CSRF в m.vk.com

👉 https://hackerone.com/reports/300999

🔹 Severity: Medium | 💰 100 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 3:59pm (UTC)

Reflected XSS в m.vk.com

👉 https://hackerone.com/reports/311913

🔹 Severity: High | 💰 500 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:06pm (UTC)

Reflected xss в m.vk.com/chatjoin

👉 https://hackerone.com/reports/316475

🔹 Severity: High | 💰 500 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:07pm (UTC)

CSRF на загрузку аудиозаписей

👉 https://hackerone.com/reports/329345

🔹 Severity: Medium | 💰 100 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:10pm (UTC)

Злом (virus).. Смотрим кто голосовал в анонимном опросе!!

👉 https://hackerone.com/reports/388143

🔹 Severity: Medium | 💰 200 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:12pm (UTC)

Open redirect на мобильной версии в контакте (m.vk.com

👉 https://hackerone.com/reports/456963

🔹 Severity: Medium | 💰 300 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:14pm (UTC)

Просмотр новых фотографии со стены частной/закрытой группы или закрытого профиля.

👉 https://hackerone.com/reports/463902

🔹 Severity: Medium | 💰 300 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:15pm (UTC)

Загружаем видеозаписи в основной альбом любой открытой группе/паблику.

👉 https://hackerone.com/reports/508506

🔹 Severity: High | 💰 300 USD
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:17pm (UTC)

Reflected xss в m.vk.com/chatjoin

👉 https://hackerone.com/reports/1370240

🔹 Severity: Medium
🔹 Reported To: VK.com
🔹 Reported By: #executor
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:22pm (UTC)

CSRF в виджетах

👉 https://hackerone.com/reports/1091296

🔹 Severity: No Rating | 💰 100 USD
🔹 Reported To: VK.com
🔹 Reported By: #circuit
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 4:30pm (UTC)

Path Traversal CVE-2021-26086 CVE-2021-26085

👉 https://hackerone.com/reports/1369288

🔹 Severity: Medium
🔹 Reported To: MariaDB
🔹 Reported By: #kljunowsky
🔹 State: 🟤 Duplicate
🔹 Disclosed: November 5, 2021, 5:33pm (UTC)

clickjacking on deleting user's clips [https://crossclip.com/clips]

👉 https://hackerone.com/reports/1294767

🔹 Severity: Low
🔹 Reported To: Logitech
🔹 Reported By: #hacking_fox
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 8:39pm (UTC)

HackerOne Staging uses Production data for testing

👉 https://hackerone.com/reports/1392511

🔹 Severity: Low | 💰 1,000 USD
🔹 Reported To: HackerOne
🔹 Reported By: #tk0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2021, 8:52pm (UTC)

Broken Link Hijacking on kubernetes.io Documentation

👉 https://hackerone.com/reports/1331361

🔹 Severity: Low | 💰 100 USD
🔹 Reported To: Kubernetes
🔹 Reported By: #codermak
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 6:04pm (UTC)

Broken link hijacing in https://kubernetes-csi.github.io/docs/drivers.html

👉 https://hackerone.com/reports/1212853

🔹 Severity: Medium | 💰 250 USD
🔹 Reported To: Kubernetes
🔹 Reported By: #milan0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 6:04pm (UTC)

REST API Endpoint leads to Unauthorized user disclosed private [ issue ] details

👉 https://hackerone.com/reports/1099489

🔹 Severity: High | 💰 1,000 USD
🔹 Reported To: Mail.ru
🔹 Reported By: #updatelap
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 6:48pm (UTC)

kds.ucs.ru - раскрытие информации.

👉 https://hackerone.com/reports/1073551

🔹 Severity: High | 💰 150 USD
🔹 Reported To: Mail.ru
🔹 Reported By: #alexeysergeevich
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 7:03pm (UTC)

restaurant.delivery-club.ru - возможность получить информацию об чужих акциях.

👉 https://hackerone.com/reports/1086453

🔹 Severity: Medium | 💰 150 USD
🔹 Reported To: Mail.ru
🔹 Reported By: #alexeysergeevich
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 7:03pm (UTC)

[titans.3clans.ru] phpBB 3.0.8 - Захват аккаунта администратора + удалённое выполнение кода.

👉 https://hackerone.com/reports/1072857

🔹 Severity: No Rating | 💰 150 USD
🔹 Reported To: Mail.ru
🔹 Reported By: #alexeysergeevich
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 7:05pm (UTC)

tmgame.mail.ru - Blind sql injection

👉 https://hackerone.com/reports/943487

🔹 Severity: Medium | 💰 250 USD
🔹 Reported To: Mail.ru
🔹 Reported By: #alexeysergeevich
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 7:06pm (UTC)

bit.games - sql-inj

👉 https://hackerone.com/reports/862836

🔹 Severity: Medium | 💰 1,500 USD
🔹 Reported To: Mail.ru
🔹 Reported By: #alexeysergeevich
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2021, 7:07pm (UTC)