Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2015/11/27 2:56 a.m.58 views

ok.ru: Same-Origin Policy Bypass #2

Hi, This is really similar issue to my previous report 102234 - exploitation mechanism is really same but other swf file is vulnerable. All conditions are met: - st.mycdn.me domain which is in ok.ru crossdomain.xml - Security.allowDomain'' - possibility to execute own SWF code provided by URL...

SaveExploits0
Rows per page
Query Builder