Yahoo Releases Second Wave Unsealed FISA Documents

Yahoo officially released part two of its once-secret government documents that were part of its 2007 court battle with the Foreign Intelligence Surveillance Court FISC that forced it to reveal sensitive customer data requested by the National Security Agency. This second wave of documents brings...

Yahoo Sports - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Sports published at the 'play' market has multiple vulnerabilities...

Yahoo News Digest - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo News Digest published at the 'play' market has multiple vulnerabilities...

Yahoo - News, Sports & More - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo - News, Sports & More published at the 'play' market has multiple vulnerabilities...

Yahoo Finance - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Finance published at the 'play' market has multiple vulnerabilities...

Yahoo Search - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Search published at the 'play' market has multiple vulnerabilities...

Requests for Yahoo User Data Spiked After Paris Terror Attacks

Yahoo’s latest transparency report, published today, reflects a spike in government and law enforcement requests for user data following the Paris terrorist attacks of Nov. 13. The attacks resulted in the deaths of 130 people and injuries to more than 350 others; the situation remains fluid with...

Yahoo Deploys Passwordless Account Key Tool

In hopes of eliminating the password, at least on the company’s mobile apps, Yahoo on Friday deployed a stable version of its Account Key mechanism. The feature, essentially two-step authentication—without the first step—allows Yahoo users to log into the company’s Finance, Fantasy, Mail,...

Yahoo Email Spoofing

Document Title: =============== Yahoo Bug Bounty 37 - Sender Spoofing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Release Date: ============= 2016-03-07 Vulnerability Laboratory ID VL-ID: ==================================== 1777...

Yahoo Cricket - Dangerous filesystem permissions, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Cricket published at the 'play' market has multiple vulnerabilities...

Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability

Document Title: =============== Yahoo Bug Bounty 37 - Sender Spoofing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Video: https://www.vulnerability-lab.com/getcontent.php?id=1985 Release Date: ============= 2016-03-07 Vulnerability...

Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability

Document Title: =============== Yahoo Bug Bounty 37 - Sender Spoofing Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1781 Video: https://www.vulnerability-lab.com/getcontent.php?id=1985 Release Date: ============= 2016-03-07 Vulnerability...

wrs.yahoo.com Open Redirect vulnerability

Vulnerable URL: http://wrs.yahoo.com/https://publish.yahoo.com//www.xssposed.org/%2e%2e Details: Description| Value ---|--- Patched:| Yes, at 09.04.2016 Latest check for patch:| 09.04.2016 15:39 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown /...

OpenSSL also new vulnerabilities, more than 1 1 0 0 million https sites affected-vulnerability warning-the black bar safety net

It is understood that recently the researchers in OpenSSL, discovered a new security vulnerability, this vulnerability will be on SSL Secure Socket Layer Security Protocol to generate a huge impact, and attacker may also favor this vulnerability to modern Web sites for attack. Affects more than 1...

Search Engine Subdomains Collector

This module can be used to gather subdomains about a domain from Yahoo, Bing. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Search Engine Subdomains Collector', 'Description' = %q This module...

Yahoo Football - كرة قدم - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Football - كرة قدم published at the 'play' market has multiple vulnerabilities...

Yahoo Fantasy Sports - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Fantasy Sports published at the 'play' market has multiple vulnerabilities...

Investors Application - Client Side Cross Site Vulnerability

Document Title: =============== Investors Application - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1540 Facebook Security ID: 246414938 Release Date: ============= 2016-02-12 Vulnerability Laboratory ID VL-ID:...

HackerOne: Unintended HTML inclusion as a result of https://hackerone.com/reports/110578

Hi, I was just reading https://hackerone.com/reports/110578 and testing out the changes. I had previously noticed that the editor would take something like: test and turn it into : test In other words, the code would recursively look at what should be the title string and use the first single or...

Yahoo repair mailbox vulnerability, the researchers receive a million dollar bonus-vulnerability warning-the black bar safety net

! Currently Yahoo repair a can be attacker for hijacking the user's mailbox vulnerability. The vulnerability is hazards heavier According to the latest news that Yahoo has to fix theXSSvulnerabilities, earlier, a malicious attacker can exploit the vulnerability to send malicious mail, then you ca...