Stripo Inc · disclosed reports
Input Validation and Logic
9 disclosed reports · $0 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Stripo Inc on HackerOne- reports
- 9
- paid a bounty
- 0
Every one of the 9 is a mark on the map. Named now: 1 to 9, most upvoted first.
- No rate limiting for subscribe email + lead to Cross origin misconfiguration
- Able to use 'PREMIUM TEMPLATES' in 'FREE PLAN' at [https://my.stripo.email/cabinet/#/my-templates/]
- Bypass of #1047119: Missing Rate Limit while creating Plug-Ins at https://my.stripo.email/cabinet/plugins/
- No rate limiting - Create data
- No rate limit in email subscription
- Ability to use premium templates as free user via https://stripo.email/templates/?utm_source=viewstripo&utm_medium=referral
- No rate limiting for confirmation email lead to huge Mass mailings
- No rate limiting - Create Plug-ins
- my.stripo.emai email verification bypassed and also create email templates
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.