Bug bounty program · HackerOne
FormAssembly
Most upvoted reports6
- #448524Validxmlrpc.php file is enable it will used for (DOS) and bruteforce attackFormAssembly · Denial of Service · 2018–31votes
- #220116ValidSSLv3 Poodle VulnerabilityFormAssembly · Misconfiguration and Insecure Design · 2018–20votes
- #690338Validscripts loader DOS vulnerabilityFormAssembly · Authentication · 2020–8votes
- #198851ValidXSS in api_v1FormAssembly · Cross-site Scripting · 2018–7votes
- #196989ValidXSS on username when register to proffesional accountFormAssembly · Cross-site Scripting · 2017–5votes
- #197253Validformassembly.com is vulnerable to padding-oracle attacks.FormAssembly · Cryptography · 2017–5votes
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.