Stored XSS That Allowed Hackers to Hijack Tumblr Blogs Still Unfixed

Stored XSS That Allowed Hackers to Hijack Tumblr Blogs Still Unfixed

Security researcher Janne Ahlberg explains how attackers can leverage this flaw

Hacker Sells Yahoo! Mail Zero-Day for $700 (€550) – Video

Hacker Sells Yahoo! Mail Zero-Day for $700 (€550) – Video

Cybercriminals can exploit the vulnerability to compromise user accounts

Microsoft Fixes DOM-Based XSS Flaw in Learning Site After Being Notified by Expert

Microsoft Fixes DOM-Based XSS Flaw in Learning Site After Being Notified by Expert

The vulnerability was discovered by independent security researcher Rafay Baloch

Joomla 3.0.2 and 2.5.8 Available for Download, Security Fixes Included

Joomla 3.0.2 and 2.5.8 Available for Download, Security Fixes Included

An XSS and a clickjacking vulnerability have been addressed

Experts Find DOM-Based XSS Vulnerability in Google.com

Experts Find DOM-Based XSS Vulnerability in Google.com

Minded Security researchers have found another flaw by using DOMinatorPro

Experts Find DOM XSS Flaw in “+1” Button of Google Plus - Video

Experts Find DOM XSS Flaw in “+1” Button of Google Plus - Video

The vulnerability was found with the aid of a tool called DOMinatorPro

Persistent XSS and SQL Injection Flaws on ESET Taiwan Website Fixed

Persistent XSS and SQL Injection Flaws on ESET Taiwan Website Fixed

The vulnerabilities have been identified by security researcher Rafay Baloch

Q3, 2012 Report: XSS Named the Most Common Attack Type in Europe and US

Q3, 2012 Report: XSS Named the Most Common Attack Type in Europe and US

SQL Injection, Directory Traversals and CSRF attacks are also highly prevalent

Sites of Indian Mobile Operators Idea, Tata and BSNL Contain Serious Vulnerabilities

Sites of Indian Mobile Operators Idea, Tata and BSNL Contain Serious Vulnerabilities

Security researcher Prashant Uniyal explains why these flaws are so dangerous

XSS Flaws Found in BigBang, AirWP, ZigZag and Convergence WordPress Themes

XSS Flaws Found in BigBang, AirWP, ZigZag and Convergence WordPress Themes

Around 6,000 websites are affected by the vulnerabilities

Persistent XSS Flaws on TopCoder.com Allow Hackers to Lower Ranks of Members (Updated)

Persistent XSS Flaws on TopCoder.com Allow Hackers to Lower Ranks of Members (Updated)

Three security researchers found vulnerabilities on the site of the programmer community

Security Researcher Finds XSS, Open Redirection Flaws in Adobe Website [Video]

Security Researcher Finds XSS, Open Redirection Flaws in Adobe Website [Video]

The expert has published a proof-of-concept video to demonstrate his findings

Researchers Identify Persistent XSS on CodeChef.com

Researchers Identify Persistent XSS on CodeChef.com

Fortunately, the site's owners rushed to address the issue, in secret

Expert Finds XSS Flaw on eBay After Bypassing “Filtering Mechanisms”

Expert Finds XSS Flaw on eBay After Bypassing “Filtering Mechanisms”

The company has listed researcher Rafay Baloch in its "hall of fame"

Microsoft Addresses XSS and HTML Injection Flaws on Websites [Video POC]

Microsoft Addresses XSS and HTML Injection Flaws on Websites [Video POC]

Security researcher Rafay Baloch is the one who identified the vulnerabilities

Symantec Fixes XSS Flaws on Three Subdomains After Being Alerted by Researcher

Symantec Fixes XSS Flaws on Three Subdomains After Being Alerted by Researcher

Prakhar Prasad explains why these types of vulnerabilities are dangerous

XSS Vulnerabilities Addressed by Microsoft’s September 2012 Updates

XSS Vulnerabilities Addressed by Microsoft’s September 2012 Updates

Only two bulletins have been released as part of this Patch Tuesday

 
Want more? Browse: