Browse / Semrush

Semrush

See its reports on the map

Attack surface: 5,693 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Semrush

• Misconfiguration11
• Cross-site Scripting7
• Access Control6
• Information Disclosure5
• Insecure Direct Object Reference5
• Authentication5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Improper authentication on registrationN/AImproper Authentication - Generic · medium
   7 votes
2. Persistent CSV injectionN/ACode Injection · medium
   4 votes
3. User Controllable CookieN/AMisconfiguration · low
   4 votes
4. SSLv3 Poodle Attack on Ip Of semrushN/AViolation of Secure Design Principles · low
   1 votes