Browse / Staging.every.org

Staging.every.org

See its reports on the map

Attack surface: 49 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Staging.every.org

• Misconfiguration2
• Business Logic1
• Authentication1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Race Condition when following a userConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') · low
   113 votes
2. No Rate Limit On Reset PasswordImproper Authentication - Generic · medium
   39 votes
3. Flaw in Change Email https://youtu.be/MMvlcHIGs2AViolation of Secure Design Principles · critical
   33 votes
4. Improper email address verifiation while saving Account DetailsViolation of Secure Design Principles · medium
   32 votes
5. Private account causes displayed through APIInformation Disclosure · low
   5 votes