Mail.ru: Reflected XSS on am.ru and subdomains

Content-Type for JSON response was incorrectly set to text/html for am.ru, potentially leading to multiple XSS possibilities, including demonstrated reflected XSS vector via GET parameters...

Mail.ru: PHP code injection at tz.mail.ru

A chain of bugs involving unsafe usage of PHP unserialize led to possibility of code execution in tz.mail.ru...

Mail.ru: Reflected XSS at city-mobil.ru

Reflected XSS via URI vector in https://city-mobil.ru/ 404 response...

Mail.ru: Google API Key is not restricted for specific application package name and signature [Mail.ru Cloud for Android]

Google API keys used in Cloud Mail.Ru for Android application were not properly limited in functionality...

Mail.ru: [icq.im] Reflected XSS via chat invite link

Insufficient filtering in icq.im allowed reflected XSS via invite link...

Mail.ru: Self XSS via help.mail.ru interface

Self-XSS in sandbox domain via support chat interface on help.mail.ru with no security impact identified...

Mail.ru: turboslim.lady.mail.ru - Blind sql-injection.

Blind time based SQL injection in turboslim.lady.mail.ru promo page due to insecure use of GET parameter Уязвимость была в GET-параметре...

Mail.ru: [geekbrains.ru] Reflected XSS via Angular Template Injection

Potential XSS due to use of Angular templates...

Mail.ru: [xss] подмена content-type в загрузке лого к почте

Stored XSS in biz.mail.ru via upload log functionality...

Mail.ru: 3igames.mail.ru SQL Injection

Error based SQLi: https://wrd-pay.3igames.mail.ru/?openid=21&appid=1&ts=12&payitem=2&token=1&billno=1&version=1&zoneid=1&providetype=1&amt=1&payamtcoins=1&pubacctpayamtcoins=1&sig=1%27,1,1,1,select%20expselectfromselect%20userx,1;--%20- SQLMAP: sqlmap -u...

Mail.ru: Stored XSS at branded site in .mail.ru domain

Stored XSS via URL markdown on the mail.ru subdomain delegated to external service...

Mail.ru: [Mail.Ru for Android] Replacing "Add filter" screen by malicious screen

An implicit intent was invoked on "Add filter" action of Mail.ru Mail application for Android leading to interface spoofing possibility...

Mail.ru: [garnier-olia.lady.mail.ru] Reflected XSS /exp/ bypass "/"

Reflected XSS at https://garnier-olia.lady.mail.ru via URI path...

Mail.ru: [Web ICQ Client] XSS уязвимость в имени пользователя

Domain, site, application: WEB ICQ Client - https://web.icq.com/ Testing environment: Browser firefox Steps to reproduce 1. Устанавливаем имя пользователя, содержащее HTML код 2. Создаем канал/группу, в который приглашаем любого пользователя 3. Разрешаем/Запрещаем писать пользователю Actual resul...

Mail.ru: warofdragons.my.games: configuration files with database account are accessible

Configuration files were accessible at https://warofdragons.my.games/ leaking configuration information, including database account...

Mail.ru: [windows10.hi-tech.mail.ru] Blind SQL Injection

Доброе утро! Сегодня удалось найти у вас слепую скулю, правда она снова вне скопа походу URL: https://windows10.hi-tech.mail.ru/api/tweets?cityid=select0fromselectsleep25v Request: GET /api/tweets?cityid=select0fromselectsleep25v HTTP/1.1 Host: windows10.hi-tech.mail.ru User-Agent: Mozilla/5.0 X1...

Mail.ru: [Web ICQ Client] XSS-inj in polls

Domain, site, application: WEB ICQ Client - https://web.icq.com/ Testing environment: Browser firefox Steps to reproduce - Создаем новый опрос - Указываем в варианты ответов произвольный HTML код - Отправляем Actual results - Введенный HTML код срабатывает Демонстрация работы: █████ Impact...

Mail.ru: Blind SSRF on [relap.io]

Blind SSRF in relap.io...

Mail.ru: [xss] перенаправление со старых url в почте

Reflected XSS in e.mail.ru via URI...

Mail.ru: XSS via HTTP request version in account.my.games

Server reflects a version of HTTP protocol as HTTP response version without filtering. This behavior does not lead to security issues, because there are no known ways to manipulate request version in any of supported clients, request used violates HTTP protocol and can not be produced with browse...