VK.com: Open redirect в карусели сообщения бота

Открытое перенаправление в каруселях чат-ботов. Уязвимость позволяет перенаправить пользователя на вредоносную ссылку из карусели, минуя away.php...

ex-photo.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-401596 Description| Value ---|--- Affected Website:| ex-photo.ru Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

odnogrupniki.com.ua Open Redirect vulnerability

Open Bug Bounty ID: OBB-272257 Description| Value ---|--- Affected Website:| odnogrupniki.com.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

trackitonline.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-272240 Description| Value ---|--- Affected Website:| trackitonline.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

myauto.by Open Redirect vulnerability

Vulnerable URL: http://www.myauto.by/away.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

dronk.ru XSS vulnerability

Vulnerable URL: https://dronk.ru/away.php?to=https://ad.admitad.com/g/2316b8f8567db40dd37e22af2ed61b?ulp=http%3A%2F%2Fwww.gearbest.com%2Fsmart-wristband%2Fpp263275.html'"--...

sprinthost.ru XSS vulnerability

Vulnerable URL: http://sprinthost.ru/away.php?u=http://www.008.ru/'--...