Browse / Azbuka Vkusa

Azbuka Vkusa

See its reports on the map

What gets reported to Azbuka Vkusa

• Information Disclosure3
• Cross-site Scripting2
• Insecure Direct Object Reference1
• Misconfiguration1
• Access Control1
• Open Redirect1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Endpoint without access control leads to order informations and status changesInformation Disclosure · critical
   41 votes
2. Corporate Jira credentials disclosed in public gistInformation Disclosure · high
   40 votes
3. Reflected XSS in photogallery component on [https://market.av.ru]Cross-site Scripting (XSS) - Reflected · medium
   38 votes
4. Reflected XSS on av.ru via `q` parameter at https://av.ru/collections/*Cross-site Scripting (XSS) - Reflected · medium
   30 votes
5. IDOR - Other user's delivery address disclosedInsecure Direct Object Reference (IDOR) · high
   29 votes
6. Leak of Google Sheets API credentialsCleartext Transmission of Sensitive Information · high
   22 votes
7. Мисконфигурация Cisco Smart InstallMisconfiguration · critical
   12 votes
8. Unauthorized access to choice.av.ru control panelMissing Authorization · medium
   8 votes
9. Open redirect (DOM-based) on av.ru via "return_url" parameter (Login form)Open Redirect · medium
   8 votes