v.4shared.com Open Redirect vulnerability OBB-3711200

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Nigerian Tesla: 419 scammer gone malware distributor unmasked

Agent Tesla is a well-known data stealer written in .NET that has been active since 2014 and is perhaps one of the most popular payloads observed in malspam campaigns. While looking for threats targeting Ukraine, we identified a group we call "Nigerian Tesla" that has been dabbling into phishing...

4shared.one XSS vulnerability

Open Bug Bounty ID: OBB-576760 Description| Value ---|--- Affected Website:| 4shared.one Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4shared.com XSS vulnerability

Open Bug Bounty ID: OBB-567894 Description| Value ---|--- Affected Website:| 4shared.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

shot.4shared.com XSS vulnerability

Open Bug Bounty ID: OBB-450570 Description| Value ---|--- Affected Website:| shot.4shared.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

web.4shared.com XSS vulnerability

Open Bug Bounty ID: OBB-450572 Description| Value ---|--- Affected Website:| web.4shared.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

suggestions.4shared.com XSS vulnerability

Open Bug Bounty ID: OBB-450568 Description| Value ---|--- Affected Website:| suggestions.4shared.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

websearch.4shared.com XSS vulnerability

Open Bug Bounty ID: OBB-450569 Description| Value ---|--- Affected Website:| websearch.4shared.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

4shared.com XSS vulnerability

Vulnerable URL: https://www.4shared.com/q/large/CAQD/1/video Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 445 VIP website status:| Yes Coordinated Disclosure Timeline: Descriptio...

4shared.com XSS vulnerability

Vulnerable URL: http://www.4shared.com/conduit/anonUploadResult.jsp?ausk="// Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 450 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--...

search.4shared.com XSS vulnerability

Vulnerable URL: http://search.4shared.com/q/CCAD/1/" accesskey=x onclick="alert'XSSPOSED' Details: Description| Value ---|--- Patched:| Yes, at 06.03.2017 Latest check for patch:| 06.03.2017 17:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

4shared - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 4shared published at the 'play' market has multiple vulnerabilities...

4shared.com XSS vulnerability

Open Bug Bounty ID: OBB-143020 Description| Value ---|--- Affected Website:| 4shared.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

4shared-china.com XSS vulnerability

Vulnerable URL: https://www.4shared-china.com/web/acc/signup?service="Nasrul07 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 115132 Google Pagerank| 6 VIP website status:| No Chec...

Google Search Algorithm to Demote Piracy Sites In Search Results

The Search Engine giant is not going to spare the Pirated content providing sites. Google is ready to fulfill its commitment to downgrade the search rankings of ‘notorious’ piracy sites globally that often rank above legal and commercial sites. Google and the Copyright holders are, to some extent...

4shared.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-49534 Description| Value ---|--- Affected Website:| 4shared.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

4SHARED Cloud Service Detection

Binary data 8416.prm...

XSS vulnerability in 4shared and NATO Multimedia Library Exposed

Inj3ct0r Team found cross site scripting vulnerability in 4shared , a file sharing site. Vulnerability link is exposed in a note available at their website. In general, cross-site scripting refers to that hacking technique that leverages vulnerabilities in the code of a web application to allow a...

Mobile Mp3 Search Engine HTTP Response Splitting

-=--------------------ADVISORY-------------------=- Mobile Mp3 Search Engine 2.0 Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mobile Mp3 Search Engine -=+ Version: 2.0 -=+ Vendor's URL:...

Mobile MP3 Search Engine 2.0 HTTP Response Splitting

-=--------------------ADVISORY-------------------=- Mobile Mp3 Search Engine 2.0 Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mobile Mp3 Search Engine -=+ Version: 2.0 -=+ Vendor's URL:...