HexBrain
Sign in

Browse / Pornhub

Pornhub

94disclosed reports
$94,220paid in bounties

See its reports on the map

What gets reported to Pornhub

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. [phpobject in cookie] Remote shell/command executionCode Injection
    $20,000607 votes
  2. Deserialization of untrusted data at https://www.redtube.com/media/hls?s=dataDeserialization of Untrusted Data
    $10,000271 votes
  3. idor allows you to delete photos and album from a galleryInsecure Direct Object Reference (IDOR)
    $1,500266 votes
  4. IDOR allows any user to edit others videosInsecure Direct Object Reference (IDOR)
    $1,500248 votes
  5. Blind SQL injection and making any profile comments from any users to disappear using "like" function (2 in 1 issues)SQL Injection
    211 votes
  6. Publicly exposed SVN repository, ht.pornhub.comCode Injection
    $10,000211 votes
  7. Blind SQL injection in Hall of FapSQL Injection
    179 votes
  8. CRITICAL ISSUE : Leak of all accounts mail login md5 pass and moreImproper Access Control - Generic
    157 votes
  9. Multiple endpoints are vulnerable to XML External Entity injection (XXE) Denial of Service
    $2,500138 votes
  10. View storyboard of private video @ ht.pornhub.comInformation Disclosure
    $750130 votes
  11. vulnerabilitieImproper Authentication - Generic
    127 votes
  12. XSS via JavaScript evaluation of an attacker controlled resource at www.pornhub.comCross-site Scripting (XSS) - Generic
    $250109 votes
  13. [RCE] Unserialize to XXE - file disclosure on ams.upload.pornhub.comInformation Disclosure
    90 votes
  14. xssCross-site Scripting (XSS) - Reflected
    84 votes
  15. Reflect XSS on Mobile Search page Cross-site Scripting (XSS) - Reflected
    $25079 votes
  16. Unsecured DB instanceCode Injection
    $5,00073 votes
  17. Blind XSS in redtube administering site my.reflected.netCross-site Scripting (XSS) - Stored
    $1,00072 votes
  18. Reflected XSS on www.pornhub.com and www.pornhubpremium.comCross-site Scripting (XSS) - Reflected
    $75071 votes
  19. SSRF and local file disclosure by video upload on https://www.redtube.com/uploadServer-Side Request Forgery (SSRF)
    $50061 votes
  20. [idor] Unauthorized Read access to all the private posts(Including Photos,Videos,Gifs)Improper Authentication - Generic
    $1,50058 votes
  21. SSRF and local file disclosure by video upload on https://www.tube8.com/Server-Side Request Forgery (SSRF)
    $50053 votes
  22. Wordpress Content injection Command Injection - Generic
    $1,50048 votes
  23. Stored XSS in photo comment functionalityCross-site Scripting (XSS) - Generic
    44 votes
  24. Stored XSS (client-side, using cookie poisoning) on the pornhubpremium.comCross-site Scripting (XSS) - Stored
    40 votes
  25. RCE Possible Via Video Manager Export using @ character in Video TitleCommand Injection - Generic
    $50038 votes
  26. Stored XSS on the https://www.redtube.com/users/[profile]/collectionsCross-site Scripting (XSS) - Stored
    36 votes
  27. Unsecured Elasticsearch InstanceImproper Authentication - Generic
    $3,50036 votes
  28. SSRF and local file disclosure by video upload on http://www.youporn.com/Server-Side Request Forgery (SSRF)
    $50035 votes
  29. Stored XSS in galleries - https://www.redtube.com/gallery/[id] pathCross-site Scripting (XSS) - Stored
    35 votes
  30. [stored xss, pornhub.com] stream post functionCross-site Scripting (XSS) - Generic
    $1,50035 votes
  31. IDOR - disclosure of private videos - /api_android_v3/getUserVideosImproper Authentication - Generic
    $1,50032 votes
  32. [IDOR] post to anyone even if their stream is restricted to friends onlyImproper Authentication - Generic
    31 votes
  33. Time Based SQL-inject in post-parametr login[username] [domain - youporn.com]SQL Injection
    $2,50030 votes
  34. Weak user aunthentication on mobile application - I just broken userKey secret passwordImproper Authentication - Generic
    $5,00029 votes
  35. [xss, pornhub.com] /, multiple parametersCross-site Scripting (XSS) - Generic
    $25028 votes
  36. I am because bug
    27 votes
  37. Self-XSS to Good-XSS - pornhub.comCross-site Scripting (XSS) - Generic
    25 votes
  38. XSS reflected on [https://www.youporn.com]Cross-site Scripting (XSS) - Reflected
    $15025 votes
  39. [IDOR] Deleting other users commentImproper Authentication - Generic
    25 votes
  40. Single User DOS by Poisoning Cookie via Get ParameterDenial of Service
    22 votes
  41. Possibility to insert stored XSS inside <img> tagCross-site Scripting (XSS) - Stored
    22 votes
  42. Add a video to favourite list of any user [via YouPorn API / FrontEnd]Improper Authentication - Generic
    19 votes
  43. XSS vulnerability using GIF tagsCross-site Scripting (XSS) - Generic
    19 votes
  44. Unsecured Kibana/Elasticsearch instanceServer-Side Request Forgery (SSRF)
    $75018 votes
  45. Unsecured Grafana instanceImproper Authentication - Generic
    $75018 votes
  46. Partial disclosure of Private Videos through data-mediabook attribute information leakInformation Disclosure
    17 votes
  47. IDOR - Access to private video thumbnails even if video requires password authenticationImproper Authentication - Generic
    17 votes
  48. Account takeover via Pornhub OauthImproper Authentication - Generic
    $1,00017 votes
  49. (Pornhub & Youporn & Brazzers ANDROID APP) : Upload Malicious APK / Overrite Existing APK / Android BackOffice Access Code Injection
    $1,50016 votes
  50. Mobile Reflect XSS / CSRF at Advertisement Section on Search pageCross-site Scripting (XSS) - Reflected
    $20015 votes
  51. XSS on pornhubselect.comCross-site Scripting (XSS) - Reflected
    15 votes
  52. Find whether a video has been favourited or not, for any user [via YouPorn Mobile API]Improper Authentication - Generic
    15 votes
  53. Stored XSS in the any user profile using website linkCross-site Scripting (XSS) - Stored
    14 votes
  54. DOM-based XSS on youporn.com (main page)Cross-site Scripting (XSS) - DOM
    14 votes
  55. Private Photo Disclosure - /user/stream_photo_attach?load=album&id= endpointPrivilege Escalation
    14 votes
  56. Mixed Reflected-Stored XSS on pornhub.com (without user interaction) in the playlist playing sectionCross-site Scripting (XSS) - Generic
    13 votes
  57. Account hijack via deleted PH accountImproper Authentication - Generic
    $1,00013 votes
  58. Race Condition Vulnerability On Pornhubpremium.comBusiness Logic Errors
    $52013 votes
  59. Blind Stored XSS against Pornhub employees using Amateur Model ProgramCross-site Scripting (XSS) - Stored
    12 votes
  60. Public Facing Barracuda LoginCryptographic Issues - Generic
    $25012 votes
  61. youporn email notification enable/disable and newsletter Violation of Secure Design Principles
    11 votes
  62. XSS Vulnerability at https://www.pornhubpremium.com/premium_signup? URL endpoint Cross-site Scripting (XSS) - Generic
    $25011 votes
  63. Reflected XSS in login redirection moduleCross-site Scripting (XSS) - Reflected
    10 votes
  64. http://ht.pornhub.com/ stored XSS in widget stylesheetCross-site Scripting (XSS) - Generic
    10 votes
  65. Debug.log file Exposed to Public \Full Path Disclosure\Information Disclosure
    10 votes
  66. [ssrf] libav vulnerable during conversion of uploaded videosInformation Disclosure
    $1,50010 votes
  67. CSRF Full Account Takeover - https://redtube.com/settingsCross-Site Request Forgery (CSRF)
    9 votes
  68. XSS via login cookieCross-site Scripting (XSS) - Generic
    $1009 votes
  69. Stored XSS on the http://ht.pornhub.com/widgets/Cross-site Scripting (XSS) - Generic
    9 votes
  70. Disclosure of private photos/albums - http://www.pornhub.com/album/show_image_boxImproper Authentication - Generic
    $7509 votes
  71. Reflected XSS by way of jQuery functionCross-site Scripting (XSS) - Generic
    $509 votes
  72. Unprotected Memcache Installation runningImproper Authentication - Generic
    $2,5009 votes
  73. pornhub.com/user/welcome/basicinfo nickname field is vulnerable on xssCross-site Scripting (XSS) - DOM
    $7508 votes
  74. [Android API] SQL injection ( errortoken.json )SQL Injection
    8 votes
  75. Same-Origin Method Execution bug in plupload.flash.swf on /insightsCross-site Scripting (XSS) - Generic
    $1508 votes
  76. CSV Macro injection in Video Manager (CEMI)Command Injection - Generic
    $1008 votes
  77. [crossdomain.xml] Dangerous Flash Cross-Domain PolicyInformation Disclosure
    $508 votes
  78. Private videos can be added to our playlistsInsecure Direct Object Reference (IDOR)
    7 votes
  79. [idor] Profile Admin can pin any other user's post on his stream wallImproper Authentication - Generic
    $7507 votes
  80. SSRF & XSS (W3 Total Cache)Cross-site Scripting (XSS) - Generic
    $1,0007 votes
  81. PornIQ Reflected Cross-Site ScriptingCross-site Scripting (XSS) - Generic
    $2507 votes
  82. Unauthenticated access to Content Management System - www1.pornhubpremium.comCommand Injection - Generic
    $5,0007 votes
  83. Reflected XSS in Meta TagCross-site Scripting (XSS) - Generic
    $2506 votes
  84. Reflected cross-site scripting (XSS) vulnerability in pornhub.com allows attackers to inject arbitrary web script or HTML.Cross-site Scripting (XSS) - Generic
    $2005 votes
  85. Cross Site Scripting – Album PageCross-site Scripting (XSS) - Generic
    $505 votes
  86. HTTP Track/Trace Method EnabledInformation Disclosure
    $504 votes
  87. Reflected Cross-Site Scripting on French subdomainCross-site Scripting (XSS) - Generic
    $2504 votes
  88. Cross Site Scripting - On Mouse Over, Blog pageCross-site Scripting (XSS) - Generic
    $2504 votes
  89. [xss, pornhub.com] /user/[username], multiple parametersCross-site Scripting (XSS) - Generic
    $2504 votes
  90. [reflected xss, pornhub.com] /blog, anyCross-site Scripting (XSS) - Generic
    $1004 votes
  91. [xss] pornhubpremium.com, /redeem?code= URL endpoint Cross-site Scripting (XSS) - Generic
    $2503 votes
  92. XSS Reflected incategories*pCross-site Scripting (XSS) - Generic
    $2503 votes
  93. XSS ReflectedGET /*embed_player*?Cross-site Scripting (XSS) - Generic
    $2503 votes
  94. Reflected XSS on ht.pornhub.com - /export/GetPreviewCross-site Scripting (XSS) - Reflected
    1 votes