Adi Cohen

2 exploits Active since Jan 2012
CVE-2012-0007 EXPLOITDB text WORKING POC
Microsoft Anti-Cross Site Scripting Library 3.x and 4.0 - Cross-Site Scripting via CSS Escaped Character Bypass
The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."
CVE-2012-1858 EXPLOITDB text WORKING POC
Microsoft Lync 2010 and 2010 Attendee - Cross-Site Scripting via SafeHTML Component
The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."