Yahoo! Messenger v11 - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! Messenger v11 - Bypass & Persistent Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1279 Video: https://www.youtube.com/watch?v=kDdg6O5vGCY Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1136 Release Dat...

Yahoo! BB #29 YM - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! BB 29 YM - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: ============= 2014-07-06 Vulnerability...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

Yahoo! BB #29 YM - Bypass & Persistent Vulnerability

Document Title: =============== Yahoo! BB 29 YM - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1136 Video: http://www.vulnerability-lab.com/getcontent.php?id=1279 Release Date: ============= 2014-07-06 Vulnerability...

Yahoo! Bug Bounty #25 Flickr API - Persistent Vulnerability

Document Title: =============== Yahoo! Bug Bounty 25 Flickr API - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1132 Release Date: ============= 2014-07-06 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2014-4603

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

CVE-2014-4603

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

CVE-2014-4603

CVE-2014-4603 affects the Yahoo! Updates for WordPress plugin (

CVE-2014-4603: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in yupdatesapplication.php in the Yahoo! Updates for WordPress plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 secret, 2 key, or 3 appid parameter...

PT-2014-6016

Name of the Vulnerable Software and Affected Versions Yahoo! Updates for WordPress plugin versions 1.0 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the secret,...

Yahoo! Messenger 8.0.0.863 File Extension Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19353/info A vulnerability in Yahoo! Messenger allows remote attackers to spoof file extensions. This issue is due to a design error. An attacker may leverage this issue to spoof downloaded filenames to unsuspecting users...

Yahoo! Messenger YVerInfo.dll ActiveX Control Buffer Overflow

No description provided by source. $Id: yahoomessengerfvcom.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Yahoo! Messenger 9 'YahooBridgeLib.dll' ActiveX Control Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37007/info Yahoo! Messenger is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash the application using the ActiveX control...

Yahoo! Toolbar 1.4.1 Helper Class ActiveX Control Remote Buffer Overflow Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26656/info Yahoo! Toolbar ActiveX Control is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the...

Yahoo Player 1.0 - (.m3u) Buffer Overflow Exploit

No description provided by source. Title: Yahoo Player v1.0 .m3u Buffer Overflow Exploit direct EIP overwrite Date: 2010-03-07 Author: BombardMr. tro0oqy originally discovered it, and gave a SEH Version:1.0 Tested on: Windows XP SP2 CVE: my $file=crash.m3u; my $junkA=Ax2080; my...

Yahoo Player 1.0 - (.m3u/.pls/.ypl) Buffer Overflow Exploit (SEH)

No description provided by source. !/usr/bin/perl print qq Yahoo Player 1.0 .m3u/.pls/.ypl Local Buffer Overflow Exploit SEH by Mr.tro0oqy from yemen geertz: Red-D3v1L , his0k4 ,Stack ; my $bof=\x41 x 2076; my $nsh=\xEB\x06\x90\x90; Short jmp my $seh=\x5D\x38\x82\x7C; KERNEL32.DLL my $nop=\x90 x...

Yahoo! Messenger 5.6 File Transfer Buffer Overrun Vulnerability

No description provided by source. source: Yahoo! Messenger File Transfer Buffer Overrun Vulnerability Yahoo! Messenger is prone to a remotely exploitable buffer overrun vulnerability. An attacker may trigger this condition by initiating a malformed 'sendfile' request, which the victim user must...

Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

Yahoo! Widget < 4.0.5 GetComponentVersion() Remote Overflow Exploit

No description provided by source. html !-- +++++++++++++++++++++++ +Last Modified by lhoang8500++ +++++++++++++++++++++++ -- html object classid=CLSID:7EC7B6C5-25BD-4586-A641-D2ACBB6629DD id=target/OBJECT SCRIPT language=javascript var heapSprayToAddress = 0x05050505; var payLoadCode =...