826 matches found
Mail.ru: SMS Brute Force Possibility via https://youdrive.today/login/web/code can lead to Account Takeover
Authentication procedure was not sufficiently protected against bruteforce and allowed arbitrary youdrive.today account takeover...
Mail.ru: Improper Restriction of Excessive Authentication Attempts at https://api.warrobots.com/auth (Pixonic Games)
Password at warrobots.com was not sufficiently protected against bruteforce...
Mail.ru: Open Redirect at "city-mobil.ru"
Open redirection in city-mobil.ru via URI path with '@'...
Mail.ru: Clickjacking Vulnerability via https://webagent.mail.ru leading to protection bypass for https://web.icq.com/ end point
Clickjacking protection bypass on web.icq.com via webagent.mail.ru...
Mail.ru: [combo.mail.ru] SMS code bruteforce
Authentication procedure was not sufficiently protected against bruteforce and allowed arbitrary combo.mail.ru account takeover...
Mail.ru: xss while uploading a file
Self-XSS via uploaded file name in city-mobil.ru XSS executing while uploading payloaded file...
Mail.ru: Account Takeover via Forgot Password Page at https://3k.mail.ru/send_password.php?
Password recovery procedure was not sufficiently protected against bruteforce and allowed arbitrary 3k.mail.ru account takeover...
Mail.ru: Improper Restriction of Excessive Authentication Attempts at https://mirror.w1.dwar.ru/login.php
Password at dwar.ru was not sufficiently protected against bruteforce...
Mail.ru: Открытая админка Tarantool
Testing installation of internal Tarantool admin inteface without actual users data was available from external network...
Mail.ru: Stored self XSS at auto.mail.ru using add_review functionality
Stored self-XSS in auto.mail.ru review functionality...
Mail.ru: Mail.ru for Android - Theft of sensitive data
Symlink vulnerability in sharing activity allowed to access internal application files in Mail.Ru Mail for Android...
Mail.ru: Log files Leaked In mcsblog.ru
Server log files were available via web interface...
Mail.ru: [ICQ] nwwwstg-d01.ops.icq.com check mk agent exposed to public
System information disclose on nwwwstg-d01.ops.icq.com...
Mail.ru: HTML/iframe/XSS injection on https://www.ucs.ru/online/shelter/settings/check/
Potential XSS via POST parameters in www.ucs.ru...
Mail.ru: Blind SSRF in magnum upgrade_params
Method for magnum cluster creation accepted arbitrary values for container hostname leading to SSRF possibility to internal services in Mail.ru Cloud Computing service...
Mail.ru: SSRF in www.ucs.ru
Blind SSRF in www.ucs.ru...
Mail.ru: Access admin interface via bad credentials
Staging testing version of plazius.ru manager's interface was available from external network with guessable default credentials. This interface had no access to production data...
Mail.ru: Improper Restriction of Excessive Authentication Attempts at https://ucs.ru/login
Login functionality on ucs.ru was not sufficiently protected against bruteforce...