jaimaakali

Broken Link on who-covid-19-mobile-app's Vulnerability Submission Form on Hackerone

2

Steps To Reproduce: Visit https://hackerone.com/who-covid-19-mobile-app/reports/new?type=team&report_type=vulnerability Click on Security Page. After that, you'll be redirected to the 404 HackerOne page. This will impersonate your security page and steal legitimate reports. References:...

Issue Name : Numerous open ports/services

1

Looks like you have numerous open ports . An attacker can leverage this information when trying an attack. Ports should be filtered . nmap --script ssl-enum-ciphers hack.whocoronavirus.org Starting Nmap 7.80...