9398 matches found
CVE-2021-28482
Microsoft Exchange Server Remote Code Execution Vulnerability...
New Book! The Best of TaoSecurity Blog, Volume 4
I've completed the TaoSecurity Blog book series. The new book is The Best of TaoSecurity Blog, Volume 4: Beyond the Blog with Articles, Testimony, and Scholarship. It's available now for Kindle, and I'm working on the print edition. I'm running a 50% off promo on Volumes 1-3 on Kindle through...
CVE-2021-30637
htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php...
CVE-2021-30637
htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php...
Cross site scripting
htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php...
CVE-2021-33766
creationtimestamp| type| source ---|---|--- 2021-04-13 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2021/04/april-2021-update-tuesday-packages-now-available/ 2021-08-30 20:48:52+00:00| seen| https://t.me/cibsecurity/28015 2021-08-30 21:16:05+00:00| seen| https://t.me/cKure/6874 2021-08-3...
CVE-2021-30637
CVE-2021-30637 affects htmly 2.8.0, allowing stored XSS via the blog title, Tagline, or Description submitted to config.html.php. The root cause is unescaped user input stored and later reflected, enabling script execution in affected pages. Public writeups and exploits exist (e.g., PacketStorm/E...
CVE-2021-30637
htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php...
5 #TrendTips to Implement Application Security
We’ve compiled 5 TrendTips to help you get started with bolstering your application security posture...
Premium Addons for Elementor < 4.2.8 - Contributor+ Stored Cross-Site Scripting (XSS)
The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting XSS by lower-privileged users such as contributors, all via a similar method. The “Testimonials” widget accepts a “premiumtestimonialpersonnamesize” parameter...
CVE-2021-30637: Improper Neutralization of Input During Web Page Generation
htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php...
PT-2021-18780
Name of the Vulnerable Software and Affected Versions htmly version 2.8.0 Description The issue allows stored XSS via the blog title, Tagline, or Description to config.html.php. This can be exploited to inject malicious scripts into the application. Recommendations For htmly version 2.8.0, as a...
Gambling, Streaming Traffic Up During Men's College Basketball Tourney
Gambling industry-related web traffic delivered by Akamai jumped 31% over the category average for all of Q4 2020 on March 31st...
Akamai Titans 2020: Celebrating Outstanding Achievements
To Akamai's Co-Founder Danny Lewin, calling someone a "Titan" was the highest praise he would give. Danny himself was a remarkably talented and hard-working leader whose heart, passion, and spirit still inspire us. Today, Danny's accolade is used to honor those exceptional people who are known fo...
Hackers Are Exploiting Discord Links to Serve Up Malware
Beware of links from platforms that got big during quarantine...
Friday Squid Blogging: 500-Million-Year-Old Cephalopod
The oldest known cephalopod -- the ancestor of all modern octopuses, squid, cuttlefish and nautiluses -- is 500 million years old. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26163)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 has a cross-site scripting vulnerability , the vulnerability stems from post editing via the post content field . An attacker can use this vulnerability to inject arbitrary Web script or HT...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26164)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5 cross-site scripting vulnerability , an attacker can /settings/profile of the signature field to exploit the vulnerability to inject arbitrary Web script or HTML...
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26119)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5.0 suffers from a cross-site scripting vulnerability. Attackers can use the /post/editing post header field to inject arbitrary Web script or HTML...
Threat Source Newsletter (April 1, 2021)
Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We hope you’re enjoying Cisco Live this week and only reading this after you’ve caught up on your sessions for the day. No April Fool’s jokes here thankfully — we are just excited to tell you that applications... This is only the...