← 返回地图破甲

浏览报告

仅含 CVE

37 份报告 · 本页赏金 $91,000 · 清除筛选

Intent Leads To Unauthorised Video Call Initiation Leaking Surrounding Informations Of Victim信息泄露Snapchat低危—2024-04-05 internal dev tokens disclosure信息泄露Snapchat低危$2502023-06-14 Delete anyone's content spotlight remotely.不安全的直接对象引用Snapchat中危$15,0002023-03-06 Password reset tokens sent to CSP reporting endpoints信息泄露Snapchat低危—2022-08-31 Organization Members in Snap Kit may Deactivate Apps访问控制Snapchat低危—2021-08-26 CSRF when unlocking lenses leads to lenses being forcefully installed without user interaction跨站请求伪造Snapchat低危$2502021-07-29 Improper Authentication - any user can login as other user with otp/logout & otp/login身份认证Snapchat高危—2021-09-03 Leaked JFrog Artifactory username and password exposed on GitHub - https://snapchat.jfrog.io信息泄露Snapchat中危$15,0002021-08-12 CreatorID leaked from public content posted to SnapMaps服务端请求伪造Snapchat低危$1,0002020-12-18 Bypass Rate Limits on app.snapchat.com API Endpoint via X-Forwarded-For Header业务逻辑Snapchat低危—2021-08-04 Access to multiple production Grafana dashboards信息泄露Snapchat中危$10,0002020-11-04 Server-Side Request Forgery using Javascript allows to exfill data from Google Metadata服务端请求伪造Snapchat未评级—2020-11-30 Exposed Kubernetes API - RCE/Exposed Creds代码执行Snapchat高危$25,0002021-07-29 Github Token Leaked publicly for https://github.sc-corp.net信息泄露Snapchat高危—2018-10-08 Domain Takeover in [obviousengine.com] a snapchat acquisitions访问控制Snapchat中危—2018-10-07 Client IP Spoofing using "X-Forwarded-For: 127.0.0.1" on "studio-app.snapchat.com" exposing bucket details访问控制Snapchat中危$5002021-08-12 Publicly accessible Continuous Integration Tool访问控制Snapchat高危—2021-07-29 Bitmoji source code is accessible信息泄露Snapchat低危$1,0002021-07-31 Subdomain Takeover via Unclaimed WordPress site身份认证Snapchat低危—2017-10-06 Subdomain Takeover via unclaimed UserVoice domain访问控制Snapchat中危$2502017-10-04 Stealing SSO Login Tokens (snappublisher.snapchat.com)身份认证Snapchat中危$7,5002021-07-29 RCE/LFI on test Jenkins instance due to improper authentication flow访问控制Snapchat低危—2017-08-19 [spectacles.com] Bypassing quantity limit in orders注入与走私Snapchat低危$2502017-08-12 CRLF Injection at vpn.bitstrips.com注入与走私Snapchat低危—2017-06-15 Open prod Jenkins instance信息泄露Snapchat中危$15,0002017-08-19