repository icon
ionicabizau / parse-url Project repository

:rocket: An advanced url parser supporting git urls too.

Submit a report

FIRST INTERACTION

WITHIN10 DAYS

REVIEW

WITHIN10 DAYS

FIX

WITHIN92 DAYS

SSRF via ssh parsing abuse
kevin-mizu
pending
Hostname Spoofing
ce-automne
Critical
•CVE-2022-3224
SSRF bypass localhost with a domain redirection
nhienit2010
not applicable
Allow File protocol lead to read local file
nhienit2010
informative
Critical
Cross-site Scripting via parse URL
nhienit2010
informative
Critical
parser bypass and make SSRF attack
ranjit-git
Critical
•$915•CVE-2022-2900
xss bug
ranjit-git
informative
Critical
xss via improper parsing of javascript: url
haxatron
Critical
•$915
Improper Input Validation leading to Cross-site Scripting (XSS)
ooggle
not applicable
XSS due to improper input
inweol
duplicate
High
Regular Expression Denial of Service (ReDoS)
yetingli
Medium
•$155
Cross Site Scripting via Improper Input Validation (parser differential)
416e6e61
Critical
•$915
File Protocol Spoofing
vovikhangcdv
Critical
•$915
Open Redirect
kevin-mizu
informative
Medium
Cross-site Scripting (XSS) due to Improper Input Validation
kevin-mizu
informative
Critical
Cross Site Scripting via Improper Input Validation
p0cas
duplicate
Critical
Cross Site Scripting via Improper Input Validation
p0cas
duplicate
Critical
Cross Site Scripting via Improper Input Validation
p0cas
not applicable
Back-slash is treated as forward-slash
sim4n6
informative
High
null
p0cas
self closed
null
p0cas
self closed
SSRF via Improper Input Validation
p0cas
informative
Critical
XSS via improper input validation
haxatron
informative
Critical
The previous report not fixed correctly
am0o0
informative
Critical
The previous report not fixed correctly
am0o0
informative
Critical
SSRF with forged resource
am0o0
informative
Critical
SSRF via Improper Input Validation
p0cas
Critical
•$915•CVE-2022-2216
Cross Site Scripting via Improper Input Validation
p0cas
Critical
•$915
Cross Site Scripting via Improper Input Validation
p0cas
Critical
•$915
https://huntr.dev/bounties/582cb14b-b2a8-4064-91c5-b580ff69ba07/ fix bypass; XSS...
haxatron
Critical
•$915
Run malicious JS code with other kinds of encoding
am0o0
Critical
•$1098•CVE-2022-2217
Bypass of last fix
am0o0
Critical
•$915•CVE-2022-2218
Cross Site Scripting via Improper Input Validation (Based on CRLF)
p0cas
Critical
•$915
? before the @ sign allows one to bypass whitelists
haxatron
High
•$155
Malicious usage of '+' in protocol can lead to whitelist bypasses
haxatron
None
•$155
hostname spoofing via Improper Input Validation
p0cas
None
Open Redirect
p0cas
None
protocol spoofing
p0cas
High
•$155
hostname spoofing via javascript
p0cas
High
•$155
Improper Input Validation
p0cas
High
•$155
Improper Input Validation
p0cas
Medium
•$40
Exposure of Sensitive Information to an Unauthorized Actor
am0o0
Medium
•$50•CVE-2022-0722
Authentication Bypass by Primary Weakness
ranjit-git
High
•$60
Open Redirect
x3rz
Medium
•$32
Open Redirect
ready-research
Medium
•$40