Browse / Vercel

Vercel

See its reports on the map

What gets reported to Vercel

• Open Redirect5
• Cross-site Scripting4
• Authentication3
• Access Control1
• Cross-Site Request Forgery1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Revoked deployment collaborator regains access to private comments after active collaborator interactionAccess Control Check Implemented After Asset is Accessed · medium
   $1,02655 votes
2. Open redirect vuln on loginOpen Redirect
   45 votes
3. through %09 Character the attacker is able to steal Github Token [ Account Takeover ]Open Redirect
   44 votes
4. Gitlab Oauth Misconfiguration Lead To Account Takeover Improper Authentication - Generic
   39 votes
5. Open Redirect on Gitllab Oauth leading to Acount TakeoverOpen Redirect
   34 votes
6. CSRF On Connect Account With Github Lead To Account TakeoverCross-Site Request Forgery (CSRF)
   29 votes
7. Stored XSS on Zeit.co user profileCross-site Scripting (XSS) - Stored
   21 votes
8. Stored Cross-site scripting Cross-site Scripting (XSS) - Stored
   13 votes
9. User personal data disclosure via APIInformation Disclosure
   12 votes
10. [Fix Bypass #541631] Open redirect on SignupOpen Redirect
    9 votes
11. Access control bypass leads to domain information disclosureAuthentication Bypass Using an Alternate Path or Channel
    8 votes
12. Open redirection in https://zeit.co/login?next=Open Redirect
    7 votes
13. Stored XSS in profile pageCross-site Scripting (XSS) - Stored
    7 votes
14. [serve] Path TraversalPath Traversal
    5 votes
15. Unauthorized admission to any team in zeit.coImproper Authentication - Generic
    3 votes
16. Reflected DOM-Based XSS On Due Lack Filter On Parameter ?nextCross-site Scripting (XSS) - DOM
    3 votes