Read the researcher's report on HackerOne
No analysis of this report yet. What HackerOne publishes about it is below, with the link to the report. Ask for a correction or removal.
| Report | Access | Whose object | Boundary crossed |
|---|---|---|---|
| XSS and Open Redirect on MoPub Login | No account | No object involved | The login flow sent an authenticated user to an attacker-controlled destination and reportedly allowed script execution. |
| [PayPal Android] Remote theft of user session using push_notification_webview deeplink | No account | No object involved | A webpage or app redirected in-app traffic to an unvalidated destination, exposing sensitive headers. |
| Open redirect at https://inventory.upserve.com/http://google.com/ | No account | No object involved | The site redirects a visitor from its trusted origin to an attacker-chosen external domain. |
| Open Redirect in Logout & Login | No account | No object involved | The logout flow redirected a visitor from the service to an attacker-controlled external site. |
| [Venmo Android] Remote theft of user session | A user account | No object involved | An external link crossed into the app's URL handler and redirected to an unvalidated destination, exposing session data. |
| Open redirect due to scanning QR code via brave browser | No account | No object involved | Scanning a QR code directly opens its external destination without a confirmation step. |
| Open URL Redirection | No account | No object involved | The registration flow redirected a user from the service to an external site. |
| Open redirect vulnerability | No account | No object involved | A link on the redirecting subdomain sent visitors to an attacker-chosen external domain. |
| OAuth redirect uri validation bypass for :proxima_first_party_sync apps | No account | No object involved | OAuth authorization codes intended for a registered callback could be redirected to an attacker-controlled domain. |
| Bypass of Open Redirect Fix on lovable.dev via /..// Path Traversal in redirect parameter | A user account | No object involved | A post-login redirect left the trusted application domain for an external site. |
| Open Redirect on ███████ | No account | No object involved | The application redirected a visitor from its trusted origin to an external destination. |
| Open Redirect | No account | No object involved | A link on the trusted site allegedly redirects a visitor to an external destination. |