Security Research Portal
Vulnerability
Archive
Total Findings
350
Fully Disclosed
Risk Distribution
VULN
Critical (27)
High (58)
Medium (113)
Target Domains
Web228
Network55
Mobile67
Filter By Category
Filter By Severity
Critical
Broken Function Level Authorization Leads to Unauthenticated Account Takeover (CWE-306)
Web
Critical
Use of Hard-coded Cryptographic Key Leading to Full Decryption of Sensitive Configuration Data (CWE-321)
Mobile
Critical
Profile PIN Bypass Leading to Full Account Takeover – CWE-287
Mobile
Critical
Hardcoded Keys Leading to Amazon Simple Storage Service (S3) Bucket Takeover – CWE-798
Mobile
Critical
Database Administrative Privilege Escalation via Credential Cracking
Network
Critical
Privilege Escalation via API Response Manipulation - CWE-269
Mobile
Critical
Broken Authentication (Unauthenticated Backend API Access) On Multiple Endpoints (CWE-287)
Web
Critical
Authentication Bypass via HTTP Response Manipulation Leading to Full Account Takeover – CWE-287
Mobile
Critical
Broken Function Level Authorization on Change MPIN Endpoint Leading to Unauthorized MPIN Takeover of Any Account – CWE-862
Mobile
Critical
Broken Function Level Authorization and Missing Rate Limiting on Change Password Endpoint – CWE-862
Mobile