Notices tagged with xss
-
#XSS mit einem #TLS-Zertifikat
https://binaryfigments.com/2017/12/11/dont-trust-all-ssl-tls-certificates/
!security
-
I wonder if this does it. I'm not very good at #XSS examples :)
-
Uhm. !gnusocial - the #Textile plugin has this code:
$tmp = str_replace('"','"',$notice->rendered);
I would not trust the #Textile plugin to be safe from #XSS attacks. I guess I could change my fullname to something like: Mikael " onclick="javascript:alert('butt');" title="pwn
-
#XSS attack prevention ;)
-
@hannes2peer Du måste köra motsvarande htmlspecialchars på data du trycker i HTML :/
i typ hela qvitter.js där data från databasen (description, location...) visas för användare. #XSS
-
cc !gs (opportunity for #XSS attack also in !sn !statusnet )
-
This is a !snbug announcement. A lame coding error left the opportunity for an #XSS attack in the #Bookmark plugin in !sn source which only very recently got fixed. I recommend updating to !gnusocial v1.1.2-alpha1 (i.e. latest git commit) if you haven't disabled the Bookmark !gnusocial I believe the severity is not very great, since only a href="" value could be writ…
-
about that #XSS vulnerability: if you look at the repo from that time (see link above) you perhaps have just to patch few stuff
-
#mediawiki #security releases (1.22.1+1.21.4+1.19.10 (LTS vers. 2015)): several #XSS, ... http://lists.wikimedia.org/pipermail/mediawiki-announce/2014-January/000138.html !wiki
-
I see 2 crashes there from your GNUsocial, but I also see that you can sub to other SNs which have statusnet >0.9.9 running. btw: do you know that microblog.ourcoffs.org.au has a security issue: #XSS http://status.net/2011/08/02/security-alert-for-all-versions-of-statusnet ?
-
@hauke@my-status.tk should upgrade his #statusnet 0.9.9: a #XSS (cross-site scripting) attack is possible. Besides: I can NOT subscribe to him: see log info: http://www.skilledtests.com/wiki/Pastebin#running_too_old_SN_with_security_bug
-
more than 160 websites of German tax office have #XSS (Cross Site Scripting Probleme) problem, Hamburg, Hessen, Baden Württemberg, Brandenburg #security cc @question
qbi
MMN-o ✅⃠
Erkan Yılmaz
Erkan Yılmaz
All Hacker Poesy content and data are available under the