Smule Program Statistics

View program

11 total issues disclosed

$0 total paid publicly

Most disclosed (2 disclosures) — Improper Restriction of Authentication Attempts

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Possible Subdomain Takeover For Inbound Emails Improper Access Control - Generic cryptic_ No rating 2024-08-07
[com.smule.autorap.*] Cloud Messaging/Push Notification service takeover due to clear-text usage of Legacy FCM Server keys in the client app Use of Hard-coded Credentials absshax Critical 2020-08-24
No Rate Limiting On Phone Number Login Leads to Login Bypass Improper Authentication - Generic done11 Medium 2020-07-24
Error Page Content Spoofing or Text Injection Violation of Secure Design Principles ajayshrimali Low 2020-06-03
Open redirect bypass & SSRF Security Vulnerability Server-Side Request Forgery (SSRF) snwlol None 2020-01-17
stored xss in https://www.smule.com Cross-site Scripting (XSS) - Stored hami High 2019-11-12
Web cache poisoning leads to disclosure of CSRF token and sensitive information Violation of Secure Design Principles d3f4u17 Medium 2019-07-21
Missing Rate Limit in Password Change Improper Restriction of Authentication Attempts dhakal_ananda Low 2019-07-12
Open Redirect on ███ Open Redirect assassin_marcos Medium 2019-05-29
Missing Rate Limit in Forgot Password can Lead to email address leakage of all smule accounts Improper Restriction of Authentication Attempts dhakal_ananda Medium 2019-05-13
Disclosure of information about the system, configuration files. Information Disclosure fr_0_ank Low 2019-01-03