Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Permanent account takeover on Yahoo's Small Business platform

samcurry.net | blog | #bug-bounty | #account-takeover | #authentication | #password-reset | #yahoo | #token

Summary

The password-reset flow on Yahoo's small business platform carried a client-controlled 'uuid'; a signature/user-ID mismatch let attackers permanently take over other users' accounts.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-61967 — miniOrange OTP Verification Ultimate Member Password Reset Authentication Bypass (aretiq.ai)
  2. CVE-2026-8206 — Themeum Kirki WordPress Plugin Password Reset Email Redirect Privilege Escalation (aretiq.ai)
  3. Web Hackers vs. The Auto Industry: Critical Vulnerabilities in Ferrari, BMW, Rolls Royce, Porsche, and More (samcurry.net)
  4. Hacking Chess.com and Accessing 50 Million Customer Records (samcurry.net)
  5. Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts (samcurry.net)
  6. Exploiting Directory Traversal to View Customer Credit Card Information on Yahoo's Small Business Platform (samcurry.net)

back