|
Cloud-1: Open Bucket
|
Cloud Security |
500 |
|
|
SQL-3: Blind Whisper
|
SQL Injection |
500 |
|
|
SQL-2: Union Harvest
|
SQL Injection |
500 |
|
|
SQL-1: Login Bypass
|
SQL Injection |
500 |
|
|
13 - Mass Assignment (Limit Transaksi)
|
Mobile |
500 |
|
|
12 - API Version Downgrade
|
Mobile |
500 |
|
|
11 - HTTP Method Override — Privilege Escalation
|
Mobile |
500 |
|
|
09 - BAC Vertical (Hidden Endpoint Users/Admin)
|
Mobile |
500 |
|
|
08 - BAC Horizontal (Hidden Endpoint News)
|
Mobile |
500 |
|
|
07 - IDOR Vertical (Profil Premium)
|
Mobile |
500 |
|
|
06 - IDOR Horizontal (Transaksi)
|
Mobile |
500 |
|
|
05 - JWT Decode / Secret Reveal
|
Mobile |
500 |
|
|
04 - User Enumeration
|
Mobile |
500 |
|
|
10 - Response Manipulation (Premium Upgrade Bypass)
|
Mobile |
500 |
|
|
03 - Insecure Local Storage
|
Mobile |
500 |
|
|
02 - Root Detection & SSL Pinning Bypass
|
Mobile |
500 |
|
|
01 - Insecure Logging
|
Mobile |
500 |
|