Уровень 0 · материалов: 4
В кластер входят документы об утечках информации из-за предсказуемых URL-адресов или индексации закрытых страниц поисковиками, но не входят документы об уязвимостях программного обеспечения, взломах облачных хранилищ или физической потере паролей.
Общие признаки: открытый доступ к приватным данным, предсказуемые пути к файлам, индексация закрытого контента поисковиками, недостатки управления доступом
Группа выше: Утечки через ошибки доступа и предсказуемые идентификаторы
Смысл: The text describes a privacy breach where search engines (Yandex and Google) indexed private, password-protected photo albums from streamphoto.ru because the access passwords were contained within the URLs, making them discoverable via search queries.
Yandex and Google indexed private MTS photo albums and EMS tracking data because access passwords were leaked through URLs.
Смысл: The text highlights a security flaw in LightShot where predictable URL patterns allow unauthorized users to access and download private screenshots of other users via simple brute-force scripts.
A user discovered that LightShot screenshots can be easily accessed and mass-downloaded by guessing their predictable URL patterns using a simple PHP script.
Смысл: The author discovered that the website iwhoilco.ru uses predictable URL paths for its images and encourages other users to help uncover all the hidden content by guessing the file names.
The author identifies a predictable URL pattern on the 'Whoilco' startup website and invites others to help uncover all its hidden images.
Смысл: The text demonstrates a security vulnerability where Yandex search could be used to find and access private electronic railway tickets via specialized search queries (dorks).
The author shows how to use Yandex search operators to uncover and access private electronic railway tickets leaked through search indexing.