MAL-2022-6949 Malicious code in vk-apps-contacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58fcc6f00c1b0623c2788c26e2df81d24da0288671c83ac3dee63c9ca9affb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vk-apps-contacts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58fcc6f00c1b0623c2788c26e2df81d24da0288671c83ac3dee63c9ca9affb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VK.com: XSS в выборе товара.

Недостаточная валидация полей в товарах...

vk.city4me.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1160955 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

VK.com: Логирование ответов запросов VK API в приложении Клевер

Просмотр логов в режиме дебага...

VK.com: Злом (virus).. Смотрим кто голосовал в анонимном опросе!!

Просмотр участников в некоторых анонимных опросах...

VK.com: Определение id по номеру телефона

Недостаточность проверок в определенных запросах...

Still Stealing

Two years ago in October 2015 we published a blogpost about a popular malware that was being distributed from the Google Play Store. Over the next two years we detected several similar apps on Google Play, but in October and November 2017 we found 85 new malicious apps on Google Play that are...

VK - Certificates or keys found, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application VK published at the 'play' market has multiple vulnerabilities...

Automated posting on Vkontakte public pages using VK API and Python

Vk.com Vkontakte is the most popular social network Russia and Ex-USSR with 430+ million users. Originally it was a Facebook clone. But now, after 10 years of development, these two services are quite different from each other. Traditional advantages of vk.com - huge amount of free music and vide...

VK.com: Получение предложенных фотографий паблику

Просмотр предложенных фотографий в пабликах. F337668 Обычным перебором id фото мы сохроним все фото к себе в альбом паблика Нужен аккаунт "А" с которого предлагаются фото в паблик и скопируйте ссылки на фото Передайте их аккаунту "Б" , на котором перейдите к уязвимости и вставьте индификаторы...

VK Live - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VK Live published at the 'play' market has multiple vulnerabilities...

VK LikeCheсker: поиск лайков - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VK LikeCheсker: поиск лайков published at the 'play' market has multiple vulnerabilities...

VK Docs - Customized SSL, LGPL license vulnerabilities

HackApp vulnerability scanner discovered that application VK Docs published at the 'play' market has multiple vulnerabilities...

VK.com: Возможность провести DoS атаку от имени vk.com сервера

DoS-атака со стороны серверов VK...

Picture Saver for VK - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Picture Saver for VK published at the 'play' market has multiple vulnerabilities...

vk-music.ru XSS vulnerability

Vulnerable URL: http://vk-music.ru/?q=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1160639 VIP website...

Friends Locator for VK Lite - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Friends Locator for VK Lite published at the 'play' market has multiple vulnerabilities...

oauth.vk.com Open Redirect vulnerability

Vulnerable URL: https://oauth.vk.com/authorize?clientid=2283932uri=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 18.10.2017 Latest check for patch:| 18.10.2017 12:19 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...

Polyglot for VK - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Polyglot for VK published at the 'play' market has multiple vulnerabilities...