Results for the tag, xss attacks.

Find the latest news and information on xss attacks from ComputerWeekly.com and the web.

All ResultsResults from Computer Weekly - XSS ATTACKS

Twitter hacks simple XSS attacks, says security firm

News
| www.computerweekly.com
| 15/04/2009

Security Alerts Twitter hacks simple XSS attacks, says security firm Twitter's vulnerability to basic cross-site scripting attacks highlights the need for organisations... http://www.computerweekly.com/Articles/2009/04/15/235651/twitter-hacks-simple-xss-attacks-says-security-firm.htm

Google fixes severe security vulnerability in Chrome browser

News
| www.computerweekly.com
| 24/04/2009

...attacker's choice," he said. According to Larson, such an attack only works if Chrome is not already running. XSS attacks can make a web browser process unauthorised code such as JavaScript to carry out a variety of other attacks such as... http://www.computerweekly.com/Articles/2009/04/24/235774/google-fixes-severe-security-vulnerability-in-chrome.htm

Hackers broaden reach of cross-site scripting attacks

News
| www.computerweekly.com
| 22/03/2007

...scripting (XSS) flaws and JavaScript to create a distributed botnet without any kind of user interaction at all. XSS attacks have been around for years, and have been a favorite technique of script kiddies and others looking to deface Web... http://www.computerweekly.com/Articles/2007/03/22/222566/hackers-broaden-reach-of-cross-site-scripting-attacks.htm

Social networking sites: threats and remedies

News
| www.computerweekly.com
| 25/10/2007

...several SNS-specific features. 1.8 Cross site scripting (XSS), viruses and worms: SNSs are vulnerable to XSS attacks and threats due to widgets produced by weakly verified third parties. 1.9 SN aggregators: these SNS portals integrate... http://www.computerweekly.com/Articles/2007/10/25/227708/social-networking-sites-threats-and-remedies.htm

MySpace, YouTube successes open door to Web 2.0 dangers

In-Depth
| www.computerweekly.com
| 07/12/2006

...Malicious code can make multiple requests in the background while the user will be unaware of anything untoward happening. XSS attacks can be used to steal data, take control of a user's session, run malicious code, or launch phishing scams. ... http://www.computerweekly.com/Articles/2006/12/11/220444/MySpace-YouTube-successes-open-door-to-Web-2.0-dangers.htm

Microsoft Word - IE8.doc

Blog
| www.computerweekly.com

...Explorer 8.0 that may cause browser incompatibility problems with web applications Cross-Site Scripting Filter XSS attacks have emerged as a leading exploit against Web servers and Web applications. Internet Explorer 8 has an XSS filter that... http://www.computerweekly.com/blogs/it-fud-blog/IE8.pdf

Citrix Solutions for Complying with PCI-DSS

Whitepapers
| www.computerweekly.com
| 19/11/2009

...and session management (use of account credentials and session cookies) 6.5.4 –Cross-site scripting (XSS) attacks 6.5.5 –Buffer overfl ows 6.5.6 –Injection fl aws (for example, structured query language (SQL... http://www.computerweekly.com/Articles/2009/11/19/238729/Citrix-Solutions-for-Complying-with-PCI-DSS.htm

Critical flaw in Web 2.0, AJAX

News
| www.computerweekly.com
| 04/04/2007

...scripting attacks: An explosion of AJAX-based applications has increased the damage that cross-site scripting (XSS) attacks can inflict on machines. A new tool uses XSS flaws to create a botnet. "The rest of the frameworks do not explicitly... http://www.computerweekly.com/Articles/2007/04/04/222873/Critical-flaw-in-Web-2.0-AJAX.htm

OWASP Guide to Building Secure Web Applications and Web Services, Chapter 13: Interpreter Injection

News analysis
| www.computerweekly.com
| 27/07/2005

... The old JSP techniques such as <%= ... %> and out.print* do not provide any protection from XSS attacks. They should not be used, and any code including them should be rejected. With a small caveat, you can use as... http://www.computerweekly.com/Articles/2005/07/27/218674/owasp-guide-to-building-secure-web-applications-and-web-services-chapter-13-interpreter.htm

All Other Computer Weekly Results

All ResultsNews and blogs from the web - XSS ATTACKS

Six AV vendor websites open to XSS attacks

pressrelease
| www.mxlogic.com
| 14/05/2009

...About MX Logic MX Logic » Security News » Viruses/Worms » Six AV vendor websites open to XSS attacks Six AV vendor websites open to XSS attacks Wednesday, May 13, 2009 A hacker with the handle Methodman has posted proof of concept... http://www.mxlogic.com/securitynews/viruses-worms/six-av-vendor-websites-open-to-xss-attacks095.cfm

IEBlog : IE8 Security Part IV: The XSS Filter