Yahoo! Messenger v11 - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! Messenger v11 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1279 Video: https://www.youtube.com/watch?v=kDdg6O5vGCY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1136 Release Dat...

Yahoo! BB #29 YM - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! BB 29 YM - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: ============= 2014-07-06 Vulnerability...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Yahoo! BB #29 YM - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! BB 29 YM - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: ============= 2014-07-06 Vulnerability...

CVE-2014-4603

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

CVE-2014-4603

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

CVE-2014-4603

CVE-2014-4603 affects the Yahoo! Updates for WordPress plugin (

CVE-2014-4603: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

PT-2014-6016

Name of the Vulnerable Software and Affected Versions Yahoo! Updates for WordPress plugin versions 1.0 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the secret,...

Yahoo! Messenger 8.0.0.863 File Extension Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19353/info A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error. An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users...

Yahoo! Messenger 5.6 File Transfer Buffer Overrun Vulnerability

No description provided by source. source: Yahoo! Messenger File Transfer Buffer Overrun Vulnerability Yahoo! Messenger is prone to a remotely exploitable buffer overrun vulnerability. An attacker may trigger this condition by initiating a malformed 'sendfile' request, which the victim user must...

Yahoo! Messenger 5.x/6.0 Offline Mode Status Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12750/info It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers. It ...

Yahoo Messenger 5.5 - Remote Exploit (DSR-ducky.c)

No description provided by source. / --- Remote yahoo Messenger V5.5 exploiter on Windows XP --- Dtors Security Research DSR Code by: Rave The buffer looks like this |-----| Fillup x offsetJMP 0x3EIPNOPSSHELLCODE ^^ / include windows.h include stdio.h include stdlib.h include string.h include...

LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit

No description provided by source. ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

Yahoo! Messenger <= 8.1 Address Book Remote Buffer Overflow Vulnerabilitiy

No description provided by source. source: http://www.securityfocus.com/bid/24926/info Yahoo! Messenger is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code in the...

Virtual Store Open 3.0 Acess SQL Injection

No description provided by source. !/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug: Acess Sql Injection...

Yahoo! Messenger 5.0 Call Center Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4837/info Yahoo! Messenger configures the 'ymsgr:' URI handler when it is installed. The handler invokes YPAGER.EXE with the supplied parameters. YPAGER.EXE accepts the 'call' argument; it is used for starting the 'Call...

Yahoo! Messenger 9 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37007/info Yahoo! Messenger is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash the application using the ActiveX control...