Browse / Sifchain

Sifchain

See its reports on the map

What gets reported to Sifchain

• Misconfiguration27
• Information Disclosure18
• Authentication9
• Access Control3
• Business Logic3
• Cross-site Scripting3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. CORS MisconfigurationDuplicateMisconfiguration
   11 votes
2. Clickjacking Vulnerability in sifchain.financeDuplicateUI Redressing (Clickjacking)
   11 votes
3. Private KEY of crypto walletDuplicateUse of Hard-coded Password
   11 votes
4. Information Disclosure on https://rpc.sifchain.finance/DuplicateInformation Disclosure
   10 votes
5. CORS Misconfiguration Leads to Sensitive Exposure on Sifchain main domainDuplicateMisconfiguration
   8 votes
6. Clickjacking misconfiguration bugDuplicateUI Redressing (Clickjacking)
   7 votes
7. Cross-site Scripting (XSS) possible at https://sifchain.finance// via CVE-2019-8331 exploitationDuplicateCross-site Scripting (XSS) - Generic · medium
   6 votes
8. Email Spoofing on sifchain.financeDuplicateViolation of Secure Design Principles · low
   6 votes
9. Cross Origin Resource Sharing Misconfiguration | Lead to sensitive information.DuplicateMisconfiguration
   6 votes
10. Vulnerable for clickjacking attackDuplicateUI Redressing (Clickjacking)
    6 votes
11. No Rate Limit protection in user subscription formDuplicateImproper Restriction of Authentication Attempts · low
    5 votes
12. CORS (Cross-Origin Resource Sharing) origin validation failure -Any website can issue requests made with user credentials and read the responses to thDuplicateCross-site Scripting (XSS) - Stored
    5 votes
13. Email spoofingDuplicateImproper Authentication - Generic
    4 votes
14. RSA PRIVATE KEY discloserDuplicateInformation Disclosure
    4 votes
15. Private eth key foundDuplicateImproper Access Control - Generic
    4 votes
16. Wordpress Users Disclosure (/wp-json/wp/v2/users/) on sifchain.financeDuplicateInformation Disclosure · low
    3 votes
17. No Valid SPF Records/don't have DMARC recordDuplicateImproper Authentication - Generic
    3 votes
18. CORS (Cross-Origin Resource Sharing) origin validation failureDuplicateMisconfiguration
    3 votes
19. Social media links not workingDuplicateBusiness Logic Errors
    3 votes
20. 4 xss vulnerability dom based cwe 79 ; wordpress bootstrap.min.js is vulnerableDuplicateCross-site Scripting (XSS) - DOM · medium
    2 votes
21. Possible Database Details stored in values.yamlDuplicateCleartext Storage of Sensitive Information · medium
    2 votes
22. Information disclosure on SifchainDuplicateInformation Disclosure
    1 votes
23. Username disclosure at Main DomainDuplicateInformation Disclosure · low
    1 votes
24. Vulnerability : Email SpoofingDuplicateViolation of Secure Design Principles
    1 votes
25. Email Spoofing bugDuplicateViolation of Secure Design Principles
    1 votes
26. Wrong Url in Main page of sifchain.financeDuplicateMisconfiguration · low
27. Design Issues at Main DomainDuplicateViolation of Secure Design Principles · low