HexBrain
Sign in

Browse / Showmax

Showmax

18disclosed reports
$5,384paid in bounties

See its reports on the map

What gets reported to Showmax

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Open Redirect in secure.showmax.comOpen Redirect
    $550225 votes
  2. [stories.showmax.com] Cross Origin Misconfiguration - Sensitive Information ExposureBusiness Logic Errors
    104 votes
  3. Parental Pin BypassPrivilege Escalation
    $2,00075 votes
  4. bypass parental pin succesfullyImproper Authentication - Generic
    $20072 votes
  5. xmlrpc.php is publicly available at https://stories.showmax.com/xmlrpc.phpInformation Disclosure
    $5052 votes
  6. Changing details of other users profile using UUID (IDOR)Improper Authentication - Generic
    $1,20036 votes
  7. delete the subaccount from the user idInsecure Direct Object Reference (IDOR)
    $70031 votes
  8. xml-rpc file open for public in the domain:https://stories.showmax.com/xmlrpc.phpInformation Disclosure
    $5023 votes
  9. Stored blind xss on showmax support teamInformation Disclosure
    $25621 votes
  10. Query string parameter modifications returned in pageViolation of Secure Design Principles
    $12821 votes
  11. Reflected XSS at https://stories.showmax.com/wp-content/themes/theme-internal_ss/blocks/ajax/a.php via `ss_country_filter` paramCross-site Scripting (XSS) - Reflected
    $15016 votes
  12. Full Path Disclosure in Wordpress Rest API ResponseInformation Disclosure
    $5015 votes
  13. Cross-origin resource sharing
    $5013 votes
  14. WordPress admin is accessible without HTTP authenticationImproper Access Control - Generic
    13 votes
  15. https://secure.showmax.com/profile/paymentsImproper Access Control - Generic
    9 votes
  16. lack of rate limit on athentification login page & forgot password pageImproper Authentication - Generic
    7 votes
  17. Race Condition Vulnerability when creating profilesPrivilege Escalation
    6 votes
  18. Wordpress directories/files visible to internetInformation Disclosure
    3 votes