Browse / XVIDEOS

XVIDEOS

See its reports on the map

What gets reported to XVIDEOS

• Misconfiguration3
• Authentication2
• Cross-site Scripting2
• Information Disclosure2
• Open Redirect1
• Access Control1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Open redirectSpamOpen Redirect
   143 votes
2. Lack of Rate Limiting on Account Creation Endpoint Improper Restriction of Authentication Attempts · low
   $200110 votes
3. Stored XSS via SMTP Error MessageCross-site Scripting (XSS) - Stored · low
   $25086 votes
4. Enable 2FA without verifying the emailDuplicateImproper Access Control - Generic · low
   70 votes
5. No-Rate limit of current password on delete account endpoint(https://www.xvideos.com/account/close)Improper Restriction of Authentication Attempts · low
   $10067 votes
6. Unauthenticated API Access Exposing Premium Content and Financial DataN/AInformation Exposure Through Sent Data
   46 votes
7. Error Page Content Spoofing or Text InjectionViolation of Secure Design Principles · low
   46 votes
8. Error Page Content Spoofing or Text InjectionInformativeViolation of Secure Design Principles
   37 votes
9. Script breaking tag (Forces website to render blank) (Informative)Unchecked Error Condition · low
   $15036 votes
10. API Data Leakage Vulnerability Report - `xvcams.com`N/AInformation Exposure Through Sent Data
    33 votes
11. Self-XSS on Suggest Tag dialog boxCross-site Scripting (XSS) - Stored · low
    $5015 votes
12. Host Header Injection Attack - www.xnxx.comInformativeViolation of Secure Design Principles
    14 votes
13. CSRF on delete friend requests - Not protected with CSRF TokenDuplicateCross-Site Request Forgery (CSRF)
    9 votes