WebKit - 'enqueuePageshowEvent' / 'enqueuePopstateEvent' Universal Cross-Site Scripting

view-frame.page; frame.tree.appendChildchildFrame-view-frame; childFrame-open; enqueuePageshowEventPageshowEventPersisted; HistoryItem historyItem = frame.loader.history.currentItem; if historyItem && historyItem-stateObject mdocument-enqueuePopstateEventhistoryItem-stateObject;...

Visualware MyConnection Server Cross-Site Scripting Vulnerability

Visualware MyConnection Server is a set of bandwidth testing software from Visualware USA. The software is used to test the bandwidth speed and connection quality of a network. A cross-site scripting vulnerability exists in Visualware MyConnection Server version 8.2b, which stems from the...

CVE-2015-2043: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the 1 bt, 2 variable, or 3 et parameter to myspeed/db/historyitem...

MyConnection Server 8.2b Cross Site Scripting

Title: MyConnection Server 8.2b GET Reflected XSS Severity: High CVE-ID: CVE-2015-2043 Release Date: 23 February 2015 Author: Kenneth F. Belva Websites: http://silverbackventuresllc.com http://xssWarrior.com http://securitymaverick.com Twitter: @infosecmaverick Contact: Please use website contact...