full-disclosure - IE 6 XSS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <200209050029.g850TrZ45650@mailserver2.hushmail.com>
From: fooldisclosure at hushmail.com (fooldisclosure@...hmail.com)
Subject: IE 6 XSS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ahhh - time to bust out the old Unicode tekniqz...

http://www.ebay.com%25%32%46%40www%2emsn%2ecom/
http://www.ebay.com%252f%40www%2emsn%2ecom/
http://www.ebay.com%25%32%46%40%57%57%57%2e%4d%53%4e%2e%43%4f%4d/

So.. do YOU consider this an issue?

Regards,

F.D.

-----BEGIN PGP SIGNATURE-----
Version: Hush 2.1
Note: This signature can be verified at https://www.hushtools.com

wmMEARECACMFAj12pYEcHGZvb2xkaXNjbG9zdXJlQGh1c2htYWlsLmNvbQAKCRAMkLNo
e92H9eEFAJ9wcGrJSEljNO8y+jkRMM+ScwbjqwCgqz21RwDoFfdFbWIthy4c+6f40ts=
=742g
-----END PGP SIGNATURE-----




Get your free encrypted email at https://www.hushmail.com