XSS

Serious flaws in Western Digital My Cloud NAS devices allow attackers to fully control them

Researchers discovered serious issues in Western Digital My Cloud NAS that can be exploited by attackers to gain root control…

9 years ago

WordPress 4.7.3 is out to fix 6 security issues, but CSRF flaw remains unpatched

WordPress 4.7.3 release is out to fix six security issues, but a CSRF vulnerability discovered in July 2016 remains unpatched.…

9 years ago

XSS flaws in Zscaler Cloud management software allow logged attackers to hack coworkers

Zscaler has fixed persistent XSS vulnerabilities affecting Zscaler Cloud management software that allow logged attackers to hack coworkers. Serious cross-site scripting…

9 years ago

Every website that uses jQuery Mobile, and has any open redirect is vulnerable to XSS

Every website that uses jQuery Mobile, and has any open redirect anywhere is vulnerable to cross-site scripting (XSS) attacks. The…

9 years ago

A flaw in the Yahoo Email service allowed hackers to access target’s emails

The Finnish security expert Jouko Pynnönen discovered a vulnerability in the Yahoo email service that allowed hackers to read anyone…

9 years ago

BT Wi-Fi extender, extends to XSS and password changing vulnerabilities

Following an investigation by Pen Test Partners, British Telecom (BT) has released a firmware upgrade for their popular range of…

9 years ago

How to hack Google FR by exploiting a cross-site scripting flaw

The security expert Issam Rabhi (@issam_rabhi) has discovered a cross-site scripting vulnerability in Google France. The giant already fixed it.…

9 years ago

Hacker Interviews – The hacker: zurael sTz

This is the first of a series of  “Hacker Interviews” that will aim to help us get a better understanding…

10 years ago

Facebook XSS could have allowed attackers to take over users’ accounts

A security researcher has discovered a serious XSS flaw that could have allowed attackers to take over users’ Facebook accounts.…

10 years ago

Flaw in Magento exposes millions of websites at risk of takeover

A stored cross-site scripting vulnerability in Magento exposes millions of e-commerce websites at risk of takeover, update your platform as…

10 years ago

This website uses cookies.