/applications/dpc_(get|post) provide full access to api.steampowered.com with the Dota2 API key Analysed #674800 Valid Server-Side Request Forgery High 2024-07-30 – 30 Malformed map detailed texture files in GoldSrc games lead to Remote Code Execution Analysed #505173 Valid Memory Corruption Medium 2019-09-17 $350 30 Malformed Skybox .TGA in Half-Life (GoldSRC) leads to Access Violation Analysed #351016 Valid Memory Corruption High 2018-08-28 – 30 LFI in pChart php library Analysed #288298 Valid File and Path Handling High 2018-05-09 – 29 code injection, steam chat client Analysed #411329 Valid Command and Code Injection Medium 2019-01-07 $750 28 unlock self-lock by brute force Analysed #410221 Valid Authentication Medium 2019-01-23 $900 27 GoldSrc: Buffer Overflow in DELTA_ParseDelta function leads to RCE Analysed #484745 Valid Memory Corruption Critical 2021-05-04 $3,000 26 Deleting other people's comments on ModeratorMessages Analysed #357952 Valid Authentication Low 2019-01-23 $500 25 [GoldSrc] RCE via malformed BSP file Analysed #763403 Valid Memory Corruption High 2020-08-19 $450 24 GetReports works for hubs you don't have access to Analysed #350937 Valid Information Disclosure Medium 2018-05-30 $750 24 Privilege Escalation vulnerability in steam's Remote Play feature leads to arbitrary kernel-mode driver installation Analysed #852091 Valid Access Control Medium 2021-09-21 – 23 Unauthorized updates to extended_info properties in /store/ajaxpackagesave Analysed #815547 Valid Access Control High 2020-09-09 – 23 [GoldSrc] RCE via 'spk' Console Command Analysed #769014 Valid Memory Corruption High 2020-08-19 $350 23 [CS 1.6] Map cycle abuse allows arbitrary file read/write Analysed #590279 Valid Access Control Medium 2021-02-22 $750 22 GetGlobalAchievementPercentagesForApp is missing the same release checks as GetSchemaForGame Analysed #541020 Valid Information Disclosure Medium 2020-02-19 – 22 Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR Analysed #365504 Valid Insecure Direct Object Reference Low 2019-01-07 – 22 Suspended users can bypass UGC upload ban Analysed #354660 Valid Access Control Low 2018-07-02 $500 22 Malformed BSP in GoldSrc Engine may cause shellcode injection Analysed #458929 Valid Memory Corruption High 2020-03-25 – 21 RCE on partner.steampowered.com Analysed #518348 Valid Command and Code Injection Critical 2024-07-30 – 19 resetreportedcount & updatetags doesn't verify appid param Analysed #351106 Valid Authentication Medium 2018-07-02 $750 19 Steam Deck Single Click Root Remote Code Execution #1974296 Informative No weakness recorded High 2023-08-01 $750 18 Potential buffer overflow in demoplayer module of GoldSource Engine Analysed #440758 Valid Memory Corruption Low 2020-02-27 – 17 Reflected XSS on help.steampowered.com Analysed #390429 Valid Cross-site Scripting Medium 2019-01-07 – 16 Aapp name leakage on economy history page Analysed #349681 Valid Information Disclosure Medium 2018-05-24 – 16 ajaxgetachievementsforgame is not guarded for unreleased apps Analysed #835087 Valid Information Disclosure Medium 2020-07-30 $750 14 Malformed .WAV triggers an Access Violation on GoldSRC (hl.exe) Analysed #495789 Valid Memory Corruption Medium 2020-02-27 – 14 XSS @ store.steampowered.com via agecheck path name Analysed #406704 Valid Cross-site Scripting Medium 2019-01-07 $750 14 Unfiltered input allows for XSS in "Playtime Item Grants" fields Analysed #353334 Valid Cross-site Scripting Medium 2018-05-24 – 13 Add apps to packages 0, 61, 62 with /store/ajaxpackagemerge #972243 Valid Access Control High 2020-09-09 – 12 CSRF | Ban or unban users in broadcast's chat #381237 Valid Cross-Site Request Forgery Low 2019-01-07 – 12 [GoldSrc] Remote Code Execution using malicious WAD list in BSP file #675710 Valid Memory Corruption Critical 2021-05-04 $750 11 Vulnerability in GoldSource Engine allows to upload and run an arbitrary DLL on client #508894 Valid Other weaknesses High 2020-03-25 – 11