Hiro Program Statistics

View program

11 total issues disclosed

$100 total paid publicly

Most disclosed (4 disclosures) — Information Disclosure

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
No Confirmation Email For Email Change Information Disclosure craxermgr Low 2025-10-31
Information Disclosure Information Disclosure craxermgr Medium 2025-10-31
REDIRECTION VULNERABILITY/HOST HEADER INJECTION VULNERABILITY Open Redirect vyshnav_nk Medium 2025-10-31
Missing restriction on string size of Full Name at browser.blockstack.org None supplied myskar No rating 2025-10-31
Can view all username leaked in https://core.blockstack.org None supplied myskar No rating 2025-10-31
Invalidate active sessions after password change Violation of Secure Design Principles cristiancornea Low 2025-10-31
blockstack.org - is vulnerable to (CVE-2016-2183, CVE-2016-6329) Cryptographic Issues - Generic 0x1_aulia None 2025-10-31
Blockstack Browser For Mac leaks "Core API Password" to 3rd parties Information Disclosure frozensolid Low 2025-10-31
Logout Bypass Vulnerability in Hiro.so Insufficient Session Expiration anonymous--1000 Medium 2025-10-31
Security Issue into Wallet lock protection Improper Authentication - Generic bug_vs_me High 2023-01-11
EXIF Geolocation Data Not Stripped From Uploaded Images Information Disclosure the_predator Low 2019-09-03