Browse / PortSwigger Web Security

PortSwigger Web Security

See its reports on the map

Attack surface: 928 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to PortSwigger Web Security

• Information Disclosure6
• Cryptography4
• Cross-site Scripting4
• Business Logic4
• Access Control4
• Code Execution3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Burp Suite extensions can execute arbitrary codeInformativeCode Injection · high
   85 votes
2. Title: Deceptive Manipulation of HTTP to HTTPS with VPN in Burp SuiteInformativeCleartext Transmission of Sensitive Information · medium
   71 votes
3. Incorrect logic when buy one more license which may lead to extend the expire date of existing licenseInformativeBusiness Logic Errors
   61 votes
4. Clicking "http://burp" hyperlink on FireFox CA Installation guide redirects to "burp.com" (unclaimed website).InformativeOpen Redirect · low
   22 votes
5. Incomplete fix for CVE-2022-35406: meta-redirect content-type check bypassable via parameter injectionInformativeOpen Redirect · high
   18 votes
6. Business Logic, currency arbitrage - Possibility to pay less than the price in USDInformativeBusiness Logic Errors · medium
   18 votes
7. Information disclosure on error messageInformativeInformation Exposure Through an Error Message · low
   18 votes
8. DLL Hijacking in Burp Suite Pro 2.0.19 InstallerInformativePrivilege Escalation · medium
   17 votes
9. No Rate Limit On Regenerate Password on PortswiggerInformativeImproper Restriction of Authentication Attempts
   11 votes
10. Order-phishing via Payment ID URLInformativeCross-Site Request Forgery (CSRF) · low
    6 votes
11. Misconfiguration: Missing Custom Error Page (CWE-12 & CWE-756)InformativeMisconfiguration
    4 votes
12. Improper Certificate ValidationInformativeImproper Certificate Validation · low