Bug Bounty

Tue

Jul

Pakistani Researcher discovered three 0day remote Vulnerabilities in Yahoo! Inc. Online Services

Submitted by Editorial_Staff_Team on Tue, 07/08/2014 - 20:47

Pakistani Researcher discovered three 0day remote Vulnerabilities during participation in the Yahoo! Inc. Bug Bounty Program

The well known pakistani security researcher and vlab core team member "Ateeq ur Rehman Khan" discovered 3 0day vulnerabilities during the official bug bounty program of the Yahoo! company. Yahoo! Inc. is an american multinational internet corporation in Sunnyvale, California. It is globally known for its Web portal, search engine Yahoo Search, Yahoo Mail, Yahoo News, Yahoo Finance, Yahoo Groups, Yahoo Answers and many more different websites.

Fri

Jul

PayPal Bug Bounty - Ethernet Portal Backend Vulnerability in User Profile Values

Submitted by Editorial_Staff_Team on Fri, 07/04/2014 - 14:23

PayPal Inc Bug Bounty Program Rewards Researcher for Ethernet Portal Backend Vulnerability in User Profile Values

In 2013 the founder of the vulnerability laboratory "benjamin kunz mejri" discovered a vulnerability inside of the backend service of the paypal inc. The issue was tricky to exploit and located on the application-side of the paypal web-server account system.

In the morning of the 2013-12-02 the security researcher got notified by a secure mail service of an official paypal security manager. The mail reveals the details of an incident and the vulnerability laboratory started investigation in the reverse analysis because of the late response.