Wednesday, 11 June 2014
Yahoo Toolbar Vulnerability Triggers Non-Exploitable XSS Payload on All Websites
Yahoo offers a web browser toolbar which includes apps for leading sites like Facebook, Yahoo! Mail, Weather and News. Yahoo Toolbar also known as Y! Toolbar is available for Internet Explorer, Firefox and Google Chrome web browsers.
Yahoo Toolbar is one of the most popular and widely installed web browser add-on/extension. Many popular softwares like Java Update and thousands of free software including some Antivirus products promote Yahoo toolbar and bundled it into their installer files.
A vulnerability has been reported in Yahoo Toolbar by Security Researcher Behrouz SAdeghipour, which causes cross site scripting flaw on popular websites like Flickr, Yahoo, Google, Pinterest, Youtube, Amazon, Twitter and many more.
Yahoo Toolbar vulnerability triggers all previous non-exploitable XSS payloads on popular websites as shown below in multiple screenshots provided by Behrouz to The Hacker News.
The vulnerability resides in the way Toolbar intercept and modifies the website pages in the browser to deliver additional content.
Yahoo offers a web browser toolbar which includes apps for leading sites like Facebook, Yahoo! Mail, Weather and News. Yahoo Toolbar also known as Y! Toolbar is available for Internet Explorer, Firefox and Google Chrome web browsers.
Yahoo Toolbar is one of the most popular and widely installed web browser add-on/extension. Many popular softwares like Java Update and thousands of free software including some Antivirus products promote Yahoo toolbar and bundled it into their installer files.
A vulnerability has been reported in Yahoo Toolbar by Security Researcher Behrouz SAdeghipour, which causes cross site scripting flaw on popular websites like Flickr, Yahoo, Google, Pinterest, Youtube, Amazon, Twitter and many more.
Yahoo Toolbar vulnerability triggers all previous non-exploitable XSS payloads on popular websites as shown below in multiple screenshots provided by Behrouz to The Hacker News.
The vulnerability resides in the way Toolbar intercept and modifies the website pages in the browser to deliver additional content.
Tuesday, 10 June 2014
Vodafone Reveals Some Governments Have Direct Access to Their Data Centers
Vodafone, the world’s second-largest mobile carrier with more than 400 million customers around the world has issued its first "Law Enforcement Disclosure Report", reveals that the governments in some of the countries it operates, have direct access to its network allowing them to listen to all conversations.iOS 8 Safari Browser Can Read Your Credit Card Details Using Device Camera

While shopping online we need to first surf through number of pages and then finally have to fill credit and debit cards details manually into the browser, which is the annoying for most of the user. But now the new Safari feature in iOS 8 solves this problem by integrating camera-based Credit and Debit card reader.
Subscribe to:
Posts (Atom)





