web-security
40 articles with this tag
INFO
MEDIUM
INFO
HIGH
HIGH
CRITICAL
MEDIUM
CRITICAL
HIGH
INFO
MEDIUM
MEDIUM
INFO
MEDIUM
HIGH
CRITICAL
MEDIUM
MEDIUM
MEDIUM
MEDIUM
CRITICAL
HIGH
HIGH
MEDIUM
MEDIUM
MEDIUM
CRITICAL
HIGH
MEDIUM
CRITICAL
MEDIUM
MEDIUM
CRITICAL
MEDIUM
MEDIUM
MEDIUM
MEDIUM
INFO
INFO
MEDIUM
WP Engine adds bot management to Global Edge Security
CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template
Fingerprint launches AI assistant detection tools
NCSC-2026-0171 [1.00] [H/M] Kwetsbaarheid verholpen in Starlette
Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment
Drupal: Critical SQL injection flaw now targeted in attacks
USN-8272-1: Smarty vulnerability
Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
BWH Hotels confirms cyberattack impacting customer data
Juice Shop v20.0.0 — a fresh squeeze of features, now with AI
[NEU] [mittel] Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting
[NEU] [mittel] Kyverno: Schwachstelle ermöglicht Cross-Site Scripting
CVE-2026-32207 Azure Machine Learning Notebook Spoofing Vulnerability
[webapps] Python-Multipart 0.0.22 - Path Traversal
Why are top university websites serving porn? It comes down to shoddy housekeeping.
Zimbra Collaboration Suite Information Disclosure Vulnerability
Cisco Webex Contact Center Cross-Site Scripting Vulnerability
Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities
Cisco Unity Connection Arbitrary File Download Vulnerabilities
Cisco Identity Services Engine Multiple Cross-