CVE-2025-48996 Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint

HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls. An unauthenticated information disclosure vulnerability exists in the Penn State University deployment of the HAX content management system via the haxPsuUsage API endpoint, related to a flat...

childrens.pennstatehealth.org XSS vulnerability

Open Bug Bounty ID: OBB-674333 Description| Value ---|--- Affected Website:| childrens.pennstatehealth.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

hmc.pennstatehealth.org XSS vulnerability

Open Bug Bounty ID: OBB-674332 Description| Value ---|--- Affected Website:| hmc.pennstatehealth.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

worldcampus.psu.edu XSS vulnerability

Open Bug Bounty ID: OBB-639659 Description| Value ---|--- Affected Website:| worldcampus.psu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Penn State Offline Following Advanced Two-Year Cyberattack

Penn State University President Eric J. Barron announced Friday that the university disconnected its networks from the public Internet after sustaining an intrusion into the College of Engineering that had lasted longer than two years. It will be a matter of days before Penn State brings its...

Bruce Schneier and the Mirage of Security

Bruce Schneier has been writing, talking and thinking about security for a long time, and in this talk from the TEDxPSU conference sponsored by Penn State, Schneier discusses the realities and the mirages of security and what they mean for real people...

Algorithm Stops Local Scanning Worms

Researchers at Penn State University have developed an algorithm that defends against the spread of local scanning worms that search for hosts in “local” spaces within networks or sub-networks. This strategy allows them access to hosts that are clustered, which means once they infect one host, th...