GHSA-MJ87-8XF8-FP4W Cross-Site Scripting in yui

Affected versions of yui are vulnerable to cross-site scripting in the uploader.swf and io.swf utilities, via script injection in the url. Recommendation YUI has published their recommendation to fix this issue. Their recommendation is to: - Delete self-hosted copies of these files if you are not...

No jail for Yahoo employee who used internal system to hack 6k accounts

By Sudais Asif The hacker and former Yahoo employee has been sentenced... This is a post from HackRead.com Read the original post: No jail for Yahoo employee who used internal system to hack 6k accounts...

Denial Of Service (DoS)

pidgin is vulnerable to denial of service DoS. The vulnerability exists as multiple NULL pointer dereference flaws were found in the way the Pidgin Yahoo! Messenger Protocol plug-in handled malformed YMSG packets. A remote attacker could use these flaws to crash Pidgin via a specially-crafted...

Denial Of Service (DoS)

pidgin is vulnerable to denial of service. Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging...

Weak Cryptography Hash

github.com/yahoo/athenz is uses weak cryptographic hashes. The KeyRefresher uses the MD5 hash algorithm, which has been cryptographically broken, and hence cannot be used to guarantee data integrity...

How to Get Your Yahoo Breach Settlement Money

If you had a Yahoo account from 2012 to 2016, you probably have $100 coming your way...

Socialscan - Check Email Address And Username Availability On Online Platforms With 100% Accuracy

socialscan offers accurate and fast checks for email address and username usage on online platforms. Given an email address or username, socialscan returns whether it is available, taken or invalid on online platforms. Features that differentiate socialscan from similar tools e.g. knowem.com,...

Iran-Linked 'Charming Kitten' Touts New Spearphishing Tactics

An Iran-linked advanced persistent threat APT group tied to attacks on President Trump’s 2020 re-election campaign has added new spearphishing techniques to its arsenal in an apparent ramp-up in operations. Charming Kitten—which goes by a number of names, including APT35, Ajax Security Team,...

A pervert Yahoo employee hacked 6,000 accounts using internal system

By Waqas A former Yahoo engineer hacked 6,000 Yahoo Mail account to extract the personal information of victims primarily sexual images and videos. This is a post from HackRead.com Read the original post: A pervert Yahoo employee hacked 6,000 accounts using internal system...

Former Yahoo Employee Admits Hacking into 6000 Accounts for Sexual Content

An ex-Yahoo! employee has pleaded guilty to misusing his access at the company to hack into the accounts of nearly 6,000 Yahoo users in search of private and personal records, primarily sexually explicit images and videos. According to an press note released by the U.S. Justice Department, Reyes...

Former Yahoo Employee Admits Hacking into 6000 Accounts for Sexual Content

An ex-Yahoo! employee has pleaded guilty to misusing his access at the company to hack into the accounts of nearly 6,000 Yahoo users in search of private and personal records, primarily sexually explicit images and videos. According to an press note released by the U.S. Justice Department, Reyes...

With Yahoo and Paypal is related to two distinct vulnerabilities-vulnerability warning-the black bar safety net

! This article share with Yahoo and Paypal is related to two unique vulnerability, one for Yahoo IDOR vulnerability insecure direct object references, another for Paypal, DoS vulnerabilities, two vulnerabilities found are for the Indian security engineers, which found that principles and ideas ar...

Julian Assange, a Big Yahoo Fine, and More Security News This Week

Plus: Wi-Fi vulnerabilities, Silk Road 2's founder, and more of the week's top security news...

This Week in Security News: 5G Security and Tax Scams

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about cybersecurity and data concerns in 5G. Also, learn about cybercriminal threats during tax season. Read on: Securing Enterprises...

Threat Source (April 11)

Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. If you haven’t yet, there’s still time to register for this year’s Talos Threat Research Summit — our second annual conference by...

Yahoo Offers $117.5M Settlement in Data Breach Lawsuit

Yahoo is offering to cough up $117.5 million to settle a lawsuit regarding its massive data breaches that compromised the personal information of three billion users. The new $117.5 million settlement, filed Tuesday in the U.S. District Court in San Jose, comes after the internet company’s first...

Denial Of Service (DoS)

pidgin is vulnerable to denial of service DoS attacks. The vulnerability exists as the Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service application crash via crafted byte sequences...

games.yahoo.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-719269 Description| Value ---|--- Affected Website:| games.yahoo.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

movies.yahoo.com.hk XSS vulnerability

Open Bug Bounty ID: OBB-712822 Description| Value ---|--- Affected Website:| movies.yahoo.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Hackers bypassed Gmail & Yahoo’s 2FA to target US officials

By Waqas The attack was carried out by Iran-backed charming kitten hackers and victims include dozens of US government officials. Private emails of US sanctions officials and nuclear scientists have been breached by Iranian state-sponsored hackers. As per the data obtained by Certfa, a...