Collaborate Disseminate
Burp highlights DOM open redirection possible with code below. Could anyone explain if this is feasible? Many thanks!
var url = window.location.href;
url = url.replace(/(\?|\&)user_lang=[A-Za-z]{2}/, "");
window.location.href… Continue reading Simple DOM open Redirection quesiton
An elaborate set of redirections and hundreds of URLs make up a wide-ranging tech-support scam. Continue reading Facebook, News and XSS Underpin Complex Browser Locker Attack
The Qode Instagram Widget and Qode Twitter Feed both have bugs that could allow redirects to malicious sites. Continue reading Open Redirect Bug in Bridge Theme Plugin Opens Admins to Spearphishing
The popular Drupal content management system received fixes for five serious vulnerabilities that allow for remote code execution and could help hackers break into websites. Two of the patched vulnerabilities are rated critical. One is located in the … Continue reading Drupal Patches Critical Remote Code Execution Flaws
A bug in Google Maps has turned it into a better URL shortener for crooks than goo.gl Continue reading Google Maps open redirect flaw abused by scammers
Bots run by shady websites are creating thousands of phantom pages Continue reading How porn bots abuse government websites