1592 matches found
Former Yahoo Employee Admits Hacking into 6000 Accounts for Sexual Content
An ex-Yahoo! employee has pleaded guilty to misusing his access at the company to hack into the accounts of nearly 6,000 Yahoo users in search of private and personal records, primarily sexually explicit images and videos. According to an press note released by the U.S. Justice Department, Reyes...
With Yahoo and Paypal is related to two distinct vulnerabilities-vulnerability warning-the black bar safety net
! This article share with Yahoo and Paypal is related to two unique vulnerability, one for Yahoo IDOR vulnerability insecure direct object references, another for Paypal, DoS vulnerabilities, two vulnerabilities found are for the Indian security engineers, which found that principles and ideas ar...
Julian Assange, a Big Yahoo Fine, and More Security News This Week
Plus: Wi-Fi vulnerabilities, Silk Road 2's founder, and more of the week's top security news...
This Week in Security News: 5G Security and Tax Scams
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about cybersecurity and data concerns in 5G. Also, learn about cybercriminal threats during tax season. Read on: Securing Enterprises...
Threat Source (April 11)
Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. If you haven’t yet, there’s still time to register for this year’s Talos Threat Research Summit — our second annual conference by...
Yahoo Offers $117.5M Settlement in Data Breach Lawsuit
Yahoo is offering to cough up $117.5 million to settle a lawsuit regarding its massive data breaches that compromised the personal information of three billion users. The new $117.5 million settlement, filed Tuesday in the U.S. District Court in San Jose, comes after the internet company’s first...
Denial Of Service (DoS)
pidgin is vulnerable to denial of service DoS attacks. The vulnerability exists as the Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service application crash via crafted byte sequences...
games.yahoo.com.tw XSS vulnerability
Open Bug Bounty ID: OBB-719269 Description| Value ---|--- Affected Website:| games.yahoo.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...
movies.yahoo.com.hk XSS vulnerability
Open Bug Bounty ID: OBB-712822 Description| Value ---|--- Affected Website:| movies.yahoo.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
Hackers bypassed Gmail & Yahoo’s 2FA to target US officials
By Waqas The attack was carried out by Iran-backed charming kitten hackers and victims include dozens of US government officials. Private emails of US sanctions officials and nuclear scientists have been breached by Iranian state-sponsored hackers. As per the data obtained by Certfa, a...
500 Million Marriott Guest Records Stolen in Starwood Data Breach
The world's biggest hotel chain Marriott International today disclosed that unknown hackers compromised guest reservation database its subsidiary Starwood hotels and walked away with personal details of about 500 million guests. Starwood Hotels and Resorts Worldwide was acquired by Marriott...
Discourse: Account takeover at https://try.discourse.org due to no CSRF protection in connecting Yahoo account
Hi There is an option in https://try.discourse.org/u/testh1ay/preferences/account to connect our Yahoo account. I noticed Connect Yahoo account option have the workflow with GET method and there is lack of csrf protection on connecting yahoo account which can help attacker into inducing victim to...
See how I found Yahoo Mail APP stored XSS vulnerability-vulnerability warning-the black bar safety net
! Today I want to share is to participate in Yahoo（Yahoo!） Vulnerability all test items to find the one on Yahoo Mail iOS app vulnerability, and ultimately, by virtue of the vulnerability, I go into the Yahoo security Hall of Fame and get a$3500 dollar reward. Vulnerability case My test object is...
CVE-2018-17061
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
CVE-2018-17061
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
Cross site scripting
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
CVE-2018-17061
CVE-2018-17061 affects BullGuard Safe Browsing prior to version 18.1.355.9. The vulnerability is a cross-site scripting (XSS) issue that can be triggered on Google, Bing, and Yahoo! pages through domains indexed in search results. The connected CNVD/NVD entries confirm the vulnerable component an...
CVE-2018-17061
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
CVE-2018-17061: Improper Neutralization of Input During Web Page Generation
BullGuard Safe Browsing before 18.1.355.9 allows XSS on Google, Bing, and Yahoo! pages via domains indexed in search results...
Threatpost News Wrap Podcast For Aug. 31
The Threatpost team breaks down the biggest news for the week ending on August 31. Topics covered are a Microsoft Windows zero-day, Yahoo’s recent acknowledgement that it scans emails to target ads to a report that mobile app SDKs capture private data when an Android or iOS app crashes. Download...