地图 / 开放重定向

开放重定向

Open Redirect · 开放重定向

开放重定向 / 开放重定向

344公开报告

—CWE 编号

0已标注发现方式

344关联报告

发现方式分布

暂无发现方式标注。

关联报告

XSS and Open Redirect on MoPub LoginX / xAI · 2019-09-24 · 未评级 · $1,540 · 248 票 Open Redirect in secure.showmax.comShowmax · — · 未评级 · $550 · 225 票 [PayPal Android] Remote theft of user session using push_notification_webview deeplinkPayPal · 2019-02-07 · 低危 · 188 票 Open redirect at https://inventory.upserve.com/http://google.com/Upserve · 2019-06-07 · 低危 · $1,200 · 179 票 Open Redirect in Logout & LoginExpedia Group Bug Bounty · 2023-03-02 · 低危 · 171 票 [Venmo Android] Remote theft of user sessionPayPal · 2019-02-07 · 低危 · 151 票 Open redirect due to scanning QR code via brave browserBrave Software · 2023-06-08 · 中危 · 148 票 Open redirectXVIDEOS · 2025-02-06 · 低危 · 143 票 Open URL RedirectionUnikrn · 2021-06-28 · 低危 · 102 票 Open redirect vulnerabilityRockstar Games · 2019-04-03 · 低危 · $250 · 83 票 Open redirectNord Security · — · 未评级 · 81 票 OAuth redirect uri validation bypass for :proxima_first_party_sync appsGitHub · 2026-07-21 · 中危 · 79 票 another liberapay member team twitter account broken Link Hijacking via Expired Twitter Account LinkLiberapay · 2026-05-09 · 低危 · 77 票 Bypass of Open Redirect Fix on lovable.dev via /..// Path Traversal in redirect parameterLovable VDP · 2026-03-12 · 低危 · 74 票 Open Redirect on ███████Fastly VDP · 2025-05-02 · 低危 · 74 票 Open RedirectAffirm · 2021-08-31 · 低危 · $250 · 74 票 open redirected by host headerLocalize · 2024-12-02 · 未评级 · 73 票 Open RedirectOmise · 2019-03-25 · 低危 · $100 · 72 票 Identity Login Page Redirect Can Be ManipulatedInflection · 2017-10-13 · 中危 · 72 票 Possible to redirect to a (non-existing) subdomain after logging in via GitHub (leaking the token)Ed · 2017-11-25 · 中危 · 71 票 Open Redirect Vulnerability in OAuth Flow Leading to Potential Phishing AttackLichess · 2025-05-15 · 低危 · 70 票 Host Header InjectionNew Relic · — · 未评级 · 70 票 Google API key leaks and security misconfiguration leads Open Redirect VulnerabilityClario · 2021-04-01 · 低危 · $300 · 68 票 Stealing Users OAuth Tokens through redirect_uri parameterGSA Bounty · 2019-10-01 · 中危 · $750 · 67 票 Liberapay member team twitter account broken Link Hijacking via Expired Twitter Account LinkLiberapay · 2026-05-09 · 未评级 · 65 票 Open redirect using theme installShopify · 2015-12-14 · 未评级 · 61 票 Link poisoning on https://secure.login.gov/ login pageGSA Bounty · 2019-03-25 · 低危 · $150 · 60 票 Open redirect Via X-Forwarded-HostOmise · 2024-11-17 · 低危 · 58 票 Open redirection at https://chaturbate.com/auth/login/Chaturbate · 2018-10-22 · 低危 · 55 票 Link filter protection bypassValve · 2018-05-09 · 低危 · 55 票 Open Redirect on http://events.hackerone.com/redirect?url=https://naglinagli.github.ioHackerOne · 2021-03-26 · 低危 · 54 票 Open Redirection in Login - Korean StarbucksStarbucks · 2019-03-20 · 低危 · 54 票 Open Redirect on https://www.twitterflightschool.com/widgets/experience?destination_url=https://evil.comX / xAI · 2021-05-04 · 低危 · 53 票 Open Redirection in index.php pageHackerOne · 2018-03-07 · 低危 · 53 票 Open redirect via redirect_to parameter in tumblr.comAutomattic · 2024-11-05 · 低危 · 51 票 New link opening method makes hackerone vulnerable to tabnabbingHackerOne · 2021-07-07 · 低危 · 51 票 session takeover via open protocol redirection on streamlabs.comLogitech · 2021-09-01 · 低危 · $200 · 50 票 [crm.unikrn.com] Open RedirectUnikrn · 2020-04-05 · 低危 · 50 票 Websites opened from reports can change url of report pageHackerOne · 2017-02-25 · 低危 · 50 票 Domain spoofing in redirect page using RTLOHackerOne · 2018-01-30 · 低危 · 48 票 Bypassing callback_url validation on DigitsX / xAI · 2016-08-12 · 未评级 · 48 票 Open Redirect via Non-Latin Subdomain in vcc-*.8x8.com/AGUI/█.php8x8 · 2024-03-20 · 低危 · $100 · 46 票 Open redirect vuln on loginVercel · — · 未评级 · 45 票 through %09 Character the attacker is able to steal Github Token [ Account Takeover ]Vercel · — · 未评级 · 44 票 Open redirect on https://hq-api.upserve.com/Upserve · 2019-06-07 · 低危 · 44 票 Open Redirect Vulnerability in Action PackInternet Bug Bounty · 2023-03-26 · 低危 · $2,400 · 43 票 Open redirect protection (https://www.pixiv.net/jump.php) is broken for novelspixiv · 2019-10-01 · 低危 · $200 · 42 票 http://www.nextcloud.com/wp-includes/js/swfupload/swfupload.swf allows open redirect / site defacementNextcloud · 2020-03-07 · 未评级 · 42 票 █████████ (Android): Vulnerable to Javascript Injection and Open redirectU.S. Dept Of Defense · 2024-07-26 · 低危 · 41 票 Account takeover using reset password linkMars · 2024-06-25 · 低危 · 41 票 Open Redirect on www.redditinc.com via `failed` query paramReddit · 2022-09-22 · 低危 · 41 票 Open RedirectX / xAI · 2017-08-19 · 未评级 · 41 票 [keybase.io] Open RedirectKeybase · — · 未评级 · $500 · 40 票 Open Redirect filter bypass through '\' character via URL parameterMyndr · 2020-04-06 · 低危 · 39 票 Open redirect vulnerability in index.phpHackerOne · 2019-02-03 · 低危 · 39 票 Open Redirect Vulnerability on TikTok Ads PortalTikTok · 2021-01-09 · 低危 · 37 票 Wrong Interpretation of URL encoded characters, showing different punny code leads to redirection on different domainX / xAI · 2019-08-26 · 低危 · $560 · 37 票 Redirection in Repeater & Intruder TabPortSwigger Web Security · 2022-08-11 · 低危 · $150 · 36 票 Bypassing Content-Security-Policy leads to open-redirect and iframe xssStripo Inc · 2021-07-30 · 低危 · 36 票 Open Redirect through POST Request in OAuthMoneybird · 2021-09-21 · 低危 · 34 票 GET based Open redirect on [streamlabs.com/content-hub/streamlabs-obs/search?query=]Logitech · 2020-10-09 · 低危 · $100 · 34 票 Open Redirect on Gitllab Oauth leading to Acount TakeoverVercel · — · 未评级 · 34 票 Open redirect on app.hey.com bypasses HEY desktop's internal-origin allowlist and loads attacker content inside a HEY BrowserWindowBasecamp · 2026-10-15 · 低危 · 33 票 Accepting error message on twitter sends you to attacker siteX / xAI · 2020-03-13 · 低危 · $560 · 33 票 Open Redirection in [https://www.hackerone.com/index.php]HackerOne · 2019-05-08 · 低危 · 33 票 Another window.opener issueOpen-Xchange · — · 未评级 · $900 · 33 票 Open Redirect in Rocket.ChatRocket.Chat · 2026-04-10 · 低危 · 32 票 wordpress.org/openverse/: unauthenticated open redirect — `str_replace()`'s 4th arg is a count, not a limit; bypasses WordPress.org SSO allow-listWordPress · 2026-10-30 · 低危 · 31 票 Open Redirect TO Stealing aadvidTikTok · 2022-03-02 · 低危 · 31 票 [http2.cloudflare.com] Open RedirectCloudflare Vulnerability Disclosure · — · 未评级 · 31 票 Open redirect when logging in with user_oidcNextcloud · 2024-11-15 · 未评级 · 30 票 Tab nabbing via window.openerOpen-Xchange · — · 未评级 · $666 · 30 票 Open Redirect at *.myshopify.com/account/login?checkout_url=Shopify · 2015-12-16 · 未评级 · 30 票 Attachment references in markdown don't warn before downloadingHackerOne · 2022-02-25 · 低危 · 29 票 Open Redirect at https://oauth.secure.pixiv.netpixiv · 2020-12-22 · 低危 · $200 · 29 票 Open Redirect on https://go.bitwala.com/Nuri · 2020-10-30 · 低危 · 29 票 Open Redirect - Polycom Company Directory8x8 · 2023-10-17 · 低危 · 28 票 [song.link] Open RedirectLinktree · 2023-01-23 · 低危 · 28 票 Open redirect bypassFlickr · 2022-05-23 · 低危 · $300 · 28 票 Open Redirect и подмена ссылки в сниппете приложения VKMAVK.com · 2021-04-09 · 低危 · $300 · 28 票 Open Redirect via login avito.ru | Protection bypassAvito · 2019-11-11 · 未评级 · 28 票 Open RedirectSemrush · 2018-12-07 · 低危 · 28 票 Open Redirection while saving User account SettingsMoneybird · 2017-11-15 · 低危 · 28 票 Open Redirect (verkkopalvelu.lahitapiola.fi)LocalTapiola · — · 未评级 · $400 · 28 票 Open redirect in bulk editShopify · 2016-12-04 · 未评级 · 28 票 Interstitial redirect bypass / open redirect in https://hackerone.com/zendesk_sessionHackerOne · 2016-02-24 · 未评级 · 28 票 Open Redirect & Information Disclosure [mijn.werkenbijdefensie.nl]Radancy · — · 未评级 · 27 票 Open redirect in semrush.comSemrush · 2019-10-25 · 低危 · 26 票 Open redirect on chaturbate.com (tipping/purchase_success)Chaturbate · 2018-10-25 · 低危 · $250 · 26 票 Event create can create attachments that link to other websitesNextcloud · 2024-07-14 · 低危 · $250 · 25 票 Hyperlink Injection on Email InvitationHelium · 2020-11-24 · 低危 · $50 · 25 票 Open redirect on the https://tt.hboeck.deHanno's projects · 2019-03-03 · 低危 · 25 票 [idp.fr.cloud.gov] Open RedirectGSA Bounty · 2018-11-01 · 低危 · $150 · 25 票 Open Redirect Protection BypassX / xAI · 2017-12-23 · 未评级 · 24 票 Tab nabbing in Hackerone inbox.HackerOne · 2021-08-09 · 低危 · $500 · 23 票 Open redirect on https://signin.rockstargames.com/connect/authorize/rsgRockstar Games · 2021-02-18 · 低危 · 23 票 Open redirect in https://www.rockstargames.com/GTAOnline/restricted-content/agegate/form may lead to Facebook OAuth token theftRockstar Games · 2020-06-11 · 低危 · 23 票 Clicking "http://burp" hyperlink on FireFox CA Installation guide redirects to "burp.com" (unclaimed website).PortSwigger Web Security · 2019-09-16 · 低危 · 22 票 open redirect while login at https://apps.dev.jupiterone.io can leak access code.LifeOmic · — · 未评级 · 22 票 Open redirect in user_saml via RelayState parameterNextcloud · 2024-01-18 · 低危 · 21 票

查看全部 344 份报告 →