Security feature bypass

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...

CVE-2013-2316

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...

CVE-2013-2316

The CVE-2013-2316 entry concerns Yahoo! Browser for Android, affected in version 1.4.4 and earlier. The issue is a URL-display vulnerability that allows remote attackers to spoof the address bar, potentially enabling phishing. The vulnerability is described as distinct from CVE-2013-2307. Public ...

CVE-2013-2316

The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL display, a different vulnerability than CVE-2013-2307...

Amazon Joins Authentication Game

As attackers continue to target large databases of passwords and users grow wearier by the day of creating new accounts and login credentials on each site they visit, the larger Web players are positioning themselves as not just social networking or retail hubs, but also as authentication...

Yahoo! Browser vulnerable to address bar spoofing

Overview Yahoo! Browser contains an issue in displaying URL, which may result in the address bar being spoofed. Note that this vulnerability is different from JVN55074201. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

JVN#31817913: Yahoo! Browser vulnerable to address bar spoofing

Yahoo! Browser contains an issue in displaying URL, which may result in the address bar being spoofed. Note that this vulnerability is different from JVN55074201. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update...

22 million Yahoo IDs stolen from their Japanese Server

22 million Yahoo! Japan's user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Japan portal. "We don't know if the file of 22 million user IDs was leaked or not, but we can't deny the possibility given the volume of traffic between our server and...

22 million Yahoo IDs stolen from their Japanese Server

22 million Yahoo! Japan's user IDs may have been stolen during an unauthorised attempt to access the administrative system of its Japan portal. “We don’t know if the file of 22 million user IDs was leaked or not, but we can't deny the possibility given the volume of traffic between our server and...

Yahoo! TW YSM MKT Blind SQL Injection

Title: ====== Yahoo! TW YSM MKT - Blind SQL Injection Vulnerability Date: ===== 2013-04-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=892 VL-ID: ===== 892 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============= Yaho...

Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication

Early 2012 ESET company a mysterious malware, dubbed the Avatar rootkit Win32/Rootkit.Avatar, advertised in the underground forums by Russian cyber crime. "We present you here previously announced product. In connection with work on other projects, we moved the release date for the public from Ma...

Yahoo! Browser for Android 地址栏伪造漏洞(CVE-2013-2307)

Bugtraq ID:59525 CVE ID:CVE-2013-2307 Yahoo! Browser for Android是一款安卓平台下的浏览器 Yahoo! Browser for Android 1.4.3之前版本打开新窗口时存在一个安全漏洞，允许远程攻击者利用漏洞伪造地址栏，可进行网络钓鱼等攻击 0 Yahoo! Browser v1.4.2 厂商解决方案 用户可联系厂商获得相应的升级程序或补丁： https://play.google.com/store/apps/details?id=jp.co.yahoo.android.ybrowser&hl=en...

Yahoo! Blind SQL Injection could lead to data leakage

It seems that 2013 is the "Data Leakage Year"! Many customers' information and confidential data have been published on the internet coming from government institutions, famous vendors, and companies too. Ebrahim Hegazy@Zigoo0 an Egyptian information security advisor who found a high severity...

CVE-2013-2307

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Code injection

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

CVE-2013-2307

CVE-2013-2307 affects the Yahoo! Browser for Android (versions before 1.4.3). The vulnerability allows remote attackers to spoof the address bar via a crafted web site, enabling phishing-like spoofing. The provided documents state the affected range (pre-1.4.3) and describe the impact, but do not...

CVE-2013-2307

The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site...

Yahoo! Browser vulnerable to address bar spoofing

Overview Yahoo! Browser contains an issue when opening a new window, which may result in the address bar being spoofed. Keita Haga of keitahaga.com reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact This...

Yahoo! Blind SQL Injection could lead to data leakage

It seems that 2013 is the "Data Leakage Year"! Many customers' information and confidential data have been published on the internet coming from government institutions, famous vendors, and companies too. Ebrahim Hegazy@Zigoo0 an Egyptian information security advisor who found a high severity...

JVN#55074201: Yahoo! Browser vulnerable to address bar spoofing

Yahoo! Browser contains an issue when opening a new window, which may result in the address bar being spoofed. Impact This vulnerability could be leveraged to forge the contents of the address bar for conducting phishing attacks. Solution Update the software Update to the latest version according...