Mail.ru: SSRF на api.icq.net

SSRF in api.icq.net due to invalid handling of non-zero Content-Length value in GET requests...

Mail.ru: Stored XSS in api.icq.net

Crossite scripting in api.icq.net domain. icq.net is considered as a sandbox domain, it does not use HTTP authentication or cookies, but XSS could be used to facilitate phishing attack...