Browse / Radancy

Radancy

See its reports on the map

What gets reported to Radancy

• Information Disclosure9
• Cryptography5
• Cross-site Scripting4
• Access Control3
• Denial of Service2
• Injection and Smuggling2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Ability To Takeover any account by Emaill.Privilege Escalation
   168 votes
2. [mijn.werkenbijdefensie.nl] Denial of service occurs due to lack of email length confirmationUncontrolled Resource Consumption
   79 votes
3. [www.werkenbijbakertilly.nl] Denial of service due to incorrect server return can result in total denial of service.Uncontrolled Resource Consumption
   67 votes
4. insecure storage of information, you can view any file uploaded to the server without authentication and only with a single linkInsecure Storage of Sensitive Information
   55 votes
5. [www.werkenbijbakertilly.nl] Information DisclosureInformation Disclosure
   48 votes
6. x-request-id header reflected in server response without sanitizationCRLF Injection
   40 votes
7. Version Disclosure (NginX)Information Disclosure
   39 votes
8. [www.werkenbijderet.nl] There is no rate limit for vacature-alert endpointsImproper Authentication - Generic
   37 votes
9. Blind SSRF at packagist.maximum.nlServer-Side Request Forgery (SSRF)
   35 votes
10. Information disclosure through directory listing at http://dockerhost01.maximum.nl:8080Information Disclosure
    34 votes
11. IDOR in editing coursesInsecure Direct Object Reference (IDOR)
    33 votes
12. XSS risk reduction with X-XSS-Protection: 1; mode=block headerCross-site Scripting (XSS) - Generic
    31 votes
13. Sql-inj in https://maximum.com/ajax/peopleSQL Injection
    30 votes
14. Open Redirect & Information Disclosure [mijn.werkenbijdefensie.nl]Open Redirect
    27 votes
15. I can subscribe and unsubscribe any user with the same token for as many times as i wantImproper Access Control - Generic
    25 votes
16. Developper's websites are easily accessibles leading to massive information disclosureInformation Disclosure
    21 votes
17. Wrong link on corne.maximum.nlForced Browsing
    18 votes
18. Possible to view and takeover other user's education and courses @ mijn.werkenbijdefensie.nlInsecure Direct Object Reference (IDOR)
    16 votes
19. Microsoft IIS tilde directory enumerationInformation Disclosure
    16 votes
20. Cross-site Scripting (XSS) on [maximum.nl] Cross-site Scripting (XSS) - Reflected
    15 votes
21. Open redirect on https://werkenbijdefensie.nl/Open Redirect
    13 votes
22. [Cross Domain Referrer Leakage] Password Reset Token Leaking to Third party Sites.Information Disclosure
    12 votes
23. Possible to unsubscribe from activities using CSRF @ mijn.werkenbijdefensie.nlCross-Site Request Forgery (CSRF)
    12 votes
24. 'X-Forwarded-Host' key used in input without sanitation - possible cache poisoningResource Injection
    10 votes
25. RC4 cipher suites detectedCryptographic Issues - Generic
    10 votes
26. XSSCross-site Scripting (XSS) - Reflected
    9 votes
27. The POODLE attack (SSLv3 supported)Cryptographic Issues - Generic
    8 votes
28. xss flash on http://presentatie.werkenbijmcdonalds.nl/Cross-site Scripting (XSS) - Stored
    7 votes
29. Facebook and twitter page claimed of maximum.com [important]Violation of Secure Design Principles
    5 votes
30. RC4 cipher suites detectedCryptographic Issues - Generic
    5 votes
31. Application error messageInformation Disclosure
    5 votes
32. SSL certificate invalid dateCryptographic Issues - Generic
    5 votes
33. RC4 cipher suites detectedCryptographic Issues - Generic
    4 votes
34. Application error messageInformation Disclosure
    3 votes
35. [werkenbijmcdonalds.nl] Unsafe-inline in "script-src" results in "bootstrapping" or passing data to JavaScript from HTML pages. Violation of Secure Design Principles
    2 votes
36. Weak password Weak Cryptography for Passwords
    1 votes