← 返回地图破甲

浏览报告

仅含 CVE

248 份报告 · 本页赏金 $10,150 · 清除筛选

Bypassing x profile verification to receive instant blue checkmark and unlimited profile changes业务逻辑X / xAI低危$2502024-03-26 Cross-Domain Leakage of X Username / UserID due to Dynamically Generated JS File信息泄露X / xAI低危$1,5002024-05-10 Ability to see hidden likes访问控制X / xAI低危—2024-05-10 Ability to getting Twitter Blue verified badge without purchase it业务逻辑X / xAI低危—2024-02-22 Able to see Twitter Circle tweets due to improper access control on the "FavoriteTweet" endpoint访问控制X / xAI低危—2024-03-01 Discoverability by phone number/email restriction bypass访问控制X / xAI中危$5,0402022-02-11 Link-shortener bypass (regression on fix for #1032610)错误配置X / xAI低危$5602022-12-12 Subdomain takeover of images.crossinstall.com业务逻辑X / xAI中危—2022-01-05 Remote 0click exfiltration of Safari user's IP address访问控制X / xAI低危$5602022-06-15 Blind XSS on Twitter's internal Jira panel at ████ allows exfiltration of hackers reports and other sensitive data跨站脚本X / xAI高危—2022-02-12 Identify the mobile number of a twitter user信息泄露X / xAI高危$5602022-03-29 Blind XSS on Twitter's internal Big Data panel at █████████████跨站脚本X / xAI高危—2021-07-09 Bypass t.co link shortener in Twitter direct messages业务逻辑X / xAI低危—2021-05-18 Ability to add arbitrary images/descriptions/titles to ohter people's issues via IDOR on getrevue.co不安全的直接对象引用X / xAI高危—2021-05-26 PI leakage By Brute Forcing and Phone number deleting without using password访问控制X / xAI低危—2021-04-22 Open Redirect on https://www.twitterflightschool.com/widgets/experience?destination_url=https://evil.com开放重定向X / xAI低危—2021-05-04 2 Subdomains Takeover at readfu.com访问控制X / xAI低危—2021-03-15 Chained open redirects and use of Ideographic Full Stop defeat Twitter's approach to blocking links错误配置X / xAI低危$5602022-12-29 Read-only application can publish/delete fleets访问控制X / xAI低危—2021-01-04 Github Account hijack through broken link in developer.twitter.com其他弱点X / xAI中危—2021-02-04 The Deleted Polls is Still Accessable after 30 Days信息泄露X / xAI中危$5602023-02-13 Bypass Password Authentication to Update the Password身份认证X / xAI低危—2021-02-12 Bypass Password Authentication to Update the Password身份认证X / xAI中危—2021-01-11 Twitter Media Studio Source Information Disclosure With Analyst Role信息泄露X / xAI低危—2020-10-26 Safe Redirect Bypass错误配置X / xAI低危$5602020-09-10