Browse / Stripo Inc

Stripo Inc

See its reports on the map

Attack surface: 108 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Stripo Inc

• Access Control13
• Server-Side Request Forgery11
• Business Logic9
• Misconfiguration8
• Cross-site Scripting7
• Information Disclosure6

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Permanent DOS for new users!InformativeUncontrolled Resource Consumption · high
   11 votes
2. No rate limiting for confirmation email lead to huge Mass mailingsInformativeBusiness Logic Errors · medium
   9 votes
3. Information disclosure through Server side resource forgeryInformativeServer-Side Request Forgery (SSRF) · medium
   7 votes
4. Clickjacking on my.stripo.email for MailChimp credentials InformativeUI Redressing (Clickjacking) · medium
   7 votes
5. CORS on my.stripo.emailInformativeMisconfiguration
   1 votes