Collaborate Disseminate
Cybersecurity researchers discover a critical flaw in the popular Evernote Chrome extension that could have allowed hackers to hijack your browser and steal sensitive information from any website you accessed.
Evernote is a popular service that helps … Continue reading Critical Flaw Reported in Popular Evernote Extension for Chrome Users
More and more attacks taking advantage of a XSS and RCE bug in the popular plugin have cropped up in the wild. Continue reading Exploits for Social Warfare WordPress Plugin Reach Critical Mass
Drupal, the popular open-source content management system, has released security updates to address multiple “moderately critical” vulnerabilities in Drupal Core that could allow remote attackers to compromise the security of hundreds of thousands of w… Continue reading Drupal Releases Core CMS Updates to Patch Several Vulnerabilities
A researcher has discovered a high-severity bug in a popular PHP library used for creating PDFs. Continue reading Flaw in popular PDF creation library enabled remote code execution
Researchers have offered more detail on a recently patched vulnerability that would allow an attacker to take over a WordPress site. Continue reading WordPress 5.1.1 patches dangerous XSS vulnerability
Security researcher Brian Hyde was accepted into Synack Red Teams private bug bounty platform and discovered a Reflected XSS vulnerability in one of their programs. The difficulties he faced in exploiting this Cross-site Scripting (XSS) vulnerability, … Continue reading Transforming Self-XSS Into Exploitable XSS
A security researcher has discovered a severe vulnerability in the popular, open source event-driven platform StackStorm that could allow remote attackers to trick developers into unknowingly execute arbitrary commands on targeted services.
StackStorm… Continue reading Severe Flaw Disclosed In StackStorm DevOps Automation Software
A team of cybersecurity researchers from the University of New Haven yesterday released a video demonstrating how vulnerabilities that most programmers often underestimate could have allowed hackers to evade privacy and security of your virtual reality… Continue reading Hacking Virtual Reality – Researchers Exploit Popular Bigscreen VR App
LabKey Server version 18.3.0-61806.763, released on January 16, patches all three issues, so users should update as soon as possible. Continue reading LabKey Vulnerabilities Threaten Medical Research Data
The patches are part of Adobe’s second unscheduled update this month. Continue reading Adobe Issues Unscheduled Updates for Experience Manager Platform