[p0pc0rn]

no.they dont have any cash bounty reward for that.
but i did read few from others blog that yahoo did gave them their T-shirt as token

[p0pc0rn]

Does yahoo add names to Hall Of Fame or not ?

afaik, no.
never know any HOF on their page 😭

[p0pc0rn]

I think i should sell this vulnerability. 😧

haha..try it.maybe there'll be a newbie want to buy so he/she can brag it around his/her friend.

owh btw,nice find 🤝

[Nitrox]

As per my knowledge Yahoo doesn't pay. Sometimes they don't even acknowledge you. :|

One of my friends reported it, they patched it even without sending him a reply. "Sometimes" they send you a T-Shirt. Sad to see such a big company doing this, when Microsoft atleast has a HOF.

[Bars]

This is old, or fake. They no longer use the red logo.

[razem]

Nice find, but they don't give much...

[EMPIRERAIDER]

Yahoo you need to PAY before some one may find a bigger vulnerabillity and hack you like an SQLi i mean i would be tempted to report a vulnerabillity for google or ,microsoft but for yahoo no they do not even pay so what the point in reporting

[Nitrox]

You are absolutely right mate, there is no point of reporting this to Yahoo, As they does not have even a HOF.

Dude, put up a cookie stealer and f**k them up! 🤭

Everyone needs to learn a lesson. 🎉

On a serious note, there's no good in doing harm to people who use yahoo email. If you're angry on Yahoo, please don't do something malicious to their users. 😕

[Bars]

I'd like more proof. Sure, go ahead and PM me your TV details.

[pololo]

Report it ,You will get a T-shirt.I got one .:P

[Nitrox]

I know but i m not interested in getting T-Shirts.

Then give it to me for $10. I'll get a T-Shirt myself. 😝

[Nitrox]

Lol, I can sell this vulnerability for $100 🤭
If anyone want's to buy PM me !!

I don't think anyone will pay $100 for this vulnerability because:
1. They dont have any HOF
2. They "might" give you a TShirt only.

[Nitrox]

I know dude, no one will pay even $10 for this. 😭
Yahoo must start a reward program, so it will motivate hackers to find vulnerability and get rewarded. Everyone will be happy !!

The best you can do is report to Yahoo and threaten them to give you truck load of "TShirts" or else you'll f**k up their server blades. 🤣🤣

[Nitrox]

Lol, I will think on this, As i m not interested in getting a T-Shirt with a big title YAHOO !! 😏

Ask them to make a custom one for you with Big OOs in the middle so you can give it to your GF. 🤣🤣

She'll like it for sure. 🤭🤫

[p0pc0rn]

if you dont know how to do with that xss,u might as well post it to xssed.com .. no reward,but at least if you want your name in listed page like zone-h,u can do so :P
btw, i think you should try to report it. and use some professional words on your email.
sometimes there'll react on how u guys emailed them first.