While the issue was really just a vanilla XSS, the surprising thing was that it was in a product that has been out for 6 years and hasn't been found or patched in that time. Lost amongst the numerous issues patched during this month's Patch Tuesday was a bug I found in Microsoft's ReportViewer 2005 Web Controls. NET 101 AlienVault AMF Android AntiXSS API AppSec April Fools ASP.NET Azure BlazeDS Blazentoo blockchain Boot bsideslv Burp Burpee casbah Certificates CHECK Cloud Code Review Conference Configuration Crypto CSAW CSI CSP CTF Custom Rules CVE defcon Deflate distributed applications Docker Dojo DotNetNuke EC2 ELB ethereum Event Validation Evil Maid evil twin Exploitation F5 fast infoset findbugs FIX Flex Fortify FTP Fuzzing GDSCon GWT GWTEnum GWTParse HTLM5 IIS Internet of Things iOS IronWasp ISSD Java JavaScript jetty karma logjam Metasploit Mobile Mobile Security MVC Nessus Network Network Security Tools Nimbus Nmap Node.js nslog oracle OSSIM OSX OWASP PadBuster Padding Oracle Pentesting plugin PMD privileged identities Rails random numbers Real World Remote Code Execution Response.Redirect RFC rogue access points saml SCA scala SDL Secure Coding Security SendSafely Server.Transfer shellshock Simulator Social Engineering SOURCE SPF Spring SQL Injection SqlBrute ssh SSL/TLS Static Analysis StockTrader Struts Threat Modeling tools Tracer Training Transformer.NET Umbraco vCenter VMWare vuln disclosure WCF Web 2.0 Web Security weblogic WebMatrix whitepaper Wifi Windows wireless xml XSS XSS worm xxe

Microsoft report viewer 10.0.0.0