Gmail Accounts Vulnerable to XSS Exploit
476328
mallumax writes &quot;A security hole in GMail has been found (an XSS vulnerability) which allows access to user accounts without authentication.
638921
Security firm Secunia has issued an advisory regarding a newly discovered "highly critical" security flaw in Firefox 2.0 and later, which involves a special URI handler. Although the problem was initially attributed to Internet Explorer by researcher Thor Larholm, Firefox is the culprit.
22770
Unpatched Windows machines are vulnerable to latest adware attack
728050
According to this security release from Secunia, there's a cross-site scripting vulnerability with the Travelsized CMS package (PHP-based) in the main index file.   David Vieira-Kurz has discovered some vulnerabilities in Travelsized CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.   The problem comes from the input parameters "page" and "langauge" not being verified and sanitized. Users are encouraged to go in and manually edit the source to correct the problem as there is no patch currently posted as of yet. You can get complete information about this issue from the full Secunia report.
630854
Mozilla is working to fix a browser flaw that could give attackers unauthorized access to data on a victim's machine.
59425
Does your email program accept hidden JavaScript commands?
500862
Doomwatchers count the ways If you use Google to send email, organize photos or help administer your website, doomwatchers have cataloged three new ways to steal your data and compromise the security of your users. All three of the techniques rely on cross site scripting, or XSS, in which hackers inject unauthorized code by making it appear as if it's hosted by the website being targeted.â¦
29234
Security researchers have uncovered a spoofing flaw in Internet Explorer that could turn out to be the perfect holiday gift for scammers.
663754
Microsoft has confirmed the existence of a vulnerability affecting the Windows Shell. The issue exists in the WebViewFolderIcon ActiveX control, and exploitation could result in an attacker gaining the same rights as a local user.
405640
Search engine Google has fixed a security flaw that was occurring in their email service, Gmail. The company did not reveal the nature of flaw, only that they had corrected it.
127768
Third-party fix plugs a recently discovered browser flaw that's increasingly being exploited in cyberattacks.
610802
Google has fixed a security hole in Google GMail, its free invitation only 1GB web mail service. The Google Gmail security flaw allowed hackers to be able to log into a userâs GMail account with only having to know oneâs username.
187938
Beware of any e-mail claiming to come from "frauddep@ftc.gov"--it carries a nasty payload.
316640
Such security flaws are not uncommon, but Gmail deviates from the norm by not causing cookies to expire when users change passwords.
620116
The cross-site scripting technique used by many malware propagators has branched out into a troubling new area of endeavor, as XSS attacks are turning up that inject child pornography into Web forums. One attack targeted a kids' site.
517091
Fixes made for "critical" JavaScript vulnerability in the Firefox browser and the SeaMonkey application suite.
74744
The &quot;highly critical&quot; vulnerabilities stem from a flaw in IE&#39;s drag-and-drop feature and in the browser&#39;s security zone.