Browse / Semmle

Semmle

See its reports on the map

What gets reported to Semmle

• Access Control4
• Cross-site Scripting2
• Information Disclosure2
• Misconfiguration2
• Cross-Site Request Forgery1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Privilege escalation in workers container Privilege Escalation · high
   $1,500206 votes
2. Worker container escape lead to arbitrary file reading in host machine [again]Privilege Escalation · critical
   $2,000178 votes
3. Worker container escape lead to arbitrary file reading in host machinePrivilege Escalation · critical
   $2,000112 votes
4. Docker Registry HTTP API v2 exposed in HTTP without authentication leads to docker images dumping and poisoningImproper Access Control - Generic · critical
   83 votes
5. DOMXSS in redirect paramCross-site Scripting (XSS) - DOM · high
   81 votes
6. Email addresses exposed in getPersonBySlug APIInformation Disclosure · medium
   $50060 votes
7. Email Not Completely Deleted after Deleting an accountInformativePrivacy Violation
   18 votes
8. CSP : Inline scripts can be insertedInformativeCross-site Scripting (XSS) - Generic · medium
   9 votes
9. Authenticated Cross-Site-Request-ForgeryN/ACross-Site Request Forgery (CSRF) · medium
   8 votes
10. the login blocking mechanism does not work correctlyN/AImproper Restriction of Authentication Attempts · medium
    6 votes
11. All Burp Suite Scan reportN/ASecurity Through Obscurity · low
    5 votes
12. Unprotected Api EndPointsN/AViolation of Secure Design Principles · medium
    3 votes
13. Server side includes in https://lgtm-com.pentesting.semmle.net/internal_api/v0.2/savePublicInformation leads to 500 server error and D-DOSN/ACommand Injection - Generic · low
    3 votes