Design/Logic Flaw

The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-4873

The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-4873

CVE-2013-4873 : The Yahoo! Tumblr app for iOS prior to 3.4.1 transmits credentials in cleartext, allowing remote attackers to obtain sensitive information by sniffing network traffic. The provided sources describe the vulnerability and its impact (partial confidentiality) and confirm remote explo...

Tumblr Patches Password Sniffing Bug for iOS

Popular blogging platform Tumblr pushed out an emergency update to its iOS app yesterday, patching an apparent password sniffing bug that attackers may have been using to steal users’ logins and passwords. The update, version 3.4.1 on iOS addresses “an issue that allowed passwords to be compromis...

PT-2013-5250

Name of the Vulnerable Software and Affected Versions Yahoo! Tumblr app version 3.4.0 and earlier Description The issue allows remote attackers to obtain sensitive information by sniffing the network, as the app sends cleartext credentials. Recommendations For versions prior to 3.4.1, update to...

Oracle Linux 4 : pidgin (ELSA-2010-0788)

From Red Hat Security Advisory 2010:0788 : Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Yahoo ID recycling plan criticized

Yahoo has gone on the defensive this week, responding to critics who have concerns about a heightened risk for social engineering scams and identity theft that could result from the company’s forthcoming plan to recycle inactive user IDs. The Sunnyvale, Calif. search engine announced plans last...

[EMET v4.0] Enhanced Mitigation Experience Toolkit

The Enhanced Mitigation Experience Toolkit EMET is designed to help prevent hackers from gaining access to your system. Software vulnerabilities and exploits have become an everyday part of life. Virtually every product has to deal with them and consequently, users are faced with a stream of...

CVE-2013-2316

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...

Security feature bypass

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...

CVE-2013-2316

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...

CVE-2013-2316

The CVE-2013-2316 entry concerns Yahoo! Browser for Android, affected in version 1.4.4 and earlier. The issue is a URL-display vulnerability that allows remote attackers to spoof the address bar, potentially enabling phishing. The vulnerability is described as distinct from CVE-2013-2307. Public ...

CVE-2013-2316: Undefined Security Weakness

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...

PT-2013-3660

Name of the Vulnerable Software and Affected Versions Yahoo! Browser application version 1.4.4 and earlier Description The issue allows remote attackers to spoof the address bar via vectors related to URL display. Recommendations For Yahoo! Browser application version 1.4.4 and earlier, update to...

Amazon Joins Authentication Game

As attackers continue to target large databases of passwords and users grow wearier by the day of creating new accounts and login credentials on each site they visit, the larger Web players are positioning themselves as not just social networking or retail hubs, but also as authentication...

Yahoo! Browser vulnerable to address bar spoofing

Overview Yahoo! Browser contains an issue in displaying URL, which may result in the address bar being spoofed. Note that this vulnerability is different from JVN55074201. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#31817913: Yahoo! Browser vulnerable to address bar spoofing

Yahoo! Browser contains an issue in displaying URL, which may result in the address bar being spoofed. Note that this vulnerability is different from JVN55074201. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update...

22 million Yahoo IDs stolen from their Japanese Server

22 million Yahoo! Japan's user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Japan portal. "We don't know if the file of 22 million user IDs was leaked or not, but we can't deny the possibility given the volume of traffic between our server and...

22 million Yahoo IDs stolen from their Japanese Server

22 million Yahoo! Japan's user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Japan portal. “We don’t know if the file of 22 million user IDs was leaked or not, but we can't deny the possibility given the volume of traffic between our server and...

Yahoo! TW YSM MKT Blind SQL Injection

Title: ====== Yahoo! TW YSM MKT - Blind SQL Injection Vulnerability Date: ===== 2013-04-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=892 VL-ID: ===== 892 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============= Yaho...