Browse / Sifchain

Sifchain

See its reports on the map

What gets reported to Sifchain

• Misconfiguration27
• Information Disclosure18
• Authentication9
• Access Control3
• Business Logic3
• Cross-site Scripting3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Subdomain Takeover At the Main Domain Of Your Site Improper Access Control - Generic · low
   37 votes
2. xmlrpc.php And /wp-json/wp/v2/users FILE IS enable it will used for bruteforce attack and denial of serviceInformativeUncontrolled Resource Consumption
   $5021 votes
3. Subdomain Takeover on proxies.sifchain.finance pointing to vercelInformativeMisconfiguration · high
   12 votes
4. CORS MisconfigurationDuplicateMisconfiguration
   11 votes
5. Clickjacking Vulnerability in sifchain.financeDuplicateUI Redressing (Clickjacking)
   11 votes
6. Private KEY of crypto walletDuplicateUse of Hard-coded Password
   11 votes
7. Information Disclosure on https://rpc.sifchain.finance/DuplicateInformation Disclosure
   10 votes
8. Wrong implementation of Telegram link on the main page for PC usersInformativeMisconfiguration
   8 votes
9. CORS Misconfiguration Leads to Sensitive Exposure on Sifchain main domainDuplicateMisconfiguration
   8 votes
10. CORS misconfigurationInformativeBusiness Logic Errors
    8 votes
11. Path Transversal inside saveContracts.jsN/ARelative Path Traversal
    7 votes
12. Private RSA key for Vagrant exposed in GitHub repositoryInformativeInsecure Storage of Sensitive Information
    7 votes
13. Clickjacking misconfiguration bugDuplicateUI Redressing (Clickjacking)
    7 votes
14. Cross-site Scripting (XSS) possible at https://sifchain.finance// via CVE-2019-8331 exploitationDuplicateCross-site Scripting (XSS) - Generic · medium
    6 votes
15. Email Spoofing on sifchain.financeDuplicateViolation of Secure Design Principles · low
    6 votes
16. Cross Origin Resource Sharing Misconfiguration | Lead to sensitive information.DuplicateMisconfiguration
    6 votes
17. Vulnerable for clickjacking attackDuplicateUI Redressing (Clickjacking)
    6 votes
18. Wrong Url in Main PageMisconfiguration · low
    $2006 votes
19. No Rate Limit protection in user subscription formDuplicateImproper Restriction of Authentication Attempts · low
    5 votes
20. CORS (Cross-Origin Resource Sharing) origin validation failure -Any website can issue requests made with user credentials and read the responses to thDuplicateCross-site Scripting (XSS) - Stored
    5 votes
21. A password in plain text in conf fileN/APassword in Configuration File
    5 votes
22. wrong url in hackerone > goes to wix.com > unconnectedMisconfiguration · low
    5 votes
23. Email spoofingDuplicateImproper Authentication - Generic
    4 votes
24. Flaws In Social media Icon on error page which can lead to financial loss to a company.InformativeBusiness Logic Errors
    4 votes
25. RSA PRIVATE KEY discloserDuplicateInformation Disclosure
    4 votes
26. Private eth key foundDuplicateImproper Access Control - Generic
    4 votes
27. ETHEREUM_PRIVATE_KEY leaked via Open Github RepositoryInformativeCleartext Storage of Sensitive Information
    4 votes
28. Origin IP Disclosure VulnerabilityInformativeInformation Disclosure
    3 votes
29. Clickjacking at sifchain.financeSpamUI Redressing (Clickjacking) · medium
    3 votes
30. Wordpress Users Disclosure (/wp-json/wp/v2/users/) on sifchain.financeDuplicateInformation Disclosure · low
    3 votes
31. No Valid SPF Records/don't have DMARC recordDuplicateImproper Authentication - Generic
    3 votes
32. CORS (Cross-Origin Resource Sharing) origin validation failureDuplicateMisconfiguration
    3 votes
33. Social media links not workingDuplicateBusiness Logic Errors
    3 votes
34. Found key_adress and key_password in GitHub historyInformativePassword in Configuration File
    3 votes
35. Dependency Confusion Vulnerability in Sifnode Due to Unclaimed npm Packages.InformativeCode Injection
    3 votes
36. ETHEREUM_PRIVATE_KEY leaked N/ACleartext Storage of Sensitive Information
    3 votes
37. Exposed Openapi TokenInformativeCleartext Storage of Sensitive Information
    3 votes
38. SSH server due to Improper Signature VerificationN/Ahigh
    2 votes
39. 4 xss vulnerability dom based cwe 79 ; wordpress bootstrap.min.js is vulnerableDuplicateCross-site Scripting (XSS) - DOM · medium
    2 votes
40. ClickjackingSpamUI Redressing (Clickjacking) · low
    2 votes
41. Possible Database Details stored in values.yamlDuplicateCleartext Storage of Sensitive Information · medium
    2 votes
42. Bootstrap library is vulnerableN/AInclusion of Functionality from Untrusted Control Sphere · low
    2 votes
43. Error Page Content Spoofing or Text InjectionN/AViolation of Secure Design Principles · low
    2 votes
44. Found a url on source code which was disclosing different juicy informations like ip addresses and available endpontsN/AInformation Exposure Through Directory Listing
    2 votes
45. CSRF in newsletter formN/ACross-Site Request Forgery (CSRF)
    2 votes
46. Sifchain token leak N/AInsecure Storage of Sensitive Information
    2 votes
47. No valid SPF record foundN/AImproper Authentication - Generic
    2 votes
48. Open S3 Bucket | information leakageN/AInformation Disclosure
    2 votes
49. No Rate Limit in email leads to huge Mass mailingsN/AImproper Restriction of Authentication Attempts
    2 votes
50. ETHEREUM_PRIVATE_KEY leaked via githubN/AImproper Access Control - Generic
    1 votes
51. Signature Verification /// golang.org/x/crypto/sshN/ACryptographic Issues - Generic · high
    1 votes
52. clickjacking vulnerabilitySpamUI Redressing (Clickjacking)
    1 votes
53. Session Token in URLN/AImproper Authentication - Generic
    1 votes
54. Sifchain Privacy Policy Webpage Uses Wordpress Default Template. Does Not Display Correct Privacy Policy.N/AInformation Disclosure
    1 votes
55. Clickjacking /framing on sensitive Subdomain N/AUI Redressing (Clickjacking)
    1 votes
56. Information disclosure on SifchainDuplicateInformation Disclosure
    1 votes
57. Username disclosure at Main DomainDuplicateInformation Disclosure · low
    1 votes
58. Vulnerable javascript dependency at Main domainN/AUsing Components with Known Vulnerabilities · low
    1 votes
59. Linux Desktop application "sifnoded" executable does not use Pie / no ASLRInformativeViolation of Secure Design Principles
    1 votes
60. Possibility of DoS attack at https://sifchain.finance// via CVE-2018-6389 exploitationInformativeUncontrolled Resource Consumption
    1 votes
61. Misconfiguration Certificate Authority Authorization RuleInformativeMisconfiguration
    1 votes
62. mongodb credentials leaked in githubN/AInformation Disclosure
    1 votes
63. Vulnerability : Email SpoofingDuplicateViolation of Secure Design Principles
    1 votes
64. Email Spoofing bugDuplicateViolation of Secure Design Principles
    1 votes
65. HTTPS not enforced at dex.sifchain.financeN/AViolation of Secure Design Principles · low
    1 votes
66. information disclosureN/AInformation Disclosure
67. Wrong Implementation of Url in https://docs.sifchain.finance/N/AMisconfiguration · low
68. Wrong Url in Main page of sifchain.financeDuplicateMisconfiguration · low
69. Information Disclosure at one of your subdomainN/AInformation Disclosure
70. No Valid SPF Records at sifchain.financeInformativeViolation of Secure Design Principles
71. Design Issues at Main DomainDuplicateViolation of Secure Design Principles · low