<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Gladiator Research and Security &#187; XSS</title>
	<atom:link href="http://research.gladtech.net/index.php/tag/xss/feed/" rel="self" type="application/rss+xml" />
	<link>http://research.gladtech.net</link>
	<description>Targeted security alerts and advice for financial insititutions</description>
	<lastBuildDate>Wed, 21 Jul 2010 14:28:49 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>MDaemon WorldClient Vulnerability</title>
		<link>http://research.gladtech.net/index.php/2008/11/19/mdaemon-worldclient-vulnerability/</link>
		<comments>http://research.gladtech.net/index.php/2008/11/19/mdaemon-worldclient-vulnerability/#comments</comments>
		<pubDate>Wed, 19 Nov 2008 15:43:20 +0000</pubDate>
		<dc:creator>Ryan Spanier</dc:creator>
				<category><![CDATA[Advisory]]></category>
		<category><![CDATA[MDaemon]]></category>
		<category><![CDATA[scripts]]></category>
		<category><![CDATA[Secunia]]></category>
		<category><![CDATA[WorldClient]]></category>
		<category><![CDATA[XSS]]></category>

		<guid isPermaLink="false">http://research.gladtech.net/?p=237</guid>
		<description><![CDATA[
GSA Reference Number: AD081119-01
Updated: 11-19-2008
Simply Put: Secunia is reporting a vulnerability in MDaemon&#8217;s WorldClient webmail frontend.  Attackers could send a specially-crafted email that, if viewed in the WorldClient webmail interface, could run malicious scripts or HTML code on the user&#8217;s machine without their interaction.  All the user would have to do is read the email.  [...]]]></description>
		<wfw:commentRss>http://research.gladtech.net/index.php/2008/11/19/mdaemon-worldclient-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SonicWALL Content Filter Security Vulnerability</title>
		<link>http://research.gladtech.net/index.php/2008/10/31/sonicwall-content-filter-security-vulnerability/</link>
		<comments>http://research.gladtech.net/index.php/2008/10/31/sonicwall-content-filter-security-vulnerability/#comments</comments>
		<pubDate>Fri, 31 Oct 2008 20:56:24 +0000</pubDate>
		<dc:creator>Ryan Spanier</dc:creator>
				<category><![CDATA[Advisory]]></category>
		<category><![CDATA[CFS Block Page]]></category>
		<category><![CDATA[Content Filter]]></category>
		<category><![CDATA[Cross Site Scripting]]></category>
		<category><![CDATA[Sonicwall]]></category>
		<category><![CDATA[XSS]]></category>

		<guid isPermaLink="false">http://research.gladtech.net/?p=183</guid>
		<description><![CDATA[GSA Reference Number: AD081031-01
Updated: 11-3-2008
Simply Put: SonicWALL has released an advisory regarding a new vulnerability found in its content filter.  If a user behind a SonicWALL with content filtering enabled clicks on a malicious link, an attacker can cause malicious javascript to be executed through the content filter&#8217;s &#8220;Blocked Traffic&#8221; screen.  This vulnerability only affects [...]]]></description>
		<wfw:commentRss>http://research.gladtech.net/index.php/2008/10/31/sonicwall-content-filter-security-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Advanced Phishing Advisory</title>
		<link>http://research.gladtech.net/index.php/2008/01/16/advanced-phishing-advisory/</link>
		<comments>http://research.gladtech.net/index.php/2008/01/16/advanced-phishing-advisory/#comments</comments>
		<pubDate>Wed, 16 Jan 2008 15:38:17 +0000</pubDate>
		<dc:creator>Ryan Spanier</dc:creator>
				<category><![CDATA[Advisory]]></category>
		<category><![CDATA[Banking]]></category>
		<category><![CDATA[Italy]]></category>
		<category><![CDATA[Phishing]]></category>
		<category><![CDATA[XSS]]></category>

		<guid isPermaLink="false">http://alerts.gladtech.net/?p=12</guid>
		<description><![CDATA[GSA Reference Number: AD080116-01
Simply Put: A new phishing attack has been targeted to customers of a financial institution in Italy.  This attack is unique because it links to the institution&#8217;s actual website instead of using a fake website like most phishing attacks.  Once the customer clicks on the link in the email, they [...]]]></description>
		<wfw:commentRss>http://research.gladtech.net/index.php/2008/01/16/advanced-phishing-advisory/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
