Yahoo Emails/mails Going to Trash, Yahoo No Email in Inbox/Sent

By -
Hi.
Today i came across to a shocking situation when one of my friend's yahoo inbox/sent item everything was empty. Also The emails were not sending and  the receiving emails were moving to trash.

So i thought to write a blog about it to Help everyone.

First thing to do is go to your Account Info, Enter your password
2nd Change your password and also check your RESET INFO. And also open UPDATE YOUR CONTACT INFORMATION. And Check for all emails address. If you don't know any remove it  and also add your Cell number and save it.



===============================================================

The above part was how to secure the compromised email. Now the Below part is how to fix all the changing made by hacker.

Go back to your mail panel and click on that Gear button and click on Settings and go to Accounts. And click on Edit. If there is any Reply to Address remove it. And if the radio button is on FORWARD change it to POP. 
And Click on Save and Save. Follow the Image below as shown using the Numbers.

All Done. Now lets Fix the emails Coming in trash.
Again Click on that Gear button Click on Settings and click on FILTER . if you see any filter in there Delete it all.





 But IF THERE IS NOT FILTER means that the filter is hidden. To View the hidden filter Click on ADD button and Name Testing to that filter and Add abc in sender field. And click Save.



As you save this filter. The hidden Hacker's Filter will reveal, with no name just a DOT. Now remove the both filters i.e TESTING and Dot filter and click save

That all. Now If you are asking how to get back your old emails. So i must say that SORRY. The Emails are all deleted. But sometimes the emails are move to hidden folder if you are lucky. So to get back your email you have to search for any email in the Search bar of Yahoo.

IF you have any query Please Comment below
Thanks.




Comments

Post a Comment

Popular posts from this blog

GRANDING UTime Master - IDOR (CVE-2023-45393)

By -
Image
  Hi All, I was able to identify IDOR Vulnerability in one online attendance system i.e. GRANDING UTime Master (v  UTime Master_9.0.7-Build:Apr 4,2023 ).  CVE ID: CVE-2023-45393 UTime Master is a powerful web-based time and attendance management software that provides a stable connection to GRANDING’s standalone push communication devices by Ethernet/Wi-Fi/GPRS/3G and working as a private cloud to offer employee self-service by mobile application and web browser. Using IDOR any user of the application can fetch Logs which are only meant to be accessible to administrators only. These logs also contains sensitive information like user password which is used to do the attendance by employees. Login to UTime Master using any account. Capture the request in burpsuite with the valid cookies. modify the URL to "/base/adminlog/table/?page=1&limit=200" Forward the request and it will fetch all the admin logs. IDOR has been fixed in latest versions after 9.0.7-Build:Apr 4,2023.
Read more

GRANDING UTime Master - Stored XSS (CVE-2023-45391)

By -
Image
  Hi All, I was able to identify stored XSS in one online attendance system i.e. GRANDING UTime Master (v  UTime Master_9.0.7-Build:Apr 4,2023 ). CVE ID: CVE-2023-45391 UTime Master is a powerful web-based time and attendance management software that provides a stable connection to GRANDING’s standalone push communication devices by Ethernet/Wi-Fi/GPRS/3G and working as a private cloud to offer employee self-service by mobile application and web browser. Login to UTime Master using admin account Click on Personnel > Employee Management >Employee Select Any employee or create a new employee In First name Section embed you payload. For test case I used "/><img src=a onerror=alert(22)> XSS payload embedded in EMP NAME field. Save the employee details, Once the page refreshed it will execute your payload. our payload executed successfully. I have also observed multiple other fields are also vulnerable to XSS e.g. Device Name, Department etc. XSS has been fixed in la
Read more

Ericsson BSCS iX R18 Billing & Rating (ADMX, MX) - Stored XSS (CVE-2020-29144, CVE-2020-29145)

By -
Image
Dear Reader, I was able to identify stored XSS in multiple web base modules of Ericsson BSCS iX R18 Billing & Rating platform  Below are its details: # Software description: Ericsson Billing is a convergent billing solution for telecoms that combines an unrivaled combination of out-of-the box features and high configurability. As an evolution of the widely-installed Ericsson BSCS iX, Ericsson Billing provides a low-risk but effective route to capture and secure revenue streams and take advantage of business opportunities from both traditional telecom services as well as digital services, 5G and IoT. # Technical Details & Impact: There are multiple web base modules in BSCS iX e.g. ADMX, MX (monitoring center), CX etc. It was observed that ADMX and MX are vulnerable to stored XSS, In most test cases session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admin's browsers using beef
Read more