Security alarm - possible Cross Site Scripting on Facebook!

01-17-18, 01:51 AM

Since it can be assumed that I (hopefully) in this eventual "Black Hat" is not the only target, I would like to express a precautionary warning.

So nice to update your browser security and/or increase stock, temporarily disable the Java script and keep your eyes open.

--------------------------------------------------------------------------------------
Excerpt from the warnings of my security tool:

1. XXXX detected a potential Cross-Site Scripting attack
from http://de.ddl.me to https://staticxx.facebook.com.

Suspicious data:
TypeError: ic is undefined,(URL) https://staticxx.facebook...

2. XXXX detected a potential Cross-Site Scripting attack
from http://de.ddl.me to https://www.facebook.com.

Suspicious data:
TypeError: ic is undefined,(URL) https://www.facebook...
--------------------------------------------------------------------------------------

Who does not know what cross site scripting is and for one's own
Safety means, can read here:
https://en.ryte.com/wiki/Cross_Site_Scripting

With friendly greetings!

01-17-18, 03:09 AM

Damn - maybe I was responsible for these warnings, I had saved the attackers page (a movie stream page) under my favorites...

.....

Jimbuna · 01-17-18, 06:50 AM

Best you know what the root cause of the problem is and take steps to end it.

01-17-18, 01:51 AM	#1
Bleiente Stowaway Posts: n/a Downloads: Uploads:	Security alarm - possible Cross Site Scripting on Facebook! Since it can be assumed that I (hopefully) in this eventual "Black Hat" is not the only target, I would like to express a precautionary warning. So nice to update your browser security and/or increase stock, temporarily disable the Java script and keep your eyes open. -------------------------------------------------------------------------------------- Excerpt from the warnings of my security tool: 1. XXXX detected a potential Cross-Site Scripting attack from http://de.ddl.me to https://staticxx.facebook.com. Suspicious data: TypeError: ic is undefined,(URL) https://staticxx.facebook... 2. XXXX detected a potential Cross-Site Scripting attack from http://de.ddl.me to https://www.facebook.com. Suspicious data: TypeError: ic is undefined,(URL) https://www.facebook... -------------------------------------------------------------------------------------- Who does not know what cross site scripting is and for one's own Safety means, can read here: https://en.ryte.com/wiki/Cross_Site_Scripting With friendly greetings! Last edited by Bleiente; 01-17-18 at 03:35 AM.

01-17-18, 03:09 AM	#2
Bleiente Stowaway Posts: n/a Downloads: Uploads:	Damn - maybe I was responsible for these warnings, I had saved the attackers page (a movie stream page) under my favorites... ..... Last edited by Bleiente; 01-17-18 at 03:36 AM.

01-17-18, 06:50 AM	#3
Jimbuna Chief of the Boat Join Date: Feb 2006 Location: 250 metres below the surface Posts: 180,962 Downloads: 63 Uploads: 13	Best you know what the root cause of the problem is and take steps to end it. __________________ Wise men speak because they have something to say; Fools because they have to say something. Oh my God, not again!! GWX3.0 Download Page - Donation/instant access to GWX (Help SubSim)