Browse / Valve

Valve

See its reports on the map

What gets reported to Valve

• Memory Corruption28
• Access Control10
• Code Execution10
• Cross-site Scripting8
• Information Disclosure8
• Authentication4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. RCE on Steam Client via buffer overflow in Server InfoClassic Buffer Overflow · critical
   1,289 votes
2. Getting all the CD keys of any gameImproper Access Control - Generic · critical
   $20,000638 votes
3. XSS in steam react chat clientCross-site Scripting (XSS) - Stored · critical
   $7,500499 votes
4. Modify in-flight data to payment provider Smart2PayBusiness Logic Errors · critical
   $7,500443 votes
5. Panorama UI XSS leads to Remote Code Execution via Kick/Disconnect MessageCode Injection · critical
   420 votes
6. SQL Injection in report_xml.php through countryFilter[] parameterSQL Injection · critical
   $25,000410 votes
7. Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injectionClassic Buffer Overflow · high
   321 votes
8. Malformed NAV file leads to buffer overflow and code execution in Left4Dead2.exeClassic Buffer Overflow · critical
   $10,000268 votes
9. Unchecked weapon id in WeaponList message parser on client leads to RCEArray Index Underflow · critical
   $3,000229 votes
10. OOB reads in network message handlers leads to RCEOut-of-bounds Read · critical
    $7,500219 votes
11. RCE on CS:GO client using unsanitized entity ID in EntityMsg messageOut-of-bounds Read · critical
    $9,000209 votes
12. Buffer overrun in Steam SILK voice decoderClassic Buffer Overflow · critical
    $7,500196 votes
13. [Portal 2] Remote Code Execution via voice packetsClassic Buffer Overflow · critical
    $5,000173 votes
14. [Half-Life 1] Malformed map name leads to memory corruption and code executionClassic Buffer Overflow · high
    $1,500163 votes
15. Malformed .BSP Access Violation in CS:GO can lead to Remote Code ExecutionClassic Buffer Overflow · critical
    154 votes
16. MySQL username and password leaked in developer.valvesoftware.com via source code dislosurePassword in Configuration File · medium
    123 votes
17. [help.steampowered.com] Account takeover bruteforcing SteamGuardBusiness Logic Errors · high
    $2,500112 votes
18. ISteamAssets gives partners control over unrelated community market transactionsImproper Access Control - Generic · high
    109 votes
19. Specially Crafted Closed Captions File can lead to Remote Code Execution in CS:GO and other Source GamesClassic Buffer Overflow · critical
    $7,500109 votes
20. Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games.Malware · high
    $1,50099 votes
21. Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe)Memory Corruption - Generic · high
    90 votes
22. Access to microtransaction sales data for lots of apps from 2014 to present at /valvefinance/sanity/Improper Access Control - Generic · critical
    88 votes
23. ImageMagick GIF coder vulnerability leading to memory disclosureInformation Disclosure · medium
    86 votes
24. [steam client] Opening a specific steam:// url overwrites files at an arbitrary locationWrite-what-where Condition · medium
    $75080 votes
25. Arbitrary File Write as SYSTEM from unprivileged userInformativePrivilege Escalation · high
    $1,25071 votes
26. CS:GO Server -> Client RCE through OOB access in CSVCMsg_SplitScreen + Info leak in HTTP downloadOut-of-bounds Read · critical
    $7,50066 votes
27. Malformed playlist.txt in GoldSrc games leads to Access Violation & arbitrary code executionStack Overflow · high
    $1,00062 votes
28. Big Picture web browser leaks login cookies and discloses sensitive information (may lead to account takeover)Information Disclosure · high
    60 votes
29. Steam chat - trade offer presentation vulnerabilityBusiness Logic Errors · medium
    60 votes
30. [Source Engine] Material path truncation leads to Remote Code ExecutionImproper Input Validation · high
    $2,50060 votes
31. Shell command injection in https://partner.steamgames.com/admin/game/publish/ via screenshot URLOS Command Injection · critical
    59 votes
32. https://srcds.valve.net/find/ is leaking server config / API keysInformation Disclosure · high
    56 votes
33. Add any depot to your app and access its contents without decryption key; via /apps/setcommonredistsImproper Access Control - Generic · high
    56 votes
34. Buffer overflow In hl.exe's launch -game argument allows an attacker to execute arbitrary code locally or from browserStack Overflow · high
    55 votes
35. Link filter protection bypassOpen Redirect · medium
    55 votes
36. Shell command injection in https://partner.steamgames.com/apps/communityitems/ via file extension of item_image_small and item_image_largeCommand Injection - Generic · critical
    53 votes
37. [CS:GO] Unchecked texture file name with TEXTUREFLAGS_DEPTHRENDERTARGET can lead to Remote Code ExecutionStack Overflow · high
    $2,50048 votes
38. Shell command injection in https://partner.steamgames.com/bundles/savestore/ via overwriting asset_path_identifierOS Command Injection · critical
    47 votes
39. WG call injection in /economy/contextcommandCommand Injection - Generic · critical
    47 votes
40. Stored XXS @ https://steamcommunity.com/search/users/#text= via Profile NameCross-site Scripting (XSS) - Stored · medium
    $75042 votes
41. SQL injection in /errors/viewbuild/SQL Injection · critical
    41 votes
42. Arbitrary file creation with semi-controlled content (leads to DoS, EoP and others) at Steam Windows ClientPath Traversal · medium
    $1,25041 votes
43. Web API key registration allows registering multiple keys by reusing `request_id` low
    40 votes
44. Stored XSS in the guide's GameplayVersion (www.dota2.com)Cross-site Scripting (XSS) - Stored · medium
    $75036 votes
45. Signedness issue in ClassInfo message handler leads to RCE on CS:GO clientArray Index Underflow · critical
    $7,50035 votes
46. Read Access to all comments on unauthorized forums' discussions! IDOR! Insecure Direct Object Reference (IDOR) · medium
    $50034 votes
47. Buffer overflows in demo parsingClassic Buffer Overflow · medium
    33 votes
48. Xss was found by exploiting the URL markdown on http://store.steampowered.comCross-site Scripting (XSS) - DOM · medium
    $1,00032 votes
49. Reflected XSS in www.dota2.comCross-site Scripting (XSS) - Reflected · medium
    32 votes
50. Hidden scheduled partner events are propagated to Steam clients in CMsgClientClanStateInformation Disclosure · medium
    31 votes
51. /applications/dpc_(get|post) provide full access to api.steampowered.com with the Dota2 API keyServer-Side Request Forgery (SSRF) · high
    30 votes
52. Malformed map detailed texture files in GoldSrc games lead to Remote Code ExecutionStack Overflow · medium
    $35030 votes
53. Malformed Skybox .TGA in Half-Life (GoldSRC) leads to Access ViolationClassic Buffer Overflow · high
    30 votes
54. LFI in pChart php libraryPath Traversal · high
    29 votes
55. code injection, steam chat clientCode Injection · medium
    $75028 votes
56. unlock self-lock by brute force Improper Restriction of Authentication Attempts · medium
    $90027 votes
57. GoldSrc: Buffer Overflow in DELTA_ParseDelta function leads to RCEStack Overflow · critical
    $3,00026 votes
58. Deleting other people's comments on ModeratorMessagesImproper Authentication - Generic · low
    $50025 votes
59. [GoldSrc] RCE via malformed BSP fileClassic Buffer Overflow · high
    $45024 votes
60. GetReports works for hubs you don't have access toPrivacy Violation · medium
    $75024 votes
61. Privilege Escalation vulnerability in steam's Remote Play feature leads to arbitrary kernel-mode driver installationPrivilege Escalation · medium
    23 votes
62. Unauthorized updates to extended_info properties in /store/ajaxpackagesaveImproper Access Control - Generic · high
    23 votes
63. [GoldSrc] RCE via 'spk' Console CommandClassic Buffer Overflow · high
    $35023 votes
64. [CS 1.6] Map cycle abuse allows arbitrary file read/writeImproper Access Control - Generic · medium
    $75022 votes
65. GetGlobalAchievementPercentagesForApp is missing the same release checks as GetSchemaForGameInformation Disclosure · medium
    22 votes
66. Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDORInsecure Direct Object Reference (IDOR) · low
    22 votes
67. Suspended users can bypass UGC upload banImproper Access Control - Generic · low
    $50022 votes
68. Malformed BSP in GoldSrc Engine may cause shellcode injectionClassic Buffer Overflow · high
    21 votes
69. RCE on partner.steampowered.comCommand Injection - Generic · critical
    19 votes
70. resetreportedcount & updatetags doesn't verify appid paramImproper Authentication - Generic · medium
    $75019 votes
71. Steam Deck Single Click Root Remote Code Execution InformativeCode Injection · high
    $75018 votes
72. Potential buffer overflow in demoplayer module of GoldSource EngineClassic Buffer Overflow · low
    17 votes
73. Reflected XSS on help.steampowered.comCross-site Scripting (XSS) - Reflected · medium
    16 votes
74. Aapp name leakage on economy history pageInformation Disclosure · medium
    16 votes
75. ajaxgetachievementsforgame is not guarded for unreleased appsInformation Disclosure · medium
    $75014 votes
76. Malformed .WAV triggers an Access Violation on GoldSRC (hl.exe)Memory Corruption - Generic · medium
    14 votes
77. XSS @ store.steampowered.com via agecheck path nameCross-site Scripting (XSS) - Reflected · medium
    $75014 votes
78. Unfiltered input allows for XSS in "Playtime Item Grants" fieldsCross-site Scripting (XSS) - Stored · medium
    13 votes
79. Add apps to packages 0, 61, 62 with /store/ajaxpackagemergeImproper Access Control - Generic · high
    12 votes
80. CSRF | Ban or unban users in broadcast's chatCross-Site Request Forgery (CSRF) · low
    12 votes
81. [GoldSrc] Remote Code Execution using malicious WAD list in BSP fileStack Overflow · critical
    $75011 votes
82. Vulnerability in GoldSource Engine allows to upload and run an arbitrary DLL on clientMalware · high
    11 votes