Clario: IDOR at https://account.mackeeper.com/at/load-reports/profile/<profile_id> leaks information about devices/licenses

Summary IDOR at https://account.mackeeper.com/at/load-reports/profile/ leaks information about devices/licenses An attacker can access victim information via profile id Steps to reproduce go to account.mackeeper.com and login now go to: https://account.mackeeper.com/at/load-reports/profile/+USER...

Clario: Open redirect on https://account.mackeeper.com

Summary An attacker can redirect a user to any external website using the vulnerable parameter in https://account.mackeeper.com/auth/fb use parameter continue. Steps To Reproduce 1. Visit the following url: https://account.mackeeper.com/auth/fb?continue=https://google.com 2. Login 3. This will...