Adi Cohen

2 exploits Active since Jan 2012

CVE-2012-0007 EXPLOITDB text WORKING POC

Microsoft Anti-cross Site Scripting Library - XSS

The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."

View Code

CVE-2012-1858 EXPLOITDB text WORKING POC

Microsoft Lync - Information Disclosure

The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."

View Code