HexBrain
Sign in

Browse / U.S. Dept Of Defense

U.S. Dept Of Defense

884disclosed reports
$10,000paid in bounties

See its reports on the map

What gets reported to U.S. Dept Of Defense

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Stored Xss Vulnerability on ████████Cross-site Scripting (XSS) - Stored · high
    192 votes
  2. Bypassing CORS Misconfiguration Leads to Sensitive ExposureBusiness Logic Errors · medium
    145 votes
  3. Applicant security exam Attachments/Documents accessible through an IDOR/BAC on the custom Apex controller on https://█████.mil Improper Access Control - Generic · critical
    142 votes
  4. Public instance of Jenkins on https://██████████/ with /script enabledCode Injection · critical
    118 votes
  5. Remote Code Execution and AWS IAM Credentials Exfiltration in https://████████/Command Injection - Generic · critical
    114 votes
  6. [hta3] Remote Code Execution on ████Code Injection · critical
    104 votes
  7. Wordpress Takeover using setup configuration at http://████.edu [HtUS]Misconfiguration · critical
    $1,000102 votes
  8. Public google drive link Exposes Military Orders Containing PII (Name, SSN etc..) and Operational DetailsInformation Disclosure · critical
    99 votes
  9. Lack of rate limiting in https://███/PKI/PassReset.aspx leads to PII disclosure and potential account takeoverInformation Exposure Through an Error Message · critical
    98 votes
  10. [███████] Information disclosure due unauthenticated access to APIs and system browser functionsInformation Disclosure · medium
    97 votes
  11. XXE in DoD website that may lead to RCEXML External Entities (XXE) · critical
    97 votes
  12. Time based SQL injection at████████SQL Injection · high
    96 votes
  13. LOGJ4 VUlnerability [HtUS]Command Injection - Generic · critical
    $1,00094 votes
  14. Remote Code Execution in ██████OS Command Injection · critical
    94 votes
  15. SQL InjectionSQL Injection · high
    91 votes
  16. ███ leaking PII of tour visitors (names, email addresses, phone numbers) via misconfigured record permissionsCleartext Storage of Sensitive Information · critical
    90 votes
  17. User automatically logged in as Sys Admin user on https://███/Administration/Administration.aspxImproper Access Control - Generic · critical
    88 votes
  18. CSRF leads to Account takeoverCross-Site Request Forgery (CSRF) · high
    87 votes
  19. [SQLI ]Time Bassed Injection at ██████████ via referer headerSQL Injection · high
    87 votes
  20. Remote Code Execution (RCE) in a DoD websiteCode Injection · critical
    84 votes
  21. Publicly Editable U.S. Air Force Google Spreadsheet Exposing Student Leave Data Improper Access Control - Generic · medium
    83 votes
  22. Blind Sql Injection in https://████SQL Injection · medium
    81 votes
  23. SQL Injection on www.██████████ on countID parameterSQL Injection · high
    80 votes
  24. Improper Authentication Allows Making Appeals as Other UsersImproper Authentication - Generic · medium
    77 votes
  25. IDOR leading unauthenticated attacker to download documents discloses PII of users and soldiers via https://www.█████████/Download.aspx?id= [HtUS]Insecure Direct Object Reference (IDOR) · high
    $50077 votes
  26. SQL Injection in ████SQL Injection · high
    73 votes
  27. Full account takeover of any user through reset passwordImproper Authentication - Generic · medium
    71 votes
  28. CVE-2020-3187 - Unauthenticated Arbitrary File DeletionPath Traversal · critical
    70 votes
  29. Unauthenticated LFI (Local File Inclusion) using the symbol `!` At the target `https://████/`Path Traversal · high
    69 votes
  30. Exposure of Private Personal Information to an Unauthorized Actor - PII and soldier data (mos, schools, and speciality training)Violation of Secure Design Principles · critical
    69 votes
  31. RCE on █████ via CVE-2017-10271Code Injection · critical
    68 votes
  32. CSRF leads to Account takeoverCross-Site Request Forgery (CSRF) · high
    67 votes
  33. Boolen Based Blind Sql Injection Via User Agent in ███.milSQL Injection · medium
    67 votes
  34. Improper Authentication (Login without Registration with any user) at ████Improper Authentication - Generic · high
    67 votes
  35. [█████████] Administrative access to Oracle WebLogic Server using default credentialsImproper Access Control - Generic · critical
    65 votes
  36. IDOR leads to PII LeakInsecure Direct Object Reference (IDOR) · medium
    64 votes
  37. Subdomain takeover ████████.milImproper Access Control - Generic · critical
    64 votes
  38. CVE-2020-7961 RCE Liferay Portal Unauthenticated via https://████████/OS Command Injection · critical
    62 votes
  39. Unauthenticated SQL Injection at █████████ [HtUS]SQL Injection · critical
    61 votes
  40. Authentication Bypass on https://███████/Improper Authentication - Generic · medium
    58 votes
  41. CVE-2023-29489 XSS in cpanel at [www.███] - Securado, OmanCross-site Scripting (XSS) - Reflected · medium
    58 votes
  42. LFI with potential to RCE on ██████ using CVE-2019-3396Remote File Inclusion · high
    58 votes
  43. SSRF to read AWS metaData at https://█████/ [HtUS]Server-Side Request Forgery (SSRF) · critical
    $1,00057 votes
  44. Remote Code Execution through DNN Cookie Deserialization OS Command Injection · high
    56 votes
  45. Sensitive data exposure: █████████ candidate resumes/CVs available to download with no authentication through BAC/IDOR/Improper Salesforce configImproper Access Control - Generic · high
    55 votes
  46. Reflected XSS via Keycloak on ███ [CVE-2021-20323]Cross-site Scripting (XSS) - Reflected · medium
    55 votes
  47. Sensitive data exposure via /secure/███████ endpoint on ████████Information Disclosure · medium
    55 votes
  48. Time-based blind SQL injectionSQL Injection · medium
    53 votes
  49. Subdomain takeover ██████Violation of Secure Design Principles · critical
    53 votes
  50. Open Akamai ARL XSS on http://master-config-████████Cross-site Scripting (XSS) - Reflected · medium
    53 votes
  51. IDOR to delete profile images in https:███████Insecure Direct Object Reference (IDOR) · medium
    52 votes
  52. XSS found for https://█████████Cross-site Scripting (XSS) - Reflected · medium
    51 votes
  53. Local File Disclosure on the █████ (https://████████.edu/) leads to the full source code disclosure and credentials leakInsecure Storage of Sensitive Information · critical
    51 votes
  54. SQL Injection in ████SQL Injection · high
    49 votes
  55. XSS on ███████Cross-site Scripting (XSS) - Reflected · medium
    48 votes
  56. Attacker can Add itself as admin user and can also change privileges of Existing Users [█████████]Improper Authentication - Generic · critical
    48 votes
  57. Log4Shell: RCE 0-day exploit on █████████Code Injection · critical
    48 votes
  58. Information disclousure by clicking on the link shown in http://████████/Information Disclosure · high
    48 votes
  59. Local File Inclusion vulnerability on an Army system allows downloading local filesInformation Disclosure · high
    48 votes
  60. CSRF Attack on changing security questions leads to full Account TakeOverCross-Site Request Forgery (CSRF) · high
    47 votes
  61. Pull Any Automated Record BriefInformation Disclosure · critical
    47 votes
  62. Unauthenticated Access to Admin Panel Functions at https://██████████/████████Improper Access Control - Generic · critical
    47 votes
  63. SSRF in Functional Administrative Support Tool pdf generator (████) [HtUS]Server-Side Request Forgery (SSRF) · critical
    $4,00046 votes
  64. Reflected Cross-site Scripting via search query on ██████Cross-site Scripting (XSS) - Reflected · medium
    45 votes
  65. Xss - ███Cross-site Scripting (XSS) - Reflected · medium
    45 votes
  66. Remote Code Execution via Insecure Deserialization in Telerik UI Deserialization of Untrusted Data · critical
    45 votes
  67. SQL Injection vulnerability located at ████████SQL Injection · high
    45 votes
  68. Reflected XSS on error message on Login PageCross-site Scripting (XSS) - Reflected · medium
    44 votes
  69. reflected xss [CVE-2020-3580]Cross-site Scripting (XSS) - Reflected · medium
    43 votes
  70. [HTAF4-213] [Pre-submission] HTTPOnly session cookie exposure on the /csstest endpointInformation Exposure Through Debug Information · medium
    43 votes
  71. Gateway information leakagePrivacy Violation · high
    43 votes
  72. XSS vulnerability found in javascript code of https://███.milCross-site Scripting (XSS) - Reflected · medium
    42 votes
  73. IDOR leads to view other user Biographical details (Possible PII LEAK)Insecure Direct Object Reference (IDOR) · medium
    42 votes
  74. Create account without auth via response manipulation Business Logic Errors · low
    42 votes
  75. Leaked DB credentials on https://██████████.mil/███Information Disclosure · critical
    42 votes
  76. Account takeover through CSRF in http://███████/██████████/default.aspCross-Site Request Forgery (CSRF) · high
    42 votes
  77. DoD workstation exposed to internet via TinyPilot KVM with no authenticationImproper Access Control - Generic · critical
    41 votes
  78. █████████ (Android): Vulnerable to Javascript Injection and Open redirectOpen Redirect · medium
    41 votes
  79. 403 Forbidden Bypass at www.██████.milForced Browsing · medium
    41 votes
  80. Cross Site ScriptingCross-site Scripting (XSS) - Reflected · medium
    40 votes
  81. IDOR : Modify other users demographic detailsInsecure Direct Object Reference (IDOR) · medium
    40 votes
  82. Open Akamai ARL XSS on http://media.████████Cross-site Scripting (XSS) - Reflected · medium
    40 votes
  83. HTTP Request Smuggling HTTP Request Smuggling · high
    40 votes
  84. [HTA2] Authorization Bypass on https://██████ leaks confidential aircraft/missile informationDuplicateImproper Authorization · critical
    40 votes
  85. XSS found in https://www.████████.milCross-site Scripting (XSS) - Reflected · medium
    39 votes
  86. Blind Sql Injection https:/████████SQL Injection · medium
    39 votes
  87. RCE in ███ [CVE-2021-26084]OS Command Injection · critical
    39 votes
  88. Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://████File and Directory Information Exposure · critical
    39 votes
  89. Unauthenticated Jenkins instance exposed information related to █████Improper Authentication - Generic · high
    38 votes
  90. XXE on DoD web serverXML External Entities (XXE) · critical
    38 votes
  91. [HTA2] XXE on https://███ via SpellCheck Endpoint.XML External Entities (XXE) · critical
    37 votes
  92. Xss Parameter: /<s>/[*]/<s>.css ████████Cross-site Scripting (XSS) - Reflected · medium
    36 votes
  93. Unathenticated file read (CVE-2020-3452) Path Traversal · high
    36 votes
  94. Critical sensitive information Disclosure. [HtUS]Information Disclosure · high
    $50036 votes
  95. Web Cache Poisoning on █████ Violation of Secure Design Principles · high
    36 votes
  96. Course Registration Form Allowing an attacker to dump all the candidate name who had enrolled for the courseInformation Disclosure · high
    36 votes
  97. Subdomain Takeover via Host Header Injection on www.█████Violation of Secure Design Principles · critical
    35 votes
  98. SQL injection on ██████████ via 'where' parameterSQL Injection · medium
    34 votes
  99. XSS in Cisco EndpointCross-site Scripting (XSS) - Generic · medium
    34 votes
  100. [██████] Cross-origin resource sharing misconfiguration (CORS)Improper Access Control - Generic · high
    34 votes