Browse / Pushwoosh

Pushwoosh

See its reports on the map

What gets reported to Pushwoosh

• Information Disclosure6
• Misconfiguration3
• Cross-site Scripting3
• Authentication2
• Denial of Service1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Development configuration fileInformation Disclosure · critical
   23 votes
2. Bypass the resend limit in Send InvitesViolation of Secure Design Principles · medium
   16 votes
3. Spoof Email with Hyperlink Injection via Invites functionalityViolation of Secure Design Principles · low
   14 votes
4. Read Application Name , Subscribers Count Information Disclosure · medium
   13 votes
5. Publicy accessible IDRAC instance at api-m.inapp.pushwoosh.comImproper Authentication - Generic · low
   11 votes
6. Nginx version disclosure via response headerInformation Disclosure · low
   11 votes
7. Password Forgot/Password Reset Request BugUncontrolled Resource Consumption · high
   11 votes
8. Reflected Xss on Cross-site Scripting (XSS) - Generic · low
   11 votes
9. Cross-Site Scripting Stored On Rich MediaCross-site Scripting (XSS) - Generic
   10 votes
10. Administrator Access To Management ConsoleCommand Injection - Generic · critical
    9 votes
11. Unsecured Grafana instanceImproper Authentication - Generic · critical
    9 votes
12. Nginx server version disclosureInformation Disclosure · low
    9 votes
13. htaccess file is accesibleInformation Disclosure · low
    9 votes
14. ClickjackingUI Redressing (Clickjacking) · medium
    7 votes
15. Cleartext Password returned in JSON responseCleartext Storage of Sensitive Information · low
    6 votes
16. Stored XSS in FiltersCross-site Scripting (XSS) - Generic
    6 votes
17. Spam Some one using (user.saveInvite) systemMemory Corruption - Generic · low
    5 votes