RE: XSS bug in hotmail login page

2002-10-08 Thread Russell Harding
Hello, comments below: On Mon, 7 Oct 2002, Thor Larholm wrote: It's very simple, you can inject arbitrary scripting to be executed by the user in the context of hotmail. This means that you can e.g. steal his cookies or, if he's logged in, write emails from his account, delete his mails and

Re: Arbitrary Code Execution Vulnerability in VanDyke SecureCRT 3.4 4.0 beta

2002-07-28 Thread Russell Harding
. -Russell Harding

MacOS X SoftwareUpdate Vulnerability

2002-07-07 Thread Russell Harding
the Apple SoftwareUpdatesServer. Credits: Author - Russell Harding - [EMAIL PROTECTED] Testing - Spectre Phlux, KrazyC, Devon, and The Wench