Sunday, 3 May 2009

Security researcher Pierre Gardenat has recently discovered two critical cross-site scripting bugs on Barclays.com.

Sunday, 3 May 2009

Methodman from Team-Elite has discovered a few vulnerabilities on several McAfee websites. Malicious users can exploit these bugs to infect customers and site visitors with malware, adware and spyware. They can also conduct phishing attacks by redirecting McAfee customers to fake McAfee sites.

Thursday, 23 April 2009

Xylitol reported five critical cross-site scripting vulnerabilities affecting Sun Microsystems website.

Thursday, 23 April 2009

Security researcher Pierre Gardenat reported a new interesting vulnerability in Google's service Orkut. Malicious users can spread XSS worms on Orkut or steal authentication credentials from Google users who also use Orkut. *FIXED*

Thursday, 16 April 2009

According to methodman, the search feature for Symantec Connect page was vulnerable to XSS. Malicious people could exploit these XSS vulnerabilities to infect millions of Symantec users and site visitors with malware, adware and spyware.

Wednesday, 15 April 2009

Curt Monash on Slashdot wrote: "Twitter was hit Saturday by a worm that caused victims' accounts to tweet favorably about the StalkDaily website. Infection occurred when one went to the profile page of a compromised account, and was largely spread by the kind of follower spam more commonly used by multi-level marketers.

1 2 3 4 5 6 7 8 9 10 11 12 13