_____ _ _ _____ _____ _____ _____ / ___| |_| | _ \| _ | _ |_ _| | (___| _ | [_)_/| (_) | (_) | | | \_____|_| |_|_| |_||_____|_____| |_| C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org _ _ _ _____ ____ ____ __ _ Hacks In Taiwan | |_| | |_ _| __| | \| | Conference 2009 | _ | | | | | (__| () | | |_| |_|_| |_| \____|____|_|\__| http://www.hitcon.org Subject======:: Yahoo! (wretch.cc) Critical Security Vulnerabilities Author ======:: unohope [at] chroot [dot] org IRC =========:: irc.chroot.org #chroot Content =====:: I don't know why they called "Yahoo! Open Suck Day", oh~ sorry typo, I say the "Yahoo! Open Hack Day", but it's really suck actually. Now, Yahoo! (wretch.cc) Critical Security Vulnerabilities again! Including, Cross-Site Scripting, Cross-Site Request Forgery, Reversing Social Engineering, (one of the vulnerabilitits is the top populous clickjacking) Attackers can control every victim who visiting the Blog to do something via Internet, or feed they virus, trojans, malwares and blah blah easily. = =|| This article just for educational purposes, DO NOT use for illegal.