132 matches found
socid-extractor
socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...
vk-geosearch
vk-geosearch 소셜 네트워크vk.com에서 지오태그로 사진 검색 종속 항목 requests 설치 git clone https://github.com/yevgen2020/vk-geosearch.git pip3 install requests cd vk-geosearch chmod +x search.py 사용법 VK에서 사진을 검색하려면 서비스 액세스 키 또는 토큰이 필요합니다. Standalone 애플리케이션을 만드세요. 설정으로 이동하여 상태 필드에서 "애플리케이션이 활성화되어 있고 모든 사람에게 표시됨"으로 설정하세요...
EUVD-2024-52544
Malicious code in bioql PyPI...
CVE-2024-54424
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ilyacompman Like in Vk.com like-on-vkontakte allows Stored XSS.This issue affects Like in Vk.com: from n/a through = 0.5.2...
CVE-2024-54424
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ilyacompman Like in Vk.com like-on-vkontakte allows Stored XSS.This issue affects Like in Vk.com: from n/a through = 0.5.2...
CVE-2024-54424 WordPress Like in Vk.com plugin <= 0.5.2 - CSRF to Stored Cross-Site Scripting vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ilyacompman Like in Vk.com like-on-vkontakte allows Stored XSS.This issue affects Like in Vk.com: from n/a through = 0.5.2...
WordPress plugin Like in Vk.com 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...
CVE-2024-54424: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ilyacompman Like in Vk.com like-on-vkontakte allows Stored XSS.This issue affects Like in Vk.com: from n/a through = 0.5.2...
Researchers Find Link b/w PrivateLoader and Ruzki Pay-Per-Install Services
Cybersecurity researchers have exposed new connections between a widely used pay-per-install PPI malware service known as PrivateLoader and another PPI platform offered by a cybercriminal actor dubbed ruzki. "The threat actor ruzki aka les0k, zhigalsz advertises their PPI service on underground...
vk.com Open Redirect vulnerability OBB-2726969
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
VK.com: Reflected Xss On https://vk.com/search
XSS in Search...
VK.com: Reflected xss в m.vk.com/chatjoin
XSS в мобильных сообщениях...
VK.com: Выполнение API-методов при открытии сообщества/приложения
Недостаточная валидация...
VK.com: Уязвимость в приложении для Android
Некорректная обработка событий. Уязвимость позволяла "угонять" токен аутентификации пользователя с помощью виджетов Маруси F1624996...
VK.com: Получаем название и аватарку (50x50) частной группы.
Частичное раскрытие данных о частной группе через приложения...
VK.com: Баг с оплатой подписки
Недостаточная валидация...
VK.com: Просмотр аватарки замороженной страницы/частной группы.
Недостаточные проверки при смене аватарки...
VK.com: Open redirect в карусели сообщения бота
Открытое перенаправление в каруселях чат-ботов. Уязвимость позволяет перенаправить пользователя на вредоносную ссылку из карусели, минуя away.php...