165 matches found
cumin: session cookies lack httponly setting
It was found that Cumin did not set the HttpOnly flag on session cookies. This could allow a malicious script to access the session cookie...
Mastery OA contents of the log stored XSS can get the cookie-vulnerability warning-the black bar safety net
Mastery OA2013 and 2 0 1 0 version, Office Anywhere 2 0 1 3 work log edit page there is the storage typeXSS, and their superiors view the log after you can steal the cookie 1, the work log edit page source code to bypass the bypass a character can be constructedXSS! ! ! 1, the interception to giv...
DEBIAN-CVE-2012-0053
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request aka 400 error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a 1 long or 2 malformed header in...
[hack4sec] XSS: Разведка боем.
Автор: Кузьмин Антон [email protected] Команда: Hack4sec [email protected] Дата: 30-05-2011 PDF-вариант: Здравствуйте. В данной статье я хочу привести один не стандартный пример использования XSS-уязвимостей. По крайней мере раньше я ни разу не видел чтоб подобные вещи где-то...
