advisories

关于我 Twitter：@justinsteven 博客：https://www.justinsteven.com/ 安全通告 按时间倒序列出。点击任意标题即可阅读完整通告。 Gartner Peer Insights Widget postMessage DOM XSS 披露日期：2023-02-03 Gartner Peer Insights Widget 存在一个 DOM XSS 漏洞，可通过来自任何主机名包含 "gartner.com" 的站点（例如 https://gartner.com.attacker.com）发送的 postMessage 消息触发。这影响了 Black...

Syrian Electronic Army Hacks UK based Media Websites

Syrian Electronic Army SEA, a pro-hacker group supposed to be aligned with Syrian President Bashar al-Assad has again gain media attention by compromising a number of popular news websites and displayed a Thanksgiving popups informing people that they've been hacked. The Forbes, The Independent,...