Browse / UPchieve

UPchieve

See its reports on the map

What gets reported to UPchieve

• Misconfiguration12
• Authentication10
• Information Disclosure4
• Access Control3
• Cryptography2
• Injection and Smuggling1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. No Rate Limiting on /reset-password-request/ endpointN/AViolation of Secure Design Principles · medium
   12 votes
2. Business logic errorN/ABusiness Logic Errors · low
   9 votes
3. Password ReuseN/AMisconfiguration · medium
   6 votes
4. OTP reflecting in response sensitive data exposure leads to account take overN/AInformation Disclosure · critical
   5 votes
5. No Rate Limit on forgot password pageN/AImproper Restriction of Authentication Attempts · medium
   5 votes
6. url redirectionN/AOpen Redirect · critical
   5 votes
7. No character limit in password fieldN/AUse of Hard-coded Password · medium
   4 votes
8. Outdated Copyright Message @ Welcome emailN/AMisconfiguration
   4 votes
9. Missing Validation in editing "Your Phone Number" N/AMisconfiguration · medium
   4 votes
10. No Rate Limiting for Password Reset Email Leads to Email FloodingN/ANULL Pointer Dereference · medium
    4 votes
11. i can join without user and pass in this website https://argocd.upchieve.org/settings/accountsN/AReusing a Nonce, Key Pair in Encryption · high
    4 votes
12. blind sql on [ https://argocd.upchieve.org/login?return_url=id= ]N/ASQL Injection · critical
    4 votes
13. Clickjacking login page of https://hackers.upchieve.org/loginN/AUI Redressing (Clickjacking) · medium
    3 votes
14. No rate Limit on Password Reset page on upchieveN/AImproper Restriction of Authentication Attempts · medium
    3 votes
15. Clickjacking ar https://hackers.upchieve.org/loginN/AUI Redressing (Clickjacking) · low
    2 votes
16. hackers.upchieve.org and argocd.upchieve.org is not preloaded.N/AViolation of Secure Design Principles · low
    2 votes