RJAX (Reverse aJAX) lets the web server push data to the browser. RJAX maintains an open connection between the browser and the server using an applet in the client page. The server can execute javascript commands directly on the client.
There are no reported vulnerabilities