Immunefi Audit CompetitionsShardeum Ancillaries
Reports by Severity
Medium
Low
Insight
- 33392 - [W&A - Insight] Validator GUI password b
- 33490 - [W&A - Insight] Abusing blacklist functi
- 33522 - [W&A - Insight] Exposed Redis Service Vu
- 33558 - [W&A - Insight] In some instances the so
- 33577 - [W&A - Insight] Taking down the HTTP ser
- 33809 - [W&A - Insight] Blocking the user from i
- 34474 - [W&A - Insight] SQL injection in json-rp
- 34492 - [W&A - Insight] DoS via unbounded tx id
Reports by Type
Websites and Applications
- 33040 - [W&A - Low] API CSRF protection bypass l
- 33392 - [W&A - Insight] Validator GUI password b
- 33490 - [W&A - Insight] Abusing blacklist functi
- 33522 - [W&A - Insight] Exposed Redis Service Vu
- 33558 - [W&A - Insight] In some instances the so
- 33571 - [W&A - Medium] Taking down the websocket
- 33577 - [W&A - Insight] Taking down the HTTP ser
- 33692 - [W&A - Low] Reflected XSS in validator n
- 33809 - [W&A - Insight] Blocking the user from i
- 34298 - [W&A - Medium] archive-server can be kil
- 34367 - [W&A - Low] CSRF vulnerability due to mi
- 34392 - [W&A - Medium] JSON-RPC Complete Passwor
- 34473 - [W&A - Low] Insight XSS in json rpc serv
- 34474 - [W&A - Insight] SQL injection in json-rp
- 34475 - [W&A - Low] CSRF in Json RPC Server allo
- 34492 - [W&A - Insight] DoS via unbounded tx id
- 34508 - [W&A - Critical] Malicious archiver can