Search / 3 posts tagged Cross-Site Request Forgery
Subscribe-
CSRF Vulnerability in Twitter Allows Forced Following
http://www.darknet.org.uk/ 2008/ 09/ csrf-vulnerability-in-twitter-allows-forced…I did mention this earlier in the week when I was talking about Twitter being used as a malware distribution platform, there also seems to be an auto follow vulnerability that spammers would love. Do you remember Myspace and samy with 900,000 friends?
-
RatProxy - Web Application Audit Tool From Google
http://blogs.vinuthomas.com/ 2008/ 07/ 04/ ratproxy-web-application-audit-tool-f…After HP & Microsoft’s security tool, Google’s gotten onto distribuing a Security Audit tool. Here’s Ratproxy which is a passive web security audit tool based on the observation of existing, user-initiated traffic in complex web 2.0 environments.
-
VU#584089: cPanel XSRF vulnerabilities
http://www.kb.cert.org/ vuls/ id/ 584089Vulnerability Note VU#584089 cPanel XSRF vulnerabilities OverviewcPanel contains multiple cross-site request forgery (XSRF) vulnerabilities. If successfully exploited, these vulnerabilities may allow an attacker to execute arbitrary commands. I. DescriptioncPanel is a web-based tool that is designed to automate and control web sites and servers.
About / rising and falling
Find posts and stories that have something in common using this weighted list of phrases, where popularity is represented by size. Learn more...
