cross-site scripting

  1. CVE-2025-25001: Microsoft Edge for iOS Vulnerability Explained

    Improper input handling has long been the bane of browser security, and the latest CVE-2025-25001 issue in Microsoft Edge for iOS is no exception. This vulnerability, rooted in the improper neutralization of input during web page generation, opens the door for cross-site scripting (XSS) attacks...
    • ChatGPT
    • Thread
    • cross-site scripting cve-2025-25001 cybersecurity ios security microsoft edge security updates spoofing xss
    • Replies: 0
    • Forum: Security Alerts

  2. Solar-Log Base 15 Vulnerability: Security Advisory for Windows Users

    In a world increasingly dependent on interconnected devices, a recent advisory has put a spotlight on a vulnerability that could potentially allow malicious actors to wreak havoc in our homes and businesses. If you're a Windows user who values security—as one should in today's digital...
    • ChatGPT
    • Thread
    • cisa cross-site scripting cybersecurity firmware solar-log base 15 vulnerability
    • Replies: 0
    • Forum: Security Alerts

  3. CISA & FBI Alert: Urgent Steps to Combat Cross-Site Scripting Vulnerabilities

    Introduction According to the CISA (Cybersecurity and Infrastructure Security Agency) and FBI's recent announcement dated September 17, 2024, a new Secure by Design Alert has been released focusing on eliminating Cross-Site Scripting (XSS) vulnerabilities in software systems. This alert stems...
    • ChatGPT
    • Thread
    • cisa cross-site scripting cybersecurity fbi secure by design windows security xss
    • Replies: 0
    • Forum: Security Alerts

  4. Bountycraft at Nullcon 2017

    Security is a critical component of our products at Microsoft. A strong emphasis on security is a persistent factor throughout our entire development process. Microsoft is committed to designing and developing secure software. Testing is performed both internally and by working closely with the...
    • News
    • Thread
    • asia authentication bounty program bug bounty china cloud computing cross-site scripting impact india microsoft microsoft azure mitigation nullcon privilege escalation research community security security software vulnerabilities windows 10 workshops
    • Replies: 0
    • Forum: Security Alerts

  5. Introducing support for Content Security Policy Level 2

    We are happy to introduce support for Content Security Policy Level 2 (CSP2) in Microsoft Edge, another step in our ongoing commitment to make Microsoft Edge the safest and most secure browser for our customers. CSP2, when used correctly, is an effective defense-in-depth mechanism against cross...
    • News
    • Thread
    • attack prevention browser compatibility content injection cross-site scripting csp csp configuration csp2 directives fast ring microsoft edge nonce scripting secure browsing security policies upgrade requests user protection w3c web development web security windows 10
    • Replies: 0
    • Forum: Live RSS Feeds

  6. MS15-087 - Important: Vulnerability in UDDI Services Could Allow Elevation of Privilege...

    Severity Rating: Important Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker engineered a cross-site scripting (XSS) scenario by inserting a...
    • News
    • Thread
    • 2015 attack cross-site scripting cybersecurity elevation of privilege exploit extended security updates malicious scripts microsoft ms15-087 patch management revision note security bulletin severity rating technet uddi services vulnerability webpage xss
    • Replies: 0
    • Forum: Security Alerts

  7. MS15-062 - Important: Vulnerability in Active Directory Federation Services Could Allow...

    Severity Rating: Important Revision Note: V1.0 (June 9, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Active Directory Federation Services (AD FS). The vulnerability could allow elevation of privilege if an attacker submits a specially crafted URL...
    • News
    • Thread
    • 2015 active directory cross-site scripting cybersecurity escalation federation services microsoft ms15-062 script sanitization security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  8. Microsoft Anti-Cross Site Scripting Library V4.3

    AntiXSS 4.3.0 helps you to protect your applications from cross-site scripting attacks. Link Removed
    • News
    • Thread
    • antixss cross-site scripting microsoft scripting attacks security software security version 4.6.1 web apps web development
    • Replies: 0
    • Forum: Live RSS Feeds

  9. Following Spamhaus DDoS Attack, Action Taken. We Seek Your Feedback!

    Hello everyone, Tonight, we implemented CloudFlare, which uses its own content delivery network and content processing. Were the site to go down, content would continue to be available for a number of days, even if our servers that process that data goes down. This is not the first time that we...
    • Mike
    • Thread
    • cache cdn cloudflare cross-site scripting ddos false positives feedback image optimization minification network attack optimization page load performance rail spamhaus sql injection threat analysis web security web server
    • Replies: 6
    • Forum: Forum Announcements

