Lucene search
+L

1 matches found

securityvulns
securityvulns
added 2007/12/05 12:0 a.m.41 views

[MacOS X] Insecure eval() in Twitgit and Twitterlex dashboard widgets

Twitgit 1 and Twitterlex 2 are two MacOS X Dashboard widgets developed in JavaScript that can be used to display twitter.com updates. Both regularly retrieve data using the Twitter JSON API and parse whatever is returned with eval. Both relax the dashboard's JavaScript sandbox to enable the...

7.1AI score
SaveExploits0
Rows per page
Query Builder