full-disclosure - Insufficient input checking on web site allows dangerous HTML TAGS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: dhtml at hush.com (dhtml@...h.com)
Subject: Insufficient input checking on web site allows dangerous HTML TAGS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> > Category: Arbitrary Execution of HTML of Hackers Choice
>
> HTML gets executed nowadays?

This includes remote Trojans, IRC zombies,
spyware,malware, remote key loggers,
or any program a hackers (Mike: delete the s)
wants to

********

You missed the proof reader's note too. LOL.



-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.3

wkYEARECAAYFAj8pqq8ACgkQTAj0ZSCgbx60owCgkDje+sPEuhnD4yJm7Kb/PxcDkQ8A
oKLr0CCfMnf6FuwZB8xTSOmk3wnh
=7Vf0
-----END PGP SIGNATURE-----




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427