About this tag
The tag noptrix refers to Levent Kayan, an Armenian security researcher who discovered a cross-site scripting (XSS) vulnerability in Skype's VoIP client. The vulnerability, stemming from insufficient input validation and output sanitization in profile fields like home, office, and mobile, allowed persistent code injection. Skype disputed the severity, claiming the flaw could only alter text appearance. Kayan, also known as noptrix, had previously identified similar issues in other instant messaging clients. This tag covers discussions about his security research and related vulnerabilities.
  1. JMH

    Windows 7 Skype Disputes Severity of XSS Vulnerability

    Link Removed - Invalid URL
    • JMH
    • Thread
    • advisory armenian client code injection discovery flaw kayan messaging noptrix output sanitization persistent research security severity rating skype text display validation voip vulnerability xss
    • Replies: 0
    • Forum: Windows Security