Collaborate Disseminate
So as a rule of thumb I once learned that adding or removing HTML with JavaScript/JQuery (.html(),.append(), etc) leaves yourself wide open for DOM Based XSS Attacks. It is now my understanding that this is not 100% true. Supposedly there … Continue reading DOM Based XSS and Adding HTML Elements
The value of currentPage: can be controlled by the user. All characters (like: ” ‘ ( ) / ; : except < & > are injected without being sanitized.
Is there any possible way to execute XSS in such a scenario?
<scr… Continue reading JQuery function inside Script Tag. How to execute XSS in such a scenario?
I have iframe in my website i want it to be encrypted so that user can’t understand the link and when user try to paste on browser it should show the video
<iframe
id=”<?php echo $fetchyoutubedetails[‘id’];?>”
… Continue reading I want to hide my youtube embeded code from my source code [on hold]
Our web application uses a HTML file with jQuery embedded inside.
According to the jQuery license (https://jquery.org/license/), we have to leave the license header intact, including the version number.
Our client reported e… Continue reading Is it really Security Misconfiguration to show a version number?
I am working on a site which is vulnerable to XSS attacks when a cross-domain AJAX request is performed without the dataType option causing text/javascript responses to be executed.
$.get(‘https://sakurity.com/jqueryxss’)
j… Continue reading Cross-Site Scripting (XSS) in ASP.NET Core
This week, SUPRA Smart TV flaw lets attackers hijack screens with no video, 20,000 Linksys routers leak historic record of every device ever connected, a new attack creates ghost taps on Android smartphones, and an Australian teenager that hacked i… Continue reading Weather Channel, Shopify, & SAC – Hack Naked News #221
I have a web application at the workshop that uses the old jQuery-1.11.0 library, where
jQuery.globalEval (text);
hence every text/javascript responses gets executed, and in my case it looks like:
> jQuery.get(‘https://m… Continue reading jQuery-1.11.0 xss p0c
I am trying to see how a publicly known "vulnerable version of the library jquery" can be exploited to make proof of concepts to website owners.
Let’s say we have jquery version 2.1.1 that has known security issues.
If you search… Continue reading How to exploit publicy known vunerable version of jquery?
Drupal, the popular open-source content management system, has released security updates to address multiple “moderately critical” vulnerabilities in Drupal Core that could allow remote attackers to compromise the security of hundreds of thousands of w… Continue reading Drupal Releases Core CMS Updates to Patch Several Vulnerabilities
Say, I have a page where the input from the user is taken and is passed through a simple client-side XSS filter. That filter only replaces < characters with ”.
in = in.replace(/[<]/g, ”);
The input is then passed o… Continue reading Bypass a simple XSS filter that only looks at <