Mail.ru: Shell upload in http://widget.support.my.com/

PHP shell upload was possible on widget.support.my.com support frontend site. This report was accepted within lootdog.io preliminary bug bounty program, because lootdog.io is supported via support.my.com...

Mail.ru: Reflected XSS on https://www.delivery-club.ru/

Reflected XSS via GET paramters. On the time of reporting, XSS vulnerabilites of delivery-club.ru are not covered with bug bounty...

Mail.ru: XSS on https://www.delivery-club.ru

Reflected XSS via GET paramters. On the time of reporting, XSS vulnerabilites of delivery-club.ru are not covered with bug bounty...

Mail.ru: blind XXE in autodiscover parser

Как воспроизвести: 1 Закинуть на сервер атакующего xml должен быть доступен на сервере атакующего по адресу /autodiscover/autodiscover.xml: Я сделал такой ответ при запросе любой xml'ки: obmhld.com/autodiscover/autodiscover.xml email settings SMTP 52.34.103.214 1191 off [email protected] yandex....

Mail.ru: [mobs.mail.ru] nginx path traversal via misconfigured alias

Domain, site, application -- mobs.mail.ru Steps to reproduce -- http://mobs.mail.ru/media../mobs/settings.py Actual results -- py ... SECRETKEY = '████████████' ... DISTIMOPRIVATEKEY = '████████████' ... PoC, exploit code, screenshots, video, references, additional resources --...

Mail.ru: Error in processing gif images

Application crash on malformed GIF image parsing in ICQ for Desktop...

Mail.ru: CSRF на calendar.mail.ru

CSRF on ICS URI import in calendar.mail.ru Cцрф с обходом защиты через ORIGIN посредством размещения пока на одном из субдоменов...

Mail.ru: XSS in delivery club

Reflected XSS via GET parameters of AJAX method due to invalid content-type for JSON data. On the moment of the report delivery-club.ru was not covered by bug bounty program...

Mail.ru: Хранимая XSS ( API )

Stored XSS via saved signature in Mail.Ru Mail mail compose functionality...

Mail.ru: [3k.mail.ru] - Content spoofing

Text content spoofing protection bypass within application interface in 3k.mail.ru. Text-only content spoofing reports are usually not accepted. This report was triaged, because application had protection which was bypassed by reseracher. 3k.mail.ru is not in bug bounty scope...

Mail.ru: reflected xss on cycloferon.health.mail.ru

Reflected XSS in http://cycloferon.health.mail.ru/ promo site. This domain is not covered by bug bounty program. Since this site is not longer supported, an access was closed as a workaround...

Mail.ru: [e.mail.ru] XSS на странице отправки денежного перевода

Reflected XSS in https://e.mail.ru/money/send via messageid GET parameter XSS via a GET param...

Mail.ru: XSS ( Работа с письмами )

Заходим в почту. 2. Настройки - Работа с письмами. Получаем GET запросом входящие параметры...

Mail.ru: Возможность залить шелл на https://widget.operator.mail.ru

It was possible to upload a shell code to widget.operator.mail.ru via file upload feature. widget.operator.mail.ru is a part of games.mail.ru and is not currently covered by bug bounty program. Shell upload...

Mail.ru: XSS в теле письма.

XSS via malcrafted HTML "rel" attribute. As a temporary workaround rel attribute was disabled on the day of reporting. A final solution fixes parsing algorithm for rel attributes...

Mail.ru: XSS уязвимость

Reflected XSS in https://account.mail.ru/signup via URI GET parameters...

Mail.ru: XSS on e.mail.ru via postMessage

URI Get parameters based XSS in https://e.mail.ru/cgi-bin/login via combination of factors controllable script name via NUL characters inection, availability of script with known vulnerability within domain...

Mail.ru: XSS в отправителе, БЕТА-версия почты

Reflected user-assisteted XSS in "Unsubscribe" beta feature via crafted e-mail From: header...

Mail.ru: Uninitilized server memory disclosure via ImageMagick

It was possible to disclosure the part of server memory from uncontrolled location on the server belonging to "Moi Mir" my.mail.ru project via uploaded GIF image header manipulation. my.mail.ru is not currently in the Bug Bounty scope, reward was paid as a bonus due to potential severity...

Mail.ru: XSS on account.mail.ru/login

Уязвимость на станице https://account.mail.ru/login и подготовка файлов для атаки --------------------- В процессе исследования заметил, что на странице https://account.mail.ru/login не валидируется значение параметра v. Значение выводится на странице как есть и используется в пути до скрипта...