cross Archives | CW Enterprises

High-Severity TinyMCE Cross-Site Scripting Flaw Fixed

13th August 2020Lindsey O Donnell

The cross-site scripting flaw could enable arbitrary code execution, information disclosure – and even account takeover. Source: Threat Post – Web Security [...]

Lazarus APT Group Uses Cross-platform Malware Framework to Launch Attack Against Corporate Entities

23rd July 2020GURUBARAN S

Lazarus APT group believed to be run by the North Korean government, the group know to be active since 2009. The group is [...]

North Korea's Lazarus Group Developing Cross-Platform Malware Framework

22nd July 2020Robert Lemos Contributing Writer

The APT group, known for its attack on Sony Pictures in 2014, has created an “advanced malware framework” that can launch and manage [...]

100,000 WordPress Sites Impacted with Cross-Site Scripting(XSS) Flaw

10th July 2020GURUBARAN S

KingComposer, a WordPress plugin found installed with over 100,000 WordPress sites found vulnerable to Reflected Cross-Site Scripting. The vulnerability was found by the [...]

U.N., UNICEF, Red Cross Under Ongoing Mobile Attack

25th October 2019Tara Seals

A smart mobile-first phishing effort uses valid certificates to sign fake Office 365 pages, and logs keystrokes in real time. Source: Threat [...]

Vuln: Squid CVE-2019-13345 Multiple Cross Site Scripting Vulnerabilities

19th July 2019CW Enterprises

Squid CVE-2019-13345 Multiple Cross Site Scripting Vulnerabilities Source: Security Focus – Vuln: Squid CVE-2019-13345 Multiple Cross Site Scripting Vulnerabilities [...]

Vuln: CKEditor CVE-2018-9861 Cross Site Scripting Vulnerability

18th July 2019CW Enterprises

CKEditor CVE-2018-9861 Cross Site Scripting Vulnerability Source: Security Focus – Vuln: CKEditor CVE-2018-9861 Cross Site Scripting Vulnerability [...]

Vuln: OWASP AntiSamy CVE-2017-14735 Cross Site Scripting Vulnerability

17th July 2019CW Enterprises

OWASP AntiSamy CVE-2017-14735 Cross Site Scripting Vulnerability Source: Security Focus – Vuln: OWASP AntiSamy CVE-2017-14735 Cross Site Scripting Vulnerability [...]

Vuln: Nagios XI CVE-2018-17147 Cross-Site Scripting Vulnerability

10th July 2019CW Enterprises

Nagios XI CVE-2018-17147 Cross-Site Scripting Vulnerability Source: Security Focus – Vuln: Nagios XI CVE-2018-17147 Cross-Site Scripting Vulnerability [...]

Vuln: SAP BusinessObjects Business Intelligence Platform CVE-2019-0326 Cross Site Scripting Vulnerability

9th July 2019CW Enterprises

SAP BusinessObjects Business Intelligence Platform CVE-2019-0326 Cross Site Scripting Vulnerability Source: Security Focus – Vuln: SAP BusinessObjects Business Intelligence Platform CVE-2019-0326 Cross [...]