Recently i reported a Login Page BruteForcing Vuln . For which they offered me an HOF . I reported it via HackerOne . This is my 2 nd Yahoo HOF .

The vuln Link was : mail.yahoo.com/m 

It allowed bruting passwords with out any captcha protection  .

Now they have fixed it .

Thank u for Reading :)