Browse / UPchieve

UPchieve

See its reports on the map

What gets reported to UPchieve

• Misconfiguration12
• Authentication10
• Information Disclosure4
• Access Control3
• Cryptography2
• Injection and Smuggling1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Full account takeover of any user through reset passwordDuplicateImproper Access Control - Generic · critical
   54 votes
2. Password reset token leakageDuplicateMisconfiguration · high
   12 votes
3. Failed to validate Session after Password ChangeDuplicateInsufficient Session Expiration · low
   9 votes
4. Authentication Bypass - Email Verification code bypass in account registration process.DuplicateImproper Authentication - Generic · critical
   8 votes
5. CLICKJACKING LEADS TO DEACTIVATE ACCOUNTDuplicateUI Redressing (Clickjacking) · low
   4 votes