12 matches found
perenoel-chez-moi.fr Improper Access Control vulnerability OBB-3825144
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
moi-igry.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1186345 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
moi-igry.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1067057 Security Researcher geeknik Helped patch 8803 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting moi-igry.ru website and it...
moi-dom72.ru XSS vulnerability
Open Bug Bounty ID: OBB-604240 Description| Value ---|--- Affected Website:| moi-dom72.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
moi-petelki.ru XSS vulnerability
Open Bug Bounty ID: OBB-604106 Description| Value ---|--- Affected Website:| moi-petelki.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Mail.ru: Uninitilized server memory disclosure via ImageMagick
It was possible to disclosure the part of server memory from uncontrolled location on the server belonging to "Moi Mir" my.mail.ru project via uploaded GIF image header manipulation. my.mail.ru is not currently in the Bug Bounty scope, reward was paid as a bonus due to potential severity...
Mail.ru: Blind XXE on my.mail.ru
Blind XXE in my.mail.ru Moi Mir avatar upload feature. Moi Mir is not covered by regular Bug Bounty program, a bounty was awarded as a bones due to high potential impact. Blind OOB XXE issue was found in upload avatar feature...
design-moi-un-mouton.fr XSS vulnerability
Vulnerable URL: http://www.design-moi-un-mouton.fr/catalogsearch/result/?q=%27%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 22.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
Mail.ru: Открытое перенапровление на OpenID
Open redirect in http://openid.mail.ru/login. openid.mail.ru is a part of "Moi Mir" my.mail.ru project. Neither Moi Mir nor open redirects without additional impact are currently covered by bug bounty program. i die ███████████████████████████ ███████▀▀▀░░░░░░░▀▀▀███████ ████▀░░░░░░░░░░░░░░░░░▀██...
MAAF et Moi - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application MAAF et Moi published at the 'play' market has multiple vulnerabilities...
MOI - Kuwait - Customized SSL, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MOI - Kuwait published at the 'play' market has multiple vulnerabilities...
Six Additional Carberp Scammers Arrested For Stealing $3.67m
Six more members of the Carberp gang have been arrested, according reports from the Russian Interior Ministry. Working with the firm Group-IB, authorities arrested six individuals affiliated with the Carberp and Hodprot malware. The group is alleged to have been responsible for thefts from client...