Browse / U.S. Dept Of Defense

U.S. Dept Of Defense

See its reports on the map

What gets reported to U.S. Dept Of Defense

• Cross-site Scripting249
• Information Disclosure159
• SQL Injection75
• Access Control72
• Code Execution68
• Authentication50

Most upvoted reports

AllValidInformativeN/ADuplicate

1. [HTA2] Authorization Bypass on https://██████ leaks confidential aircraft/missile informationDuplicateImproper Authorization · critical
   40 votes
2. IDOR when editing email leads to Mass Full ATOs (Account Takeovers) without user interaction on https://██████/DuplicateInsecure Direct Object Reference (IDOR)
   19 votes
3. CSRF to delete accounts [HtUS]DuplicateCross-Site Request Forgery (CSRF) · high
   15 votes
4. .git folder exposed [HtUS]DuplicateInformation Disclosure · critical
   11 votes
5. Exposed GIT repo on ██████████[HtUS]DuplicateCleartext Storage of Sensitive Information · critical
   10 votes
6. Out-Of-Bounds Memory Read on ███DuplicateOut-of-bounds Read
   7 votes
7. Remote Command Execution on a DoD websiteDuplicateCode Injection
   7 votes
8. DNS MisconfigurationDuplicateMisconfiguration
   4 votes
9. Remote Code Execution (RCE) in a DoD websiteDuplicateCode Injection
   3 votes
10. Reflected XSS vulnerability in a DoD website DuplicateCross-site Scripting (XSS) - Generic
    2 votes
11. Stored XSS vulnerability on a DoD websiteDuplicateCross-site Scripting (XSS) - Generic
    2 votes
12. Information disclosure on a DoD websiteDuplicateInformation Disclosure · low
    2 votes