what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from Yosuke HASEGAWA

google-utf7xss.txt

Posted Dec 29, 2007

Authored by Yosuke HASEGAWA

Google suffered from a cross site scripting vulnerability via UTF-7.

tags | exploit, xss

SHA-256 | 16145040a7cac6e9c01f87901218be0de9bde0bb5338026746f2d8aaaf137f14

Download | Favorite | View

yahooutf7-xss.txt

Posted Nov 27, 2007

Authored by Yosuke HASEGAWA

Yahoo! suffered from a cross site scripting vulnerability using UTF-7. This has been fixed already.

tags | advisory, xss

SHA-256 | 2e06f080021ff60bcf8b9cb7489435c704164dac4045d1cfd13d9742c972bf6b

Download | Favorite | View

ibmatom-xss.txt

Posted Sep 11, 2007

Authored by Yosuke HASEGAWA

The Atom feed in www.ibm.com is susceptible to cross site scripting attacks.

tags | exploit, xss

SHA-256 | 8594a8f0707bbe9347aa863ec75647e87cd75f7b7fd157f2619aa5aef11de528

Download | Favorite | View

MS07-034.txt

Posted Jun 26, 2007

Authored by Yosuke HASEGAWA

In Internet Explorer, using the mhtml: protocol handler and using Outlook Express's feature, arbitrary resources (such as HTML, image, application file and so on) can opened as MHTML formatted file and Content-Type: is disregarded.

tags | advisory, arbitrary, protocol

advisories | CVE-2007-2225, CVE-2007-2227

SHA-256 | 379ef6bb17aaa05e0d8acff0481a2b322c0bc4e0908f5922391b81fb379775d0

Download | Favorite | View