Browse / Secret

Secret

See its reports on the map

What gets reported to Secret

• Cryptography2
• Authentication1
• Cross-Site Request Forgery1
• Other weaknesses1
• Misconfiguration1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Broken Authentication and Session ManagementImproper Authentication - Generic
   11 votes
2. SSL Not EnforcedCryptographic Issues - Generic
   7 votes
3. Login CSRF in Secret.lyCross-Site Request Forgery (CSRF)
   5 votes
4. secret app for iOS and android is sending some info over HTTPCryptographic Issues - Generic
   3 votes
5. Strict Transport Security on secret.ly
   3 votes
6. Content Sniffing not disabledViolation of Secure Design Principles
   2 votes
7. ClientId gives away platform (iOS/Android) from which a secret was posted.Information Disclosure
   1 votes