HexBrain
Sign in

Browse / Udemy

Udemy

37disclosed reports
$50paid in bounties

See its reports on the map

What gets reported to Udemy

Most upvoted reports

AllValidInformativeN/ADuplicate

  1. Completed Compromise & Source Code Disclosure via Exposed Jenkins Dashboard at https://jenkins101.udemy.comCode Injection · high
    63 votes
  2. [affiliates.udemy.com] Wordpress user admin information discloureInformation Disclosure · low
    60 votes
  3. [engineering.udemy.com] - Subdomain Takeover (ghost.io)Improper Access Control - Generic · low
    33 votes
  4. S3 bucket unnecessarily discloses permissionsImproper Access Control - Generic
    27 votes
  5. Subdomain Takeover (and Stored XSS) via Trailing Dot at https://coding-exercises.udemy.comCross-site Scripting (XSS) - Stored
    19 votes
  6. Able to view others' gifts on /gift/share URL, giftId is predictable, and easy to manipulateImproper Authentication - Generic
    16 votes
  7. Jenkinshigh
    13 votes
  8. AWS S3 bucket writable for authenticated aws userImproper Authentication - Generic
    13 votes
  9. CSRF in Udemy.com InformativeCross-Site Request Forgery (CSRF)
    11 votes
  10. Ability to add pishing links in discusion ," Bypassing uneductional Links add "Information Disclosure
    10 votes
  11. Subdomain Takeover at Landing.udemy.com Privilege Escalation · low
    9 votes
  12. teach.udemy.com log poison vulnerability through wordpress debug.log being publically availableCode Injection
    8 votes
  13. NON VALIDATION OF SESSIONS AFTER PASSWORD CHANGEDuplicateImproper Authentication - Generic
    6 votes
  14. Stored XSS at UdemyCross-site Scripting (XSS) - Generic
    $505 votes
  15. Extremely high Course rating values could be set in order to make really high Average rating of the course. Negative values could be set to.Violation of Secure Design Principles
    5 votes
  16. No password length restrictionInformativeWeak Cryptography for Passwords
    4 votes
  17. Content Spoofing in udemyViolation of Secure Design Principles · low
    4 votes
  18. Authentication Data are not Clearing Improper Authentication - Generic
    4 votes
  19. Critical : Malware and XSS file can be uploaded and executed on udemyInformativeCross-site Scripting (XSS) - Generic
    3 votes
  20. Csrf on creating courseInformativeCross-Site Request Forgery (CSRF)
    3 votes
  21. Showing Up Source CodeInformative
    3 votes
  22. XSS VulnerabilityCross-site Scripting (XSS) - Generic
    3 votes
  23. XSS on https://www.udemy.com/asset/export.htmlCross-site Scripting (XSS) - Generic
    3 votes
  24. Misconfigured SPF Record FlagInformativeViolation of Secure Design Principles
    3 votes
  25. xss profileCross-site Scripting (XSS) - Generic
    3 votes
  26. sweet32 InformativeCryptographic Issues - Generic
    2 votes
  27. Reflected XSS and/or malicious redirection via JWPlayer 6 configuration modificationInformativeCross-site Scripting (XSS) - Generic
    2 votes
  28. Multiple sub domain are vulnerable because of leaking full path Information Disclosure
    2 votes
  29. leak receipt of another userInformation Disclosure
    2 votes
  30. CSRF TokenInformativeCross-Site Request Forgery (CSRF)
    1 votes
  31. Violation of secure design principleInformativeViolation of Secure Design Principles
    1 votes
  32. Weak PasswordInformativeViolation of Secure Design Principles
    1 votes
  33. CSRF Token Design FlawInformativeCross-Site Request Forgery (CSRF)
    1 votes
  34. Udemy s3 storage can be used by an attacker personal website because of missing CSRF TokenInformativeCross-Site Request Forgery (CSRF)
    1 votes
  35. information disclosureInformation Disclosure
    1 votes
  36. xss on autoserchCross-site Scripting (XSS) - Generic
    1 votes
  37. Stored XSSInformativeCross-site Scripting (XSS) - Generic