Full Disclosure mailing list archives

Re: LinkedIn_User Account Delete using Click jacking


From: Laurelai <laurelai () oneechan org>
Date: Fri, 07 Oct 2011 16:20:18 -0700

On 10/7/2011 4:48 AM, asish agarwalla wrote:
Hi,

LinkedIn_User Account Delete using Click jacking.

This Vulnerability is accepted by LinkedIn they are in a process to patched it but not yet patched.

Please find the document describing the vulnerability.

Regards
Asish


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Opened up file in 7zip and extracted it, it appears to have some sort of encrypted package, will analyze in a VM further and find out what it does :)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: