Browse / WakaTime

WakaTime

See its reports on the map

What gets reported to WakaTime

• Misconfiguration18
• Authentication17
• Information Disclosure9
• Access Control8
• Insecure Direct Object Reference2
• Business Logic2

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Session Replay Attack Allows Authentication Bypass via Captured Login Responses Allowing Bypass of 429 Too many attempts for Multiple Failed LoginsInformativeImproper Authentication - Generic · high
   54 votes
2. InvalidInformativeImproper Access Control - Generic · low
   26 votes
3. Login page password - guessing attackInformativeImproper Restriction of Authentication Attempts · low
   6 votes
4. Can link to websites from profileInformativeImproper Authentication - Generic · low
   4 votes
5. password token validationInformativeImproper Authentication - Generic · low
   4 votes
6. Validation of Password reset tokensInformativeViolation of Secure Design Principles · low
   3 votes
7. Running 2 accounts with a single emailInformativeBusiness Logic Errors
   3 votes
8. Sensitive Cookie Without 'HttpOnly' FlagInformativeMisconfiguration
   3 votes