Mail.ru: Subdomain Takeover

Unused payment.skillfactory.ru subdomain was delegated to webflow.io and not claimed...

Mail.ru: XSS on https://www.delivery-club.ru

Reflected XSS via GET paramters. On the time of reporting, XSS vulnerabilites of delivery-club.ru are not covered with bug bounty...