Browse / Semmle

Semmle

See its reports on the map

What gets reported to Semmle

• Access Control4
• Cross-site Scripting2
• Information Disclosure2
• Misconfiguration2
• Cross-Site Request Forgery1
• Authentication1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Authenticated Cross-Site-Request-ForgeryN/ACross-Site Request Forgery (CSRF) · medium
   8 votes
2. the login blocking mechanism does not work correctlyN/AImproper Restriction of Authentication Attempts · medium
   6 votes
3. All Burp Suite Scan reportN/ASecurity Through Obscurity · low
   5 votes
4. Unprotected Api EndPointsN/AViolation of Secure Design Principles · medium
   3 votes
5. Server side includes in https://lgtm-com.pentesting.semmle.net/internal_api/v0.2/savePublicInformation leads to 500 server error and D-DOSN/ACommand Injection - Generic · low
   3 votes