Origin: Visit https://technet.microsoft.com/library/security/ms14-080 Go to "Acknowledgments" part and search for "CVE-2014-6365" It says "Dieyu" - that's me.
Technical Details: "Internet Explorer XSS Filter Bypass Vulnerability" is done by... 1. Inject "a href" link into target page. (Not script, allowed by filter) 2. User clicks this injected link. (Clickjacking etc) 3. URL of this injected link puts script into page. (Filter does not kill it) (Because it's transaction of the same domain) Social Activities: 1. Greetings David Ross "dross". 2. Hey, if you love my hacking, please reply "nice". (I do this for free. Love to hear from my readers.) 3. My LinkedIn page: https://www.linkedin.com/in/liuzhiyong (You can add me there! Recently I took a new name.) 4. My ultimate "flaw": http://dieyu.org/ (You know my style. Comment is welcome!) Regards, _______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/