Browse / Rockset

Rockset

See its reports on the map

Attack surface: 68 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Rockset

• Information Disclosure2
• Access Control1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. S3 bucket data at http://rockset-support.s3-us-west-2.amazonaws.com/ reveals user addresses based on latitudes and longitudes.Information Disclosure · high
   21 votes
2. Leaking Rockset API key on GithubCleartext Storage of Sensitive Information · high
   19 votes
3. A member-member privilege could access the https://console.rockset.com/billing?tab=payment page even though the billing page is hidden from the menu. Improper Handling of Insufficient Permissions or Privileges · medium
   5 votes