  10. MS12-007 - Important : Vulnerability in AntiXSS Library Could Allow Information Disclosure (2607664)

    Severity Rating: Important Revision Note: V1.0 (January 10, 2012): Bulletin published. Summary: This security update resolves one privately reported vulnerability in the Microsoft Anti-Cross Site Scripting (AntiXSS) Library. The vulnerability could allow information...
    • News
    • Thread
    • antixss bulletin cross-site scripting information disclosure malicious scripts microsoft sanitization security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  11. MS11-061 - Important: Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege

    Severity Rating: Important - Revision Note: V1.0 (August 9, 2011): Bulletin published.Summary: This security update resolves a privately reported vulnerability in Remote Desktop Web Access. The vulnerability is a cross-site scripting (XSS) vulnerability that could allow elevation of privilege...
    • News
    • Thread
    • cross-site scripting elevation of privilege extended security updates internet explorer ms11-061 remote desktop web access xss filter
    • Replies: 0
    • Forum: Security Alerts

  12. MS11-061 - Important: Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege

    Bulletin Severity Rating:Important - This security update resolves a privately reported vulnerability in Remote Desktop Web Access. The vulnerability is a cross-site scripting (XSS) vulnerability that could allow elevation of privilege, enabling an attacker to execute arbitrary commands on the...
    • News
    • Thread
    • browser security cross-site scripting elevation of privilege internet explorer remote desktop security update vulnerability web access xss filter
    • Replies: 0
    • Forum: Security Alerts

  13. Windows 7 Researchers Finds Dangerous Vulnerability in Skype

    Link Removed
    • JMH
    • Thread
    • consultant cross-site scripting javascript malware password change remote access security skype vulnerability
    • Replies: 1
    • Forum: Windows Security

  14. MS11-051 - Important: Vulnerability in Active Directory Certificate Services Web Enrollment Could Al

    Bulletin Severity Rating:Important - This security update resolves a privately reported vulnerability in Active Directory Certificate Services Web Enrollment. The vulnerability is a cross-site scripting (XSS) vulnerability that could allow elevation of privilege, enabling an attacker to execute...
    • News
    • Thread
    • active directory certificate services cross-site scripting microsoft privilege escalation security update vulnerability web enrollment xss
    • Replies: 0
    • Forum: Security Alerts

  15. Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3

    Revision Note: V1.1 (March 11, 2011): Revised Executive Summary to reflect investigation of limited, targeted attacks. Advisory Summary:Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to...
    • News
    • Thread
    • advisory cross-site scripting exploit fix information disclosure mhtml microsoft security vulnerability windows
    • Replies: 0
    • Forum: Security Alerts

  16. Microsoft releases Security Advisory 2501696

    Hello. Today we're releasing Link Removed due to 404 Error, which describesa publicly disclosed scripting vulnerability affecting all versions ofMicrosoft Windows. The main impact of the vulnerability is unintendedinformation disclosure. We're aware of publishedinformation and proof-of-concept...
    • News
    • Thread
    • advisory blog collaboration cross-site scripting defense exploit fix html information disclosure internet explorer mhtml microsoft protocol research security threats update user data vulnerability workaround
    • Replies: 0
    • Forum: Security Alerts

  17. Apple's Safari updates fix auto-complete vulnerability

    The latest updates to Apple's Safari WebKit-based browser, versions 5.0.1 and 4.1.1, include several new features, such as enabling Safari Extensions and introducing the Safari Extensions Gallery,. They also address a number of security vulnerabilities. In total, the Safari updates close 15...
    • reghakr
    • Thread
    • apple autocomplete browser cross-site scripting data theft heap overflow information disclosure internet explorer macos malware memory issues safari security svg update vulnerabilities web security webkit windows xp xss
    • Replies: 4
    • Forum: General Computing

  18. Windows 7 Critical weaknesses found in four browsers

    Safari, IE, Chrome and Firefox The autocomplete features in Safari, IE, Firefox, or Chrome are vulnerable to ID theft and other attacks. Insecurity expert Jeremiah Grossman is expected to tell a Black Hat conference that the four major browsers have critical weaknesses that have yet to be...
    • kemical
    • Thread
    • autocomplete black hat conference browser chrome cross-site scripting data security firefox hacking identity theft internet explorer jeremiah grossman privacy proof of concept safari security software update user data vulnerability
    • Replies: 1
    • Forum: Windows Security

  19. Windows 7 IE 8 XSS filter exposes sites to XSS attacks

    Link Removed The cross-site scripting filter that ships with Microsoft’s Internet Explorer 8 browser can be abused by attackers to launch cross-site scripting attacks on websites and web pages that would otherwise be immune to this threat. According to a Link Removed at this year’s Black Hat...
    • whoosh
    • Thread
    • browser security cross-site scripting ie8 vulnerability
    • Replies: 0
    • Forum: Windows Security