浏览报告
19 份报告 · 本页赏金 $500 · 清除筛选
xmlrpc.php FILE IS enabled it will used for Bruteforce attack and Denial of Service(DoS)拒绝服务BlockDev Sp. Z o.o高危$5002021-02-12SQL Injection leads to retrieve the contents of an entire database.SQL 注入BlockDev Sp. Z o.o高危—2021-12-29A specially crafted value for the 'Cache-Digest' header causing crash in chat.makerdao.com身份认证BlockDev Sp. Z o.o高危—2020-11-02Email HTML injection其他弱点BlockDev Sp. Z o.o低危—2020-06-10Blind SSRF at https://chat.makerdao.com/account/profile服务端请求伪造BlockDev Sp. Z o.o高危—2020-04-14load scripts DOS vulnerability身份认证BlockDev Sp. Z o.o中危—2020-04-02xmlrpc.php FILE IS enable it will used for Bruteforce attack其他弱点BlockDev Sp. Z o.o未评级—2020-02-18DoS of https://blog.makerdao.com/ via CVE-2018-6389其他弱点BlockDev Sp. Z o.o未评级—2020-02-18xmlrpc.php file is enable it will used for (Denial of Service) and bruteforce attack拒绝服务BlockDev Sp. Z o.o未评级—2020-04-07[blog.makerdao.com] Multiple Vulnerabilities - Leads to leakage user admin sensitive exposure业务逻辑BlockDev Sp. Z o.o未评级—2020-04-14Two-factor authentication (2FA) Bypass身份认证BlockDev Sp. Z o.o高危—2020-01-15UNRESTRICTED FILE UPLOAD AT chat.makerdao.com其他弱点BlockDev Sp. Z o.o中危—2020-01-15.git file accessible信息泄露BlockDev Sp. Z o.o低危—2019-09-13Wordpress users disclosure on blog.makerdao.con信息泄露BlockDev Sp. Z o.o低危—2020-01-15Steal all MKR from `flap` during liquidation by exploiting lack of validation in `flap.kick`其他弱点BlockDev Sp. Z o.o中危—2019-09-26Steal ALL collateral during liquidation by exploiting lack of validation in `flip.kick`其他弱点BlockDev Sp. Z o.o高危—2019-10-01Steal collateral during `end` process, by earning DSR interest after `flow`.业务逻辑BlockDev Sp. Z o.o中危—2019-09-09Earn free DAI interest (inflation) through instant CDP+DSR in one tx业务逻辑BlockDev Sp. Z o.o中危—2019-08-12App Takeover ( makerdao.herokuapp.com )访问控制BlockDev Sp. Z o.o中危—2020-01-15