826 matches found
Mail.ru: [web.icq.com] Stored XSS in "О Контакте"
Stored XSS via contact info in web.icq.com...
Mail.ru: Stored xss on message reply
XSS on message reply via double click functionality in web.icq.com...
Mail.ru: Cross-site Scripting (XSS) - Stored in ru.mail.mailapp
A leftover debug code for XSS protection was causing "alert1" execution in the case of XSS vector XSS vector itself was not executed...
Mail.ru: [geekbrains.ru] CVE-2019-5418 Ruby on Rails File Content Disclosure
Unpatched CVE-2019-3396 in geekbrains.ru...
Mail.ru: Reflected cross site scripting at https://auto.mail.ru/reviews/add_review/ via problems_text parameter.
Description https://auto.mail.ru is vulnerable for xss. It is possible for an attacker to inject arbitrary JavaScript in application response Step to reproduce 1. Open the below link in Firefox...
Mail.ru: Web Cache Poisoning
Reverse proxy cache poisoning via host header content could lead to stored XSS in uxui.geekbrains.ru...
Mail.ru: URL redirection
Open redirection in loot.my.com...
Mail.ru: SSRF
SSRF via URI injection in hou.my.com...
Mail.ru: Source code disclosure
PHP configuration file was available for download on few terrhq.ru subdomains...
Mail.ru: phpinfo
phpinfo was available at terrhq.ru subdomain...
Mail.ru: Phpinfo
phpinfo was available at terrhq.ru subdomain...
Mail.ru: [special.mail.ru] Information Disclosure
special.mail.ru was running misconfigured Laravel in debug mode, disclosing some sensitive information...
Mail.ru: СКР инжект
SQL injection in gifts.mail.ru gifts.mail.ru is Mail.Ru branded partner project...
Mail.ru: LRF on shared.mail.ru due to "markdown" plugin
Markdown plugin in Atlassian Jira instance for external contractors was vulnerable to LFR vulnerability...
Mail.ru: RCE on shared.mail.ru due to "widget" plugin
Confluence widget connector vulnerable to CVE-2019-3396 was available on shared.mail.ru...
Mail.ru: Rails application running in development mode
autodiscover.staging.geekbrains.ru was running Ruby on Rails in development mode...
Mail.ru: CSRF on /subscription_manage.php endpoint at allods.mail.ru
CSRF in https://allods.mail.ru allows to manage user's subscriptions. allods.mail.ru belongs to extended scope...
Mail.ru: FLV FILE FORMAT (AUDIOSES.DLL) Out of Bounds
Out-of-bounds read in ICQ descktop on FLV format parsing could lead to application crash...
Mail.ru: touch.mail.ru / e.mail.ru memory content disclosure
An invalid handling of NUL byte in API request led to disclosure of HTTP server memory region. The root cause of this bug is tracked to nginx+openresty. An advisory is below: Insecure implementation of nginx rewrite / OpenResty ngx.req.seturi + memory content leak in nginx. OpenResty is LUA engin...