← 返回地图破甲

浏览报告

仅含 CVE

36 份报告 · 本页赏金 $2,590 · 清除筛选

Exfiltrating a victim's exact location (to within 5m)信息泄露Bumble中危—2021-07-21 Bumble API exposes read status of chat messages信息泄露Bumble低危$6002021-03-13 Misconfigured oauth leads to Pre account takeover业务逻辑Bumble低危—2021-03-18 Race Condition on "Get free Badoo Premium" which allows to get more days of free premium for Free.业务逻辑Bumble低危—2020-12-07 Possible (we need to wait for some time) takeover of subdomain badootech.badoo.com which is pointing to Medium servers业务逻辑Bumble低危—2020-12-30 Identify unique user ID of all the profiles不安全的直接对象引用Bumble低危—2020-12-25 XSS DI BIODATA跨站脚本Bumble低危—2020-11-09 On Singing up with a Phone number , The 4 digit OTP does not expires for a long time leading to an easy attack and make a verified account easilty错误配置Bumble中危—2020-11-25 Leak of authorization urls leads to account takeover身份认证Bumble未评级—2020-05-08 The login of Hotor Not is Vulnerable to bruteforce.身份认证Bumble中危—2020-01-23 Bruteforce password recovery code错误配置Bumble未评级—2020-01-18 Reflected XSS跨站脚本Bumble高危$1,0002019-11-21 SSO through odnoklassniki uses http rather than https密码学缺陷Bumble低危$1502019-12-21 Расшифровка всех типов шифрованных ID信息泄露Bumble低危—2018-11-01 Compromising the user ID信息泄露Bumble中危—2018-10-07 Индексация почты/логинов пользователей其他弱点Bumble未评级$1402018-06-24 CSRF bug跨站请求伪造Bumble未评级—2017-06-12 CSRF Attack on (m.badoo.com)deleting account and erasing imported contacts跨站请求伪造Bumble低危$2802017-02-06 Email Spoofing错误配置Bumble低危—2017-01-24 Leave inaccessible messaging system with a message (https://us1.badoo.com)其他弱点Bumble低危—2017-01-19 Arbitrary modification value "session" (Cookie) in badoo.com身份认证Bumble低危—2017-06-25 Unvalidated redirect on team.badoo.com跨站脚本Bumble低危$1402016-12-03 No rate-limit in SERVER_SECURITY_CHECK身份认证Bumble低危—2016-11-10 Change contents of the careers iframe in https://corp.badoo.com/jobs其他弱点Bumble未评级—2016-07-07 Получение оригинала скрытого изображения信息泄露Bumble未评级$2802016-06-09