浏览报告
13 份报告 · 本页赏金 $107,900 · 清除筛选
RCE via npm misconfig -- installing internal libraries from the public registry代码执行PayPal高危$30,0002021-02-09Reflect XSS and CSP Bypass on https://www.paypal.com/businesswallet/currencyConverter/跨站脚本PayPal低危—2021-02-10Reflected XSS at https://www.paypal.com/ppcreditapply/da/us跨站脚本PayPal低危—2020-05-19Token leak in security challenge flow allows retrieving victim's PayPal email and plain text password身份认证PayPal中危$15,3002020-01-08DoS on PayPal via web cache poisoning拒绝服务PayPal低危$9,7002019-10-23Bypass for #488147 enables stored XSS on https://paypal.com/signin again注入与走私PayPal中危$20,0002019-08-07Stored XSS on https://paypal.com/signin via cache poisoning注入与走私PayPal中危$18,9002019-08-07Unsafe deserialization leads to token leakage in PayPal & PayPal for Business [Android]代码执行PayPal低危—2021-04-30XSSI on refer.xoom.com allows stealing email addresses and posting to Twitter on behalf of victim跨站请求伪造PayPal低危$3,5002019-02-07XSS [flow] - on www.paypal.com/paypalme/my/landing (requires user interaction)跨站脚本PayPal低危—2018-11-06[PayPal Android] Remote theft of user session using push_notification_webview deeplink开放重定向PayPal低危—2019-02-07IDOR to add secondary users in www.paypal.com/businessmanage/users/api/v1/users不安全的直接对象引用PayPal中危$10,5002019-07-30[Venmo Android] Remote theft of user session开放重定向PayPal低危—2019-02-07