826 matches found
Mail.ru: [cooking.lady.mail.ru] Open Redirect
PoC Chrome, IE: https://cooking.lady.mail.ru/%09/blackfan.ru Chrome, IE, FireFox: https://cooking.lady.mail.ru/%5cblackfan.ru HTTP Response http HTTP/1.1 301 Moved Permanently ... Location: / /blackfan.ru/ http HTTP/1.1 301 Moved Permanently ... Location: /\blackfan.ru/...
Mail.ru: ssrf xspa [https://prt.mail.ru/]
SSRF at prt.mail.ru. On the moment of reporting, Extended scope was not covered with bug bounty, bounty was awarded as a bonus...
Mail.ru: [element.mail.ru] /.svn/entries
В веб директории сайта содержится папка от Subversion. Теоретически это дает раскрытие исходных кодов, но в данном случае файлы с расширением .php.svn-base тоже исполняются веб-сервером. Пример: https://element.mail.ru/.svn/entries 10 dir 14...
Mail.ru: [qpt.mail.ru] CRLF Injection / Open Redirect
Уязвимый сценарий: /tests/ Уязвимый параметр: qptquestionurl Пример Open Redirect:...
Mail.ru: [hs.mail.ru] XSS play_now.php
Reflected XSS via GET parameters in hs.mail.ru. hs.mail.ru is not currently covered by Bug Bounty program...
Mail.ru: [pokerist.mail.ru] XSS Request-URI
PoC FireFox: https://pokerist.mail.ru/%3Cscript%3Ealertdocument.domain%3C/script%3E https://pokerist.mail.ru/%3Csvg%20onload=alertdocument.domain%3E HTTP Response: html Error 404 Unable to resolve the request "alertdocument.domain". html Error 404 The system is unable to find the requested action...
Mail.ru: [allods.mail.ru] Cross-Site Request Forgery (Add-Item)
Hi, I found that there is no anti-csrf while adding an item for '/media.php' in allods.mail.ru, from 'https://allods.mail.ru/media.php?do=additem§ion=2' since there was no anti-csrf token, there was still an extra layer of security for csrf which I had to bypass! More Details: The upload...
Mail.ru: Time-based sql-injection на https://puzzle.mail.ru
SQL injection via GET parameter in puzzle.mail.ru. puzzle.mail.ru is out of current bug bounty program's scope, but this report was awarded due to high severity...
Mail.ru: Same origin policy bypass on e.mail.ru via Cross-Site Flashing
Hello Mail.Ru Security Team, There is a Cross-Site Flashing vulnerability in e.mail.ru. this vulnerability is similar to XSS except it is Flash script execution. Ref : https://www.owasp.org/index.php/TestingforCrosssiteflashingOTG-CLIENT-008 This allow an attacker to execute requests to the...
Mail.ru: [cfire.mail.ru] CSRF Bypassed - Changing anyone's 'User Info'
Hi, I noticed that when we change userinfo of https://cfire.mail.ru from here: https://cfire.mail.ru/account/userinfo, there are two Anti-CSRF tokens or you can say that; they just do the work of Anti-CSRF token: - signature - submit2 Actually, I was able to bypass both Anti-CSRF tokens, and afte...
Mail.ru: [realty.mail.ru] XSS, SSI Injection
XSS === PoC Открыть с помощью Internet Explorer https://blackfan.ru/x?r=https://realty.mail.ru/%22--%3e%3csvg/onload=alertdocument.domain%3e/%252e%252e Request GET /"--/.. HTTP/1.1 Host: realty.mail.ru Connection: close SSI Injection === PoC Request-URI также попадает в SSI код GET //"-- HTTP/1.1...
Mail.ru: [opensource.mail.ru] system accounts enumeration
Добрый день. Нашел интересную вещь. Надеюсь уязвимость на самом деле существует, и я не параноик. Если аккаунт существует cat /etc/passwd | grep %accountname% то приложение редиректит 302 на /create/%accountname%/home или возвращает 200 как в случай nobody. https://opensource.mail.ru/nobody/...
JIRA Mail.ru Calendar 2.4.2.50_JIRA6 Cross Site Scripting
Hello Team, I have identified Stored Cross Site Scripting Vulnerability in JIRA - Mail.ru Calendar Plugin. Overview-----------------------------------------------------------------------------------------------------------------------Vendor: JIRA Vulnerable Product: Mail.ru Calendar Plugin...
Mail.ru: BRUTE FORCE ATTACK
Hi I've found that the user is allowed to perform brute force in https://m.my.mail.ru/cgi-bin/login https://babel.mail.ru/login/ , I've tried to input wrong password 30 times , then input my correct password in my 31st attempt and it is successfully login, a malicious minded user can always...
Mail.ru: [townwars.mail.ru] Time-Based SQL Injection
Добрый день. POSТ параметры "c" и "m" названия контроллера и метода соответственно уязвимы к атаке типа SQL Injection. прямого вывода на страницу нет, но можно получить данные ориентируясь на задержку ответа от сервера если запрос возвращает false - ответ от сервера возвращается быстро. если запр...
Mail.ru: Mail.ru for Android Content Provider Vulnerability
A number of content providers which are not required to be accessible from outside were marked as exported...
VK.com HACKED! 100 Million Clear Text Passwords Leaked Online
Another day, another Data Breach! Now, Russia's biggest social networking site VK.com is the latest in the line of historical data breaches targeting social networking websites. The same hacker who previously sold data dumps from MySpace, Tumblr, LinkedIn, and Fling.com, is now selling more than...
Mail.ru: [tidaltrek.mail.ru] SQL Injection
SQL injection via Web interface request...