1-Billion Yahoo Users' Database Reportedly Sold For $300,000 On Dark Web

Recently Yahoo disclosed a three-year-old massive data breach in its company that exposed personal details associated with more than 1 Billion user accounts, which is said to be the largest data breach of any company ever. The new development in Yahoo!'s 2013 data breach is that the hacker sold i...

Yahoo Discloses Data From 1 Billion Accounts Stolen in 2013

Yahoo today disclosed another mega breach of its systems, this one occurring in August 2013 and resulting in the loss of data associated with more than one billion user accounts. Today’s revelation comes less than three months after Yahoo admitted state-sponsored hackers walked off in 2014 with...

Yahoo Admits 1 Billion Accounts Compromised in Newly Discovered Data Breach

In what believe to be the largest data breach in history, Yahoo is reporting a massive data breach that disclosed personal details associated with more than 1 Billion user accounts in August 2013. …And it's separate from the one disclosed by Yahoo! in September, in which hackers compromised as ma...

Yahoo Mail – Stay Organized! - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Mail – Stay Organized! published at the 'play' market has multiple vulnerabilities...

Yahoo mail storage type XSS vulnerabilities, hackers can look at anyone's mail-vulnerability warning-the black bar safety net

Recently from Finland Klikki Oy, a researcher Jouko Pynnönen has published a blog, which demonstrates a malicious attacker how to useXSSvulnerability attack under Yahoo mail, the victims Inbox messages sent to an external site; and constructing a virus, this virus can be passed to the email...

Yahoo Mail XSS Bug Worth Another $10K to Researcher

The déjà vu is real for Finnish security researcher Jouko Pynnonen. Just shy of a year ago, Pynnonen privately disclosed a stored cross-site scripting vulnerability in Yahoo Mail, and was rewarded with a $10,000 bounty through Yahoo’s HackerOne program. Fast forward to last month, and there was...

Yahoo Flaw Allowed Hackers to Read Anyone's Emails

Yahoo has patched a critical security vulnerability in its Mail service that could have allowed an attacker to spy on any Yahoo user's inbox. Jouko Pynnönen, a Finnish Security researcher from security firm Klikki Oy, reported a DOM based persistent XSS Cross-Site Scripting in Yahoo mail, which i...

DailyMotion Hack Leaks Emails, Passwords of 87M Users

DailyMotion, a popular video sharing website, said Tuesday it recently suffered an “external security problem” resulting in the compromise of an unspecified number of its users’ data. LeakedSource.com, a repository of breached data, added DailyMotion to its list of “Hacked Sites” on Monday. The...

Yahoo Messenger - Free chat - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Messenger - Free chat published at the 'play' market has multiple vulnerabilities...

Yahoo Web Security Bug Bounty : Phpmyadmin access make data on risk

Yahoo Web Security Bug Bounty : Phpmyadmin access make data on risk Little Insight: Vulnerability in Yahoo bug bounty data on risk Vulnerable Website: http://tw.page.games.yahoo.net/phpmyadmin/setup/index.php?page=form&formset=LeftframetabLefttables Impact: As you can see in the following...

Bumble: Email Spoofing

There is an Email Spoofing Vulnerability. Steps to reproduce: 1 Go to http://emkei.cz/ 2 Fill "From Email" field to [email protected] or any other badoo email. 3 Fill the victim's address your address to "TO" field and fill in other details as you wish. You will receive email from badoo admin...

Yahoo / Verizon: A $1B Data Breach Discount?

In July of this year Verizon announced it was going to buy Yahoo for $4.8B. A few weeks later, Yahoo starts investigating a potential data breach of around 200 million records that were for sale on the Dark Web. In mid-September, Yahoo discloses that sometime in 2014, they were attacked and rough...

Yahoo Tells SEC It Knew About Data Breach in 2014

Yahoo fessed up in its latest SEC filing that it knew in 2014 that attackers were on its network and stole information from 500 million accounts. The breach was disclosed in September and Yahoo blamed state-sponsored attackers, a claim that was challenged by some experts who instead said a crimin...

Yahoo Asks DNI to De-Classify Email Scanning Order

Yahoo continues to seek high ground with regard to public reports that last year it scanned user email messages in compliance with a classified government order. General counsel Ron Bell yesterday sent a letter to Director of National Intelligence James R. Clapper asking the government to confirm...

Breaking — Russian Hacker Responsible for LinkedIn Data Breach Arrested by FBI

The alleged Russian hacker arrested by the FBI in collaboration with the Czech police is none other than the hacker who was allegedly responsible for massive 2012 data breach at LinkedIn, which affected nearly 117 Million user accounts. Yevgeniy N, 29-year-old Russian hacker was arrested in Pragu...

Automattic: Wordpress.com REST API oauth bypass via Cross Site Flashing

Hello Automattic Security Team, There is a vulnerability in https://public-api.wordpress.com/crossdomain.xml. This file allows .yahoo.com and .yimg.com to perform cross domain requests to https://public-api.wordpress.com. However, these domains are vulnerable to Cross-Site flashing. An attacker c...

U.S. Reps Requesting Further Intelligence Around Yahoo Surveillance Story

Nearly 50 representatives from 27 different states are still looking to clear the air around this month’s Yahoo surveillance story. In a letter on Friday addressed to Attorney General Loretta Lynch and Director of National Intelligence James Clapper, government officials asked for clarity around...

Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability

Document Title: =============== Yahoo Bug Bounty 37 - Sender Spoofing Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1985 Video: https://www.youtube.com/watch?v=QYZRbRqs50g Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1777 Release Date:...

Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability

Document Title: =============== Yahoo Bug Bounty 37 - Sender Spoofing Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1985 Video: https://www.youtube.com/watch?v=QYZRbRqs50g Advisory: https://www.vulnerability-lab.com/getcontent.php?id=1777 Release Date:...

view.yahoo.com XSS vulnerability

Vulnerable URL: https://view.yahoo.com/embed/player?shareUrl=%3C/title%3E%3C/script/%27-alert%280%29-%27%22-%22--%3E%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 15.10.2016 Latest check for patch:| 15.10.2016 19:33 GMT Vulnerability type:...