Browse / Sifchain

Sifchain

See its reports on the map

What gets reported to Sifchain

• Misconfiguration27
• Information Disclosure18
• Authentication9
• Access Control3
• Business Logic3
• Cross-site Scripting3

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Path Transversal inside saveContracts.jsN/ARelative Path Traversal
   7 votes
2. A password in plain text in conf fileN/APassword in Configuration File
   5 votes
3. ETHEREUM_PRIVATE_KEY leaked N/ACleartext Storage of Sensitive Information
   3 votes
4. SSH server due to Improper Signature VerificationN/Ahigh
   2 votes
5. Bootstrap library is vulnerableN/AInclusion of Functionality from Untrusted Control Sphere · low
   2 votes
6. Error Page Content Spoofing or Text InjectionN/AViolation of Secure Design Principles · low
   2 votes
7. Found a url on source code which was disclosing different juicy informations like ip addresses and available endpontsN/AInformation Exposure Through Directory Listing
   2 votes
8. CSRF in newsletter formN/ACross-Site Request Forgery (CSRF)
   2 votes
9. Sifchain token leak N/AInsecure Storage of Sensitive Information
   2 votes
10. No valid SPF record foundN/AImproper Authentication - Generic
    2 votes
11. Open S3 Bucket | information leakageN/AInformation Disclosure
    2 votes
12. No Rate Limit in email leads to huge Mass mailingsN/AImproper Restriction of Authentication Attempts
    2 votes
13. ETHEREUM_PRIVATE_KEY leaked via githubN/AImproper Access Control - Generic
    1 votes
14. Signature Verification /// golang.org/x/crypto/sshN/ACryptographic Issues - Generic · high
    1 votes
15. Session Token in URLN/AImproper Authentication - Generic
    1 votes
16. Sifchain Privacy Policy Webpage Uses Wordpress Default Template. Does Not Display Correct Privacy Policy.N/AInformation Disclosure
    1 votes
17. Clickjacking /framing on sensitive Subdomain N/AUI Redressing (Clickjacking)
    1 votes
18. Vulnerable javascript dependency at Main domainN/AUsing Components with Known Vulnerabilities · low
    1 votes
19. mongodb credentials leaked in githubN/AInformation Disclosure
    1 votes
20. HTTPS not enforced at dex.sifchain.financeN/AViolation of Secure Design Principles · low
    1 votes
21. information disclosureN/AInformation Disclosure
22. Wrong Implementation of Url in https://docs.sifchain.finance/N/AMisconfiguration · low
23. Information Disclosure at one of your subdomainN/AInformation Disclosure