what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 4 of 4

Files from Tomas Kuliavas

expression.eml.gz

Posted Dec 10, 2007

Authored by Tomas Kuliavas | Site topolis.lt

Proof of concept exploit for Roundcube webmail that demonstrates cross site scripting issues.

tags | exploit, xss, proof of concept

SHA-256 | d00b7e13f833039a92b08ef1378623811397b7f0ed11d7c802cd37fd0547d0fb

Download | Favorite | View

roundcube-xss.txt

Posted Dec 10, 2007

Authored by Tomas Kuliavas | Site topolis.lt

Roundcube webmail does not sanitize payloads allowing for cross site scripting attacks to occur when used in conjunction with Microsoft Internet Explorer.

tags | advisory, xss

SHA-256 | c514bf2d0203e08d52a83ae70c6057b6b34aa94e6ae734ad3ea9440554fa18ed

Download | Favorite | View

gpg-unsanitized-js-poc.eml.gz

Posted Dec 10, 2007

Authored by Tomas Kuliavas | Site topolis.lt

Demonstration proof of concept exploit for the SquirrelMail GPG plugin which suffers from an unsanitized javascript display vulnerability.

tags | exploit, javascript, proof of concept

SHA-256 | 62d0fdf0af0e63eb0a6572e40725aa88e01bacd77800ea9c1b3fb83df45ecdef

Download | Favorite | View

squirrel-multi.txt

Posted Dec 10, 2007

Authored by Tomas Kuliavas | Site topolis.lt

The SquirrelMail GPG plugin suffers from arbitrary file deletion and unsanitized javascript display vulnerabilities.

tags | advisory, arbitrary, javascript, vulnerability

SHA-256 | f5046e1f7205ce370f1e9ad1b9542accefa1ad2e3a12cc8c7c96b40b5d79baf6

Download | Favorite | View