Browse / Tools for Humanity

Tools for Humanity

See its reports on the map

What gets reported to Tools for Humanity

• Business Logic2
• Cross-site Scripting1
• Insecure Direct Object Reference1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. [Meetup][World ID][OIDC] Insufficient Filtering of "state" Parameter in Response Mode form_post leads to XSS and ATOCross-Site Scripting (XSS) · critical
   106 votes
2. Race Condition Enables Bypassing Verification CheckConcurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') · high
   $3,00095 votes
3. IDOR - Leaking of team data (name, email, ID, member ID) via POST /api/v1/graphql `FetchMemberships` operationInsecure Direct Object Reference (IDOR) · medium
   $50091 votes
4. Unlock underage blocked app without support interaction using airplane modeBusiness Logic Errors · low
   $30066 votes