Singapore Hacker Jailed for XSS on Prime Minister’s Office Website

Singapore Hacker Jailed for XSS on Prime Minister’s Office Website

Website was not affected in any way by the incident

WordPress Releases Security Update Against Critical XSS Vulnerability

WordPress Releases Security Update Against Critical XSS Vulnerability

Bad comments could lead to OS level server access

Test Tool for Web App Security Scanners Released by Google

Test Tool for Web App Security Scanners Released by Google

Firing Range includes mostly XSS vulnerabilities

XSS Risk Found in Links to New York Times Articles Prior to 2013

XSS Risk Found in Links to New York Times Articles Prior to 2013

Pages needed to meet a condition to be vulnerable

XSS Flaw Fixed in Barracuda Spam and Virus Firewall

XSS Flaw Fixed in Barracuda Spam and Virus Firewall

Exploiting the vulnerability can be done after logging into the web app

Hackers Trick Facebook Users into Self Cross-Site Scripting (XSS) Scam

Hackers Trick Facebook Users into Self Cross-Site Scripting (XSS) Scam

Users are asked to paste code in the browser to hack into a Facebook profile

Critical Vulnerabilities Fixed in Drupal 7.29 and 6.32

Critical Vulnerabilities Fixed in Drupal 7.29 and 6.32

Potential attackers could gain access to sensitive data

Yesterday’s TweetDeck Activity Disrupted by Heart Symbol [CNN]

Yesterday’s TweetDeck Activity Disrupted by Heart Symbol [CNN]

19-year-old Austrian found the XSS flaw by accident

TweetDeck Shut Down Due to XSS Vulnerability

TweetDeck Shut Down Due to XSS Vulnerability

Flaw leads to massive retweeting and irritating pop-ups

Reflected XSS Vulnerability Patched in Cisco AsyncOS

Reflected XSS Vulnerability Patched in Cisco AsyncOS

The security flaw affects three Cisco security appliances

Opera 12.01 Fixes Recurring Critical Severity Flaw

Opera 12.01 Fixes Recurring Critical Severity Flaw

Three high-severity vulnerabilities have also been eliminated

Download NoScript 2.3.7

Download NoScript 2.3.7

Repairs compatibility problems and interference with other add-ons

NoScript 2.3.6 Available for Download

NoScript 2.3.6 Available for Download

Improves protection against XSS (cross-site scripting) and ClearClick

Download NoScript 2.3.4

Download NoScript 2.3.4

Fixes subtle bug which may lead to infinite loops in some cases

NoScript 2.3.2 Improves Protection Against Cross-Site Scripting (XSS)

NoScript 2.3.2 Improves Protection Against Cross-Site Scripting (XSS)

Improves HTML detection accuracy, adds event injection the checks for scriptless pages

phpMyAdmin 3.4.8 RC1 Available for Download

phpMyAdmin 3.4.8 RC1 Available for Download

The first release candidate in the 3.4.8 series brings bug fixes and security corrections

phpMyAdmin 3.4.6 Fixes Minor Problems

phpMyAdmin 3.4.6 Fixes Minor Problems

This latest version also fixes a couple of security updates

 
Want more? Browse: