Browse / Zivver

Zivver

See its reports on the map

What gets reported to Zivver

• Access Control2
• Information Disclosure2
• Cross-site Scripting2
• Injection and Smuggling1
• Business Logic1
• Misconfiguration1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. XXE Injection through SVG image upload leads to SSRFXML External Entities (XXE)
   112 votes
2. Two-factor authentication can be disabled when logged in without 2fa or password confirmation Business Logic Errors
   24 votes
3. Bypassing Rate limit for forgot password by using different ip addressesViolation of Secure Design Principles
   16 votes
4. one delegate can add another delegate and delete other delegates, exposing all confidential inbox messagesPrivilege Escalation
   12 votes
5. ADB Backup is enabled within AndroidManifestInformation Disclosure
   11 votes
6. Bypass MFA requirement to send messagesForced Browsing
   5 votes
7. Timing difference exposes existence of accountsInformation Exposure Through Timing Discrepancy
   4 votes
8. Cross-site Scripting (XSS) - ReflectedCross-site Scripting (XSS) - Reflected
   4 votes
9. Cross-Site Scripting thorough XSSJacking/PasteJacking Technique Cross-site Scripting (XSS) - Reflected
   4 votes