(old)Puppy Linux Discussion Forum

http://www.wilderssecurity.com/showthre ... ost2148480
http://krebsonsecurity.com/2012/11/yaho ... tches-700/

[quote]A zero-day vulnerability in yahoo.com that lets attackers hijack Yahoo! email accounts and redirect users to malicious Web sites offers a fascinating glimpse into the underground market for large-scale exploits.

The exploit, being sold for $700 by an Egyptian hacker on an exclusive cybercrime forum, targets a “cross-site scripting

Supposedly the NoScript addon for FireFox offers protection against XSS attacks ... http://noscript.net/features#xss

The thing is... there have been many vulnerabilities discovered involving cross-site scripting which have been fixed to date as explained here. So, I am thinking that this must be a new security risk that will have to be addressed. Unfortunately, it doesn't appear to be a "one size patch fixes all" kind of problem.

Monsie