Browse / Sony

Sony

See its reports on the map

Attack surface: 13,528 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Sony

• Code Execution4
• SQL Injection3
• Path Traversal2
• Authentication2
• Access Control1
• Server-Side Request Forgery1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Uncontrolled Search Path Element · high
   109 votes
2. SQL Injection at https://████ via ███ parameterSQL Injection · critical
   74 votes
3. 明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Key Exchange without Entity Authentication · high
   71 votes
4. SQL injection at ███████SQL Injection · critical
   63 votes
5. SSRF on http://www.███████/crossdomain.php via url parameterServer-Side Request Forgery (SSRF) · critical
   42 votes
6. Path Traversal issue at https://████/blaze/Path Traversal · high
   40 votes
7. Remote Code Execution (RCE) in a Sony WebSystemDeserialization of Untrusted Data · critical
   40 votes
8. LFI at http://www.████Command Injection - Generic · high
   37 votes
9. Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████OS Command Injection · critical
   26 votes
10. Response Manipulation leads to Admin Panel Login Bypass at https://██████/Improper Authentication - Generic · high
    25 votes
11. SQL Injection on [█████████]SQL Injection · high
    22 votes
12. Remote Code Execution (RCE) in a Sony Pictures WebSystemDeserialization of Untrusted Data · critical
    22 votes
13. Reflected XSS on ███ via jobid parameterCross-site Scripting (XSS) - Reflected · medium
    14 votes