HexBrain

Browse / Sifchain

Sifchain

71disclosed reports
$250paid in bounties

See its reports on the map

What gets reported to Sifchain

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. xmlrpc.php And /wp-json/wp/v2/users FILE IS enable it will used for bruteforce attack and denial of serviceInformativeUncontrolled Resource Consumption
    $5021 votes
  2. Subdomain Takeover on proxies.sifchain.finance pointing to vercelInformativeMisconfiguration · high
    12 votes
  3. Wrong implementation of Telegram link on the main page for PC usersInformativeMisconfiguration
    8 votes
  4. CORS misconfigurationInformativeBusiness Logic Errors
    8 votes
  5. Private RSA key for Vagrant exposed in GitHub repositoryInformativeInsecure Storage of Sensitive Information
    7 votes
  6. Flaws In Social media Icon on error page which can lead to financial loss to a company.InformativeBusiness Logic Errors
    4 votes
  7. ETHEREUM_PRIVATE_KEY leaked via Open Github RepositoryInformativeCleartext Storage of Sensitive Information
    4 votes
  8. Origin IP Disclosure VulnerabilityInformativeInformation Disclosure
    3 votes
  9. Found key_adress and key_password in GitHub historyInformativePassword in Configuration File
    3 votes
  10. Dependency Confusion Vulnerability in Sifnode Due to Unclaimed npm Packages.InformativeCode Injection
    3 votes
  11. Exposed Openapi TokenInformativeCleartext Storage of Sensitive Information
    3 votes
  12. Linux Desktop application "sifnoded" executable does not use Pie / no ASLRInformativeViolation of Secure Design Principles
    1 votes
  13. Possibility of DoS attack at https://sifchain.finance// via CVE-2018-6389 exploitationInformativeUncontrolled Resource Consumption
    1 votes
  14. Misconfiguration Certificate Authority Authorization RuleInformativeMisconfiguration
    1 votes
  15. No Valid SPF Records at sifchain.financeInformativeViolation of Secure Design Principles