Textpattern CMS 4.8.4 – ‘Comments’ Persistent Cross-Site Scripting (XSS)
from Exploit-DB.com RSS Feed https://ift.tt/308uxkI
via IFTTT
Category Archives: Cybersecurity
[webapps] Online Ordering System 1.0 – Arbitrary File Upload to Remote Code Execution
Online Ordering System 1.0 – Arbitrary File Upload to Remote Code Execution
from Exploit-DB.com RSS Feed https://ift.tt/3rgbRv7
via IFTTT
[webapps] e107 CMS 2.3.0 – CSRF
e107 CMS 2.3.0 – CSRF
from Exploit-DB.com RSS Feed https://ift.tt/3qgsaqs
via IFTTT
Another Chrome zero-day exploit – so get that update done!
It’s déjà vu all over again! New month, new Chrome zero-day bug being exploited in the wild.
from Naked Security https://ift.tt/2PxfzTn
via IFTTT
Personalized Scams
Cyber criminals now have a wealth of information on almost all of us. With so many organizations getting hacked, cyber criminals simply purchase databases with personal information on millions of people, then use that information to customize their attacks, making them far more realistic. Just because an urgent email has your home address, phone number, or birth date in it does not mean it is legitimate.
from SANS Institute Security Awareness Tip of the Day https://ift.tt/2MfsoyJ
via IFTTT
Intel: Paid Research Caught More Than 90% of Our Vulnerabilities
Internal research and external bug-bounty programs combined to discover the vast majority of reported security issues in the company’s software.
from Dark Reading: https://ift.tt/3bX0RMU
via IFTTT
More Details Emerge on the Microsoft Exchange Server Attacks
The attacks are more widespread than initially reported, researchers say, and a look at why the Microsoft Exchange Server zero-days patched this week are so dangerous.
from Dark Reading: https://ift.tt/3q7WPq8
via IFTTT
Okta to Buy Rival Auth0
The deal, valued at $6.5 billion, will bring together competitors in the identity management space.
from Dark Reading: https://ift.tt/3sSQYXD
via IFTTT
How (NOT?!) to jailbreak your iPhone
We’re sticking to our “patch early, peath often” mantra, although in this case it means you can’t jailbreak.
from Naked Security https://ift.tt/3uLZl97
via IFTTT
CISA to Federal Agencies: Immediately Patch or ‘Disconnect’ Microsoft Exchange Servers
The US Department of Homeland Security agency’s new emergency directive comes in the wake of major zero-day attacks on email servers revealed by Microsoft this week.
from Dark Reading: https://ift.tt/2O1OtTZ
via IFTTT
Pacosite's Blog 