Browse / Sifchain
Sifchain
71disclosed reports
$250paid in bounties
What gets reported to Sifchain
Most upvoted reports
AllValidInformativeN/ADuplicate
- xmlrpc.php And /wp-json/wp/v2/users FILE IS enable it will used for bruteforce attack and denial of serviceInformativeUncontrolled Resource Consumption$5021 votes
- Subdomain Takeover on proxies.sifchain.finance pointing to vercelInformativeMisconfiguration · high12 votes
- Wrong implementation of Telegram link on the main page for PC usersInformativeMisconfiguration8 votes
- CORS misconfigurationInformativeBusiness Logic Errors8 votes
- Private RSA key for Vagrant exposed in GitHub repositoryInformativeInsecure Storage of Sensitive Information7 votes
- Flaws In Social media Icon on error page which can lead to financial loss to a company.InformativeBusiness Logic Errors4 votes
- ETHEREUM_PRIVATE_KEY leaked via Open Github RepositoryInformativeCleartext Storage of Sensitive Information4 votes
- Origin IP Disclosure VulnerabilityInformativeInformation Disclosure3 votes
- Found key_adress and key_password in GitHub historyInformativePassword in Configuration File3 votes
- Dependency Confusion Vulnerability in Sifnode Due to Unclaimed npm Packages.InformativeCode Injection3 votes
- Exposed Openapi TokenInformativeCleartext Storage of Sensitive Information3 votes
- Linux Desktop application "sifnoded" executable does not use Pie / no ASLRInformativeViolation of Secure Design Principles1 votes
- Possibility of DoS attack at https://sifchain.finance// via CVE-2018-6389 exploitationInformativeUncontrolled Resource Consumption1 votes
- Misconfiguration Certificate Authority Authorization RuleInformativeMisconfiguration1 votes
- No Valid SPF Records at sifchain.financeInformativeViolation of Secure Design Principles