Side Request Forgery2
• Misconfiguration2
• Code Execution1
• Cross-site Scripting1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Websites Can Run Arbitrary Code on Machines Running the 'PlayStation Now' ApplicationCode Injection · critical
   $15,000780 votes
2. Use-After-Free In IPV6_2292PKTOPTIONS leading To Arbitrary Kernel R/W PrimitivesUse After Free · high
   $10,000741 votes
3. bd-j exploit chainPrivilege Escalation · high
   $20,000298 votes
4. SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECKDouble Free · high
   $10,000298 votes
5. size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drivesIncorrect Calculation of Buffer Size · high
   $10,000280 votes
6. sys_fsc2h_ctrl kernel stack freeUse After Free · high
   $10,000236 votes
7. Double fdrop on a socket through sys_netcontrolDouble Free · high
   $10,000228 votes
8. Remote vulnerabilities in sppClassic Buffer Overflow · high
   $12,500197 votes
9. Access token stealing.Missing Authorization · high
   $1,200177 votes
10. SSRF chained to hit internal host leading to another SSRF which allows to read internal images.Server-Side Request Forgery (SSRF) · high
    $1,000148 votes
11. Access Token Smuggling from my.playstation.com via Referer HeaderViolation of Secure Design Principles · high
    $1,000147 votes
12. Blu-ray Disc Java Sandbox Escape via two vulnerabilities Execution with Unnecessary Privileges · medium
    $5,000146 votes
13. Use-after-free in setsockopt IPV6_2292PKTOPTIONS (CVE-2020-7457)Use After Free · high
    $10,000143 votes
14. SMAP bypassImproper Access Control - Generic · medium
    110 votes
15. SSRF on image rendererServer-Side Request Forgery (SSRF) · high
    $1,000103 votes
16. Reflected XSS on transact.playstation.com using postMessage from the opening windowCross-site Scripting (XSS) - Reflected · high
    $1,00098 votes
17. PS4 BD-J privilege escalation using nested JARPrivilege Escalation · medium
    $2,50086 votes
18. Remote kernel heap overflowHeap Overflow · high
    86 votes
19. Authorization Token on PlayStation Network Leaks via postMessage functionViolation of Secure Design Principles · high
    $1,00074 votes
20. Unrestricted access to quiesce functionality in dss.api.playstation.com REST API leads to unavailability of applicationMissing Authorization · high
    $1,00049 votes