RATELIMITED Program Statistics

View program

24 total issues disclosed

$0 total paid publicly

Most disclosed (7 disclosures) — Information Disclosure

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Subdomain takeover in GitLab Pages [george.ratelimited.me] None supplied fdeleite High 2024-08-11
Apache mod_negotiation filename bruteforcing https://api.ratelimited.me None supplied codeslayer1337 Low 2023-08-01
HTTP PUT method is enabled downloader.ratelimited.me None supplied codeslayer1337 High 2022-08-07
Source code disclosure at ███ Information Disclosure 0xd0ff High 2020-06-20
Information Disclosure PHPpgAdmin Information Disclosure mazmur None 2020-02-29
Cross Site Request Forgery in auth in https://auth.ratelimited.me/ Cross-Site Request Forgery (CSRF) miguel_santareno Medium 2020-02-21
xss in /users/[id]/set_tier endpoint Cross-site Scripting (XSS) - Reflected gabriel-kimiaie Medium 2020-01-25
Unrestricted File Upload on https://auth.ratelimited.me None supplied daniel_v No rating 2019-05-18
Credientals Over GET method in plain Text Unprotected Transport of Credentials d33van Medium 2019-02-17
Missing Protection Mechanism in Mail Servers allows malicious user to use staff.ratelimited.me email could lead to identity theft. Violation of Secure Design Principles notexist High 2019-02-02
HTTP PUT method is enabled ratelimited.me None supplied codeslayer1337 Critical 2019-01-29
Line feed injection in get request leads AWS S3 Bucket information disclosure Information Disclosure aty Medium 2019-01-14
Local File Download Improper Access Control - Generic z0mb13 Critical 2019-01-01
Exposure of tinyMCE js source code with plugin version disclosure which can leads to exploit further attacks. Information Disclosure wolfdroid Low 2018-12-29
Open Directory Information Exposure Through Directory Listing jerry3 Medium 2018-12-24
Server Header disclose The Os and Web server Version Violation of Secure Design Principles bb00x No rating 2018-12-22
Hackerone1 HTTP Request Smuggling yasinylcn17 High 2018-12-21
Editable Wiki repo by anyone Violation of Secure Design Principles bb00x Low 2018-12-20
Apache Version Disclosure Through Directory Indexing Information Exposure Through an Error Message sinsinology- Medium 2018-12-15
Information Disclosure on https://theendlessweb.com/ Information Disclosure dhamu_harker No rating 2018-12-15
Banner Grabbing - Apache Server Version Disclousure Information Disclosure hamzamandil Medium 2018-12-11
information disclosure which leak the apache version Information Disclosure hamzamn2098 Low 2018-12-11
HTTP PUT method enabled Improper Access Control - Generic hach3ro Critical 2018-12-11
HTTP PUT method enabled Improper Access Control - Generic emitrani Critical 2018-12-11