Back to directory
WRITEUP #6238

Password Not Provided - Compromising Any Flurry User's Account [Yahoo Bug Bounty]

Auth BypassBroken authenticationAccount takeover
by@jackhcable(Jack Cable)
Program
Yahoo! / Verizon Media
Published
Aug 15, 2017
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://lightningsecurity.io/blog/password-not-provided/
▸ RELATED WRITEUPS
Account Takeover via Broken Authentication Workflow: Free Lifetime Streaming!
Auth BypassBroken authentication
Interesting Story of an Account Takeover Vulnerability
Auth BypassAccount takeover
Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center
Auth Bypass2FA / MFA bypass
Forced SSO Session Fixation
Auth BypassSSO
Account takeover on 8 years old public program
Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat