Wladimir Palant (@WPalant)

Title	Vulnerabilities	Programs	Authors
Adobe Acrobat hollowing out same-origin policy	XSS SOP Bypass Open Redirect PostMessage	Adobe	Wladimir Palant (@WPalant)
Party time: Injecting code into Teleparty extension	HTML Injection Open Redirect Browser Extension Hacking	Teleparty	Wladimir Palant (@WPalant)
Skype extension: All functionality broken? Still exploitable!	Information Disclosure Privacy Issue	Microsoft	Wladimir Palant (@WPalant)
Yes, fun browser extensions can have vulnerabilities too!	XSS Browser Extension Hacking PostMessage	Meow	Wladimir Palant (@WPalant)
Exploiting Bitdefender Antivirus: RCE from any website	RCE Information Disclosure	Bitdefender	Wladimir Palant (@WPalant)
Pwning Avast Secure Browser for fun and profit	RCE Command Injection	Avast	Wladimir Palant (@WPalant)
Kaspersky in the Middle – what could possibly go wrong?	Clickjacking Universal XSS MiTM	Kaspersky	Wladimir Palant (@WPalant)
Should you be concerned about LastPass uploading your passwords to its server?	Information Disclosure Logic Flaw	LastPass	Wladimir Palant (@WPalant)

Page 1 of 1