Multiple web browsers do not properly interpret BASE and FORM elements when displaying URLs in the status bar

Overview Multiple web browsers do not properly display the location of HTML documents in the status bar. An attacker could exploit this behavior to mislead users into revealing sensitive information. Description Web browsers frequently display the Uniform Resource Locator URL in the status bar wh...

L-Soft 1.8 - Listserv Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/9307/info Multiple cross-site scripting vulnerabilities have been reported in L-Soft Listserv. An attacker may exploit these issues by embedding hostile HTML and script code in a link to a site hosting the software. This could permit theft of cookie-based...

x509 cert parsing in web browsers

Hello, While playing with the way SSL-enabled web browsers handle x509 certificates, I found several odd things - none of which is related to the recent issues with forging certs for MSIE, but related to the problems OpenSSL had recently. Due to some unrelated circumstances, I have very limited...