Top 7 Companies Specializing in Product Discovery Phase in 2025

Finding the right partner is less about headcount and more about repeatable outcomes, which is why the profiles…...

No payment necessary: Fighting back against ransomware

Note: Read our latest comprehensive report on ransomware: Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene. Any IT professional who’s ever had an experience with malware knows how fast an intrusive attack can happen, and how difficult it can be to educate...

Zomato: Outdated MediaElement.js Reflected Cross-Site Scripting (XSS)

I took a quick look at the business-blog.zomato.com wordpress installation, and found that it was quite outdated. Version 4.2.4 as far as I could tell A pretty famous XSS attack exists for Wordpress versions below 4.5.2 that allows for reflected cross site scripting. More details can be found her...

Zomato: Reflected XSS on business-blog.zomato.com - Part I

Hi guys, I would like to report a reflected XSS on business-blog.zomato.com. 1. Open Chrome and Firefox latest versions 2. Open https://business-blog.zomato.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alert1 3. Payload is executed Check the attached screenshot. Solution...

Zomato: Remote File Upload Vulnerability in business-blog.zomato.com

hi https://business-blog.zomato.com installed an outdated MailPoet Plugin which vulnerable to Remote File Upload Vulnerability in WordPress MailPoet Plugin wysija-newsletters related article: https://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html...