DNS Rebinding Attack: DNS Rebind Toolkit

DNS Rebind Toolkit is a frontend JavaScript framework for developing DNS Rebinding exploits against vulnerable hosts and services on a local area network LAN. It can be used to target devices like Google Home, Roku, Sonos WiFi speakers, WiFi routers, “smart” thermostats, and other IoT devices. Wi...

Prototype JavaScript Framework跨站Ajax请求漏洞

Bugraq ID: 36926 CVE ID：CVE-2008-7220 Prototype JavaScript Framework是一款由Sam Stephenson开发的JavaScript开发函数库及框架。它提供了完整的Ajax框架及其它的工具。 Prototype JavaScript Framework存在一个未明错误，远程攻击者可以利用漏洞进行一个跨站ajax请求攻击，可以以受影响浏览器安全上下文执行任意代码。 Asterisk包含一个基于AJAX的演示管理接口，ajamdemo.html使用prototype.js框架，受此漏洞影响允许攻击者执行跨站AJAX请求攻击。...

CVE-2008-7220

Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...

CVE-2008-7220

Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...

CVE-2008-7220

PrototypeJS (prototype.js) prior to 1.6.0.2 has an unspecified vulnerability that could permit a remote attacker to perform cross-site Ajax requests via unknown vectors. The issue is referenced in multiple sources, including IBM security notices for IBM Cloud Pak System variants (recommending upg...

CVE-2008-7220

Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...

CVE-2008-7220: Undefined Security Weakness

Unspecified vulnerability in Prototype JavaScript framework prototypejs before 1.6.0.2 allows attackers to make "cross-site ajax requests" via unknown vectors...