Browse / RBKmoney

RBKmoney

See its reports on the map

What gets reported to RBKmoney

• Insecure Direct Object Reference1
• Misconfiguration1
• Cryptography1
• Cross-site Scripting1
• Open Redirect1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. IDOR in merchant.rbmonkey.com allows deleting eShops of another userInsecure Direct Object Reference (IDOR) · high
   15 votes
2. SUBDOMAIN TAKEOVER [http://dev.rbk.money/]Violation of Secure Design Principles · medium
   11 votes
3. Apple Pay cryptogram replay and amount tamperingCryptographic Issues - Generic · high
   8 votes
4. DOM-based Cross-Site Scripting in redirect url checkoutCross-site Scripting (XSS) - DOM · medium
   8 votes
5. Open Redirection on auth.rbk.moneyOpen Redirect · low
   7 votes
6. Information Disclosure - Composer.lockDuplicateInformation Disclosure
   3 votes
7. Text manipulation in https://checkout.rbk.moneyDuplicateCode Injection
   2 votes