Browse / X / xAI

X / xAI

See its reports on the map

What gets reported to X / xAI

• Cross-site Scripting48
• Authentication37
• Information Disclosure34
• Misconfiguration19
• Access Control18
• Cross-Site Request Forgery16

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Broken authentication and invalidated email address leads to account takeoverInformativeCryptographic Issues - Generic
   9 votes
2. List of a ton of internal twitter servers available on GitHubInformativeInformation Disclosure
   4 votes
3. Cross site Port Scanning bug in twitter developers console InformativeCryptographic Issues - Generic
   4 votes
4. Account Deleted without any confirmationInformativeImproper Authentication - Generic
   4 votes
5. Notifications can mark as read by CSRFInformativeCross-Site Request Forgery (CSRF)
   4 votes
6. Password reset link not validated.InformativeUncontrolled Resource Consumption
   4 votes
7. Privecy Issue : view "Protected users" followers and followingInformativeImproper Authentication - Generic
   3 votes
8. Abuse of "Remember Me" functionality.InformativeImproper Authentication - Generic
   3 votes
9. Headers MissingInformativeViolation of Secure Design Principles
   3 votes
10. Flaw in valid password policy.InformativeImproper Authentication - Generic
    3 votes
11. uclfinal.twitter.com and euro2012.twitter.com are vulnerable to CRIME attackInformativeCryptographic Issues - Generic
    3 votes
12. Token remains alive ever after logging out!InformativeImproper Authentication - Generic
    3 votes
13. Opportunity to post hidden commentsInformativeBusiness Logic Errors · critical
    2 votes
14. OS Command Execution on User's PC via CSV InjectionInformativeOS Command Injection · medium
    2 votes
15. Privacy Issue on protected tweetsInformativeImproper Authentication - Generic
    2 votes
16. Homograph attack. InformativeViolation of Secure Design Principles
    2 votes
17. Option Method Enabled on web serverInformative
    2 votes
18. BROKEN AUTHENTICATION IN MOBILE VERIFICATION InformativeViolation of Secure Design Principles
    2 votes
19. Creating Unauthorized Audience ListsInformativeViolation of Secure Design Principles
    2 votes
20. Path disclosure in platform0.twitter.comInformativeInformation Disclosure
    1 votes
21. No rate limiting on creating listsInformativeViolation of Secure Design Principles
    1 votes
22. Options Method EnabledInformative
    1 votes
23. Captcha bypass with extension at http://www.mopub.com/about/contact/InformativeCryptographic Issues - Generic
    1 votes