Custom Player Skulls - Security Vulnerability
For over a year now, the Minecraft community has been able to link custom textures to player skulls using the SkullOwner tag.
This allows everyone to force other player's Minecraft clients to connect to a specific URL.
I have set up a website explaining the exploit: http://crushedpixel.eu/skull/