RCE, Information Disclosure and XSS Flaws Found in PayPal Partner Program – Video

RCE, Information Disclosure and XSS Flaws Found in PayPal Partner Program – Video

Security researcher Behrouz Sadeghipour is the one who reported the vulnerabilities

DDOS Attack Enabled by Persistent XSS Vulnerability on Top Video Content Provider’s Site

DDOS Attack Enabled by Persistent XSS Vulnerability on Top Video Content Provider’s Site

Security researchers from Incapsula have analyzed an interesting attack

XSS Vulnerability Found in WikiLeaks’ Internal Search Engine

XSS Vulnerability Found in WikiLeaks’ Internal Search Engine

The security hole was addressed within hours after being discovered

sIFR Vulnerability Impacts Adobe, BlackBerry, Visa, Amazon and Other Sites – Video

sIFR Vulnerability Impacts Adobe, BlackBerry, Visa, Amazon and Other Sites – Video

Adobe has fixed the issue and added to researcher's name to the "acknowledgements" page

World Economic Forum’s Website Plagued by XSS and Other Security Issues

World Economic Forum’s Website Plagued by XSS and Other Security Issues

The email addresses of thousands of people could have been obtained by spammers

Security Patches Released for IP.Gallery 4.2.1 and 5.0.5

Security Patches Released for IP.Gallery 4.2.1 and 5.0.5

An XSS vulnerability related to SWF file uploads has been fixed

3 Vulnerabilities Fixed in Elgg 1.8.17

3 Vulnerabilities Fixed in Elgg 1.8.17

Users are advised to update their installations as soon as possible

4 Vulnerabilities Fixed in MyBB 1.6.12

4 Vulnerabilities Fixed in MyBB 1.6.12

XSS and SQL Injection security holes have been addressed

XSS Vulnerabilities Patched in IP.Board 3.3.x and 3.4.x

XSS Vulnerabilities Patched in IP.Board 3.3.x and 3.4.x

Users are advised by IPS to update their installations

Important Security Fixes Included in Ruby on Rails 4.0.2 and 3.2.16

Important Security Fixes Included in Ruby on Rails 4.0.2 and 3.2.16

A total of five vulnerabilities have been identified

Google Password Recovery Flaws That Allowed Hackers to Hijack Accounts Fixed

Google Password Recovery Flaws That Allowed Hackers to Hijack Accounts Fixed

Three types of vulnerabilities could have been exploited for spear phishing attacks

Search Hints on HealthCare.gov Show a Lot of People Are Trying to Hack the Site

Search Hints on HealthCare.gov Show a Lot of People Are Trying to Hack the Site

SQL and HTML commands are shown as suggestions in the search box

Vulnerabilities in RunKeeper Allowed Cybercriminals to Run XSS Worm

Vulnerabilities in RunKeeper Allowed Cybercriminals to Run XSS Worm

Portuguese security researcher David Sopas is the one who found the flaws

Reflected and Stored XSS Flaws Found in D-Link 2760N Routers

Reflected and Stored XSS Flaws Found in D-Link 2760N Routers

The company was notified on several occasions, but the vulnerabilities remain unfixed

Anonymous Hackers Use XSS Attack to Deface Website of Singapore PM

Anonymous Hackers Use XSS Attack to Deface Website of Singapore PM

A similar vulnerability was exploited against the presidency's website

Researcher Rewarded with $5,000 / €3,700 for Stored XSS in Gmail for iOS

Researcher Rewarded with $5,000 / €3,700 for Stored XSS in Gmail for iOS

Roy Castillo found the issue in the “mail attachment” feature

Yahoo Explains How the T-Shirts for Vulnerabilities Program Came to Be

Yahoo Explains How the T-Shirts for Vulnerabilities Program Came to Be

It was an informal thank you from a Yahoo employee, not a company policy

 
Want more? Browse: