full-disclosure - Xanga Hit By Script Worm?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat Dec 31 06:04:23 2005
From: mattmurphy at kc.rr.com (Matthew Murphy)
Subject: Xanga Hit By Script Worm?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

Haven't seen this discussed as yet, but it appears Xanga has been hit by
a cross-site scripting (XSS) worm similar to what hit MySpace recently...

http://blogs.securiteam.com/index.php/archives/166

I will post information to the blog as I am able to figure out more
about what it does.

- --
"Social Darwinism: Try to make something idiot-proof,
nature will provide you with a better idiot."

                                -- Michael Holstein

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDth9mfp4vUrVETTgRA38UAJ9TX7oEL8O6WGggLjg4YF+OfxCCyQCfbZ3E
H2RA/+cHJB7aXLflIk5H7a0=
=ZO2a
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3436 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051231/90578c95/smime.bin