← 返回地图破甲

浏览报告

仅含 CVE

117 份报告 · 本页赏金 $18,500 · 清除筛选

Stored XSS on TikTok's backend leads to the leakage of highly sensitive administrator data (Cookies, API Keys, Internal Paths, Emails, phone numbers).跨站脚本TikTok低危—2025-09-11 Chain Vulnerability lead to Full Control Group Live Accounts & Undeletable Creator访问控制TikTok低危—2025-07-08 Chained Broken Access Control in TikTok Live Backstage Enables Full Control of Public Leaderboard Activities访问控制TikTok低危—2025-09-11 Unauthorized Access to Private Video Description via Translation API for Private Accounts不安全的直接对象引用TikTok低危—2025-06-27 Unauthorized Access to TikTok Account [Private Videos] via API Endpoint不安全的直接对象引用TikTok低危—2025-01-24 IDOR on ads.tiktok.com Allows Unauthorized Product Addition不安全的直接对象引用TikTok低危$5002025-02-20 DOM XSS in tiktok.com/login via the redirect_url parameter跨站脚本TikTok中危—2024-09-21 Account Takeover via Authentication Bypass in TikTok Account Recovery身份认证TikTok高危$12,0002024-07-13 Lynxview JS interfaces Takeover via deeplink traversal跨站脚本TikTok中危—2024-05-24 Reflected XSS on Pangle Endpoint跨站脚本TikTok中危$5,0002024-04-05 Stored-XSS-ads.tiktok.com跨站脚本TikTok低危—2024-10-02 HTML Injection on TikTok Ads跨站脚本TikTok低危—2024-02-20 Exploitable live argument in onClick Function leads to Data Leakage of Inactive/Suspended Products业务逻辑TikTok低危$1,0002024-07-19 Authentication Bypass on TikTok Seller Signup Process Allows Account Creation Without Phone Verification访问控制TikTok低危—2024-07-03 RXSS on TikTok endpoints跨站脚本TikTok低危—2024-01-09 RXSS via region parameter跨站脚本TikTok低危—2024-01-09 Multiple Open Redirect on TikTok domains访问控制TikTok低危—2024-02-16 Using Branded Hashtag Feature User Partnered with Account Manager Can View Videos Uploaded By A Private TikTok Account If 'item_id' Is Known信息泄露TikTok低危—2024-04-03 CRLF injection leads to internal XSS on PangleGlobal注入与走私TikTok低危—2023-10-31 Reflected XSS On [https://www-useast1a.tiktok.com/ug/incentive/share/hd]跨站脚本TikTok低危—2024-01-12 CRLF to XSS & Open Redirection跨站脚本TikTok中危—2023-08-16 CSRF in seller-us.tiktok.com/profile/account-setting/delegation-login跨站请求伪造TikTok低危—2023-07-26 Reflected Cross-site Scripting (XSS) at https://www.tiktok.com/跨站脚本TikTok中危—2023-06-02 1 Click to 'Close Account and Refund' via POSTMESSAGE访问控制TikTok低危—2024-01-03 CSRF in ticket function跨站请求伪造TikTok低危—2024-11-05