Skip to content
BackEsc
Sign in

U.S. Dept Of Defense · disclosed reports

File and Path Handling

52 disclosed reports · $500 paid

Out of date: the sync last ran 4 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.

Open U.S. Dept Of Defense on HackerOne
reports
52
paid a bounty
1

Every one of the 52 is a mark on the map. Named now: 1 to 26, most upvoted first.

  1. CVE-2020-3187 - Unauthenticated Arbitrary File Deletion#960330U.S. Dept Of Defense · 70 votes
  2. Unauthenticated LFI (Local File Inclusion) using the symbol `!` At the target `https://████/`#2778380U.S. Dept Of Defense · 69 votes
  3. LFI with potential to RCE on ██████ using CVE-2019-3396#538771U.S. Dept Of Defense · 58 votes
  4. Unathenticated file read (CVE-2020-3452)#2233418U.S. Dept Of Defense · 36 votes
  5. Arbitrary File Reading leads to RCE in the Pulse Secure SSL VPN on the https://██████ (███)#696276U.S. Dept Of Defense · 31 votes
  6. Path traversal on https://███ allows arbitrary file read (CVE-2020-3452)#936399U.S. Dept Of Defense · 20 votes
  7. [CVE-2018-0296] Cisco VPN path traversal on the https://███████/ (████.███.mil)#695429U.S. Dept Of Defense · 19 votes
  8. ███ is vulnerable to CVE-2020-3452 Read-Only Path Traversal Vulnerability#959187U.S. Dept Of Defense · 18 votes
  9. [CVE-2018-0296] Cisco VPN path traversal on the https://███ (████████████████)#695427U.S. Dept Of Defense · 17 votes
  10. Arbitrary File Read at ███ via filename parameter#1436223U.S. Dept Of Defense · 16 votes
  11. [CVE-2018-0296] Cisco VPN path traversal on the https://██████████#694865U.S. Dept Of Defense · 16 votes
  12. Unrestricted File Upload Leads to XSS & Potential RCE#900179U.S. Dept Of Defense · 15 votes
  13. [Critical] Full local fylesystem access (LFI/LFD) as admin via Path Traversal in the misconfigured Java servlet on the https://███/#497771U.S. Dept Of Defense · 14 votes
  14. Path traversal leads to reading of local files on ███████ and ████#1888808U.S. Dept Of Defense · 12 votes
  15. Local file read at https://████/ [HtUS]#1626210U.S. Dept Of Defense · 12 votes
  16. Local File Inclusion In Registration Page#1007799U.S. Dept Of Defense · 12 votes
  17. Path traversal on ████████#217344U.S. Dept Of Defense · 12 votes
  18. Local File Read vulnerability on ██████████ [HtUS]#1624670U.S. Dept Of Defense · $500 · 11 votes
  19. Path Traversal - [ CVE-2020-3452 ]#1137321U.S. Dept Of Defense · 11 votes
  20. https://████ is vulnerable to cve-2020-3452#998925U.S. Dept Of Defense · 11 votes
  21. lfi in filePathDownload parameter via ███████#1542734U.S. Dept Of Defense · 10 votes
  22. Unauthenticated Arbitrary File Deletion "CVE-2020-3187" in █████#1026265U.S. Dept Of Defense · 10 votes
  23. Unauthenticated Arbitrary File Deletion ("CVE-2020-3187") in ████████#978335U.S. Dept Of Defense · 10 votes
  24. [CVE-2018-0296] Cisco VPN path traversal on the https://████████/ (█████████.mil)#696400U.S. Dept Of Defense · 10 votes
  25. [CVE-2018-0296] Cisco VPN path traversal on the https://████████/ (no hostname)#695780U.S. Dept Of Defense · 10 votes
  26. [CVE-2018-0296] Cisco VPN path traversal on the https://███████/ (██████)#695776U.S. Dept Of Defense · 10 votes

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in