Stripo Inc Bug Bounty Program Statistics

Stripo Inc Program Statistics

27 total issues disclosed

$0 total paid publicly

Most disclosed (5 disclosures) — Server-Side Request Forgery (SSRF)

Disclosed Reports

Show entries

Search:

Report Title	Vulnerability Type	Disclosed By	Severity	Disclosed on
SSL cookie without secure flag set	None supplied	classifled	Medium	2020-10-13
[www.stripo.email] There is no rate limit for /it/contact-us/ endpoints	Improper Authentication - Generic	what_web	Low	2020-07-03
[www.stripo.email] There is no rate limit for contact-us endpoints	Improper Authorization	what_web	Low	2020-05-26
[www.stripo.email] You can bypass the speed limit by changing the IP.	Information Exposure Through Debug Information	what_web	Medium	2020-06-30
[www.stripo.email] You can override the speed limit by adding the X-Forwarded-For header.	Improper Authorization	what_web	Medium	2020-04-23
Able to change password by entering wrong old password	Cryptographic Issues - Generic	rutik346	No rating	2019-12-18
Blind SSRF while Creating Templates	Server-Side Request Forgery (SSRF)	dotsecurity	High	2020-03-24
Bypassing Content-Security-Policy leads to open-redirect and iframe xss	Open Redirect	echidonut	Medium	2021-07-30
Cross-Site WebSocket Hijacking Lead to Steal XSRF-TOKEN	Improper Access Control - Generic	3x3s	High	2020-07-27
Email verification bypasa	Incorrect Authorization	d3ltaf0rc3	High	2020-03-24
Integer Overflow (CVE_2017_7529)	Integer Overflow	whitehatmat	Medium	2020-07-13
multiple email usage -my.stripo.email-	Improper Access Control - Generic	mraldersonn	Medium	2020-07-03
No CSRF Protection in Resend Confirmation Email feature leads to Sending Unwanted Email in Victim's Inbox without knowing Victim's email address	Cross-Site Request Forgery (CSRF)	binit	Medium	2020-09-08
No length on password	None supplied	prateek_thakare	Medium	2019-12-23
No rate limiting for subscribe email + lead to Cross origin misconfiguration	Business Logic Errors	kittytrace	Medium	2020-11-30
Open memory dump method leaking customer information ,secret keys , password , source code & admin accounts	Exposed Dangerous Method or Function	homains	Critical	2020-01-31
Public and secret api key leaked in JavaScript source	Cleartext Storage of Sensitive Information	0x4_aulia	Medium	2020-09-29
Race condition on my.stripo.email at /cabinet/stripeapi/v1/projects/298427/emails/folders uri	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')	bminossi	Medium	2020-11-09
SSRF & unrestricted file upload on https://my.stripo.email/	Server-Side Request Forgery (SSRF)	pain45	Critical	2020-02-19
SSRF in Export template to ActiveCampaign	Server-Side Request Forgery (SSRF)	c1kada	Medium	2020-04-10

Showing 1 to 20 of 27 entries

Previous1 2Next

BugBountyHunter

Stripo Inc Program Statistics

Disclosed Reports