Soroush Dalili – Computer Security Is My Interest!
Soroush Dalili's blog – بلاگ سروش دلیلی
Home
About Me
Advisories
Contact Me
FAQs
Links
Projects
Cross Site Request Forgery (CSRF) PoC Template (by Javascript)
Excel Advanced Search Add-In Application
Drag and Drop XSS in Firefox by HTML5 (Cross Domain in frames)
On December 31, 2011, in
My Advisories
,
Security Articles
, by Soroush Dalili
Tagged with:
drag and drop XSS
•
Drag Drop HTML5 XSS
•
Firefox Javascript Protocol Bypass
•
XSS by Feed Protocol
IIS5.1 Directory Authentication Bypass by using “:$I30:$Index_Allocation”
On July 1, 2010, in
My Advisories
,
Security Posts
, by Soroush Dalili
Tagged with:
IIS5.1 Authentication Bypass
Crowzers or Carzy Browsers:
On June 30, 2010, in
My Advisories
,
Security Posts
, by Soroush Dalili
Tagged with:
browser address bar lock
•
browser crash
•
fix iframe src
Opera Browser – Scroll Information Leakage
On June 30, 2010, in
My Advisories
, by Soroush Dalili
Tagged with:
Opera Browser Scroll Information Leakage
Cross Site URL Hijacking by using Error Object in Mozilla Firefox
On May 27, 2010, in
My Advisories
,
Security Articles
,
Security Posts
, by Soroush Dalili
Tagged with:
Cross Site URL Hijacking
•
Cross Site URL Hijacking by Error Object
•
XSUH by error object
•
XSUH in Mozilla Firefox
Previous Entries
Categories
My Advisories
(8)
Normal Posts
(22)
Security Articles
(17)
Security Posts
(31)
Recent Posts
Drag and Drop XSS in Firefox by HTML5 (Cross Domain in frames)
“Advisories” has been updated
Flash ExternalInterface.call() JavaScript Injection – can make the websites vulnerable to XSS
Travian Game Patch – Finally!
Unrestricted File Download V1.0 – Windows Server
Tags
All Facebook Application Walls
block ip
block isp
Blog Template
by using iMacros
close advertisment
computer science vulnerabilities
credit card algorithm
credit card algorithm is equal to IMEI algorithm
Critical vulnerabilities
CSRF Attacks
educational bug finding
Facebook Add Friend
Facebook Automatic Friend Add
Facebook Automation Friend
Facebook Game Cheat
FaceBook MobWars Cheat
final project article
free web hosting
ftp vulnerabilities
hacking videos
IMEI algorithm
javascript to close advertisements
java vulnerabilities
logical flaw
Microsoft IIS Vulnerability
National ID Code Algorithm
National ID Code JavaScript
Phishing attacks
Privacy
soroush dalili
sql injection tutorial
travian game
travian hack
travian online game
university of birmingham vulnerabilities
Web application security in ASP
Web application security in ASP - (simple) JSP
Web application security in JSP
weblogs
website vulnerability
XSS
XSS Vulnerability
الگوریتم کد ملی
کد ملی
OWASP Feeds
New Entry at No 4: Cyber Attacks
January 14, 2012
Bilateral Authentication
January 13, 2012
Google shares Chrome browser security principles
January 13, 2012
"Sanitize Input"
January 13, 2012
Essential Attack Surface Management
January 12, 2012
Symantec Security News
New Vulnerabilities
Vuln: JBoss Cache 'NonManagedConnectionFactory.java' Local Information Disclosure Vulnerability
December 30, 2012
Vuln: Pligg CMS 'status' Parameter SQL Injection Vulnerability
December 29, 2012
Vuln: Advanced Digital Broadcast Digital Satellite TV Platform Multiple Unspecified Vulnerabilities
January 13, 2012
Vuln: Atmail Webmail Multiple HTML Injection Vulnerabilities
January 13, 2012
Bugtraq: ME020567: MailEnable webmail cross-site scripting vulnerability CVE-2012-0389
Bugtraq: ZDI-12-016 : (0Day) HP Diagnostics Server magentservice.exe Remote Code Execution Vulnerability
Bugtraq: ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities
Bugtraq: ZDI-12-014 : HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability
More rss feeds from SecurityFocus
Twitter
LinkedIn