4 total issues disclosed

$500 total paid publicly

Most disclosed (1 disclosures) — Open Redirect

View disclosed reports

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Steal any users `access_token` via open redirect in https://streamlabs.com/global/identity?popup=1&r= None supplied sudi Medium 2021-11-04
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com] Privilege Escalation mrmax4o4 Low 2021-04-27
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id field Insecure Direct Object Reference (IDOR) bugra Low 2020-11-26
GET based Open redirect on [streamlabs.com/content-hub/streamlabs-obs/search?query=] Open Redirect raywando Low 2020-10-10