PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Exploiting Directory Traversal to View Customer Credit Card Information on Yahoo's Small Business Platform

samcurry.net | blog | #bug-bounty | #web-security | #pii | #directory-traversal | #yahoo | #credit-card
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A directory traversal on Yahoo's small business platform let attackers view customer credit-card data by brute-forcing a predictable service ID; the writeup covers stack recon and the data-leak path.
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · samcurry.net
Hacking Subaru: Tracking and Controlling Cars via the STARLINK Admin Panel
A flaw in Subaru's STARLINK admin panel gave unrestricted access to vehicles and accounts in the US, Canada and Japan—remote commands, a year of location history, PII—keyed on a last name and ZIP.
blog · samcurry.net
Hacking Kia: Remotely Controlling Cars With Just a License Plate
Kia vulnerabilities let attackers remotely unlock, start and track any hardware-equipped vehicle with a license plate—~30 seconds, subscription or not—and add themselves as invisible second users.
blog · samcurry.net
Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform
Flaws in points.com, backend behind many airline and hotel loyalty programs: path traversal exposed 22 million order records, and an auth bypass enabled points transfers and admin-site access.
Back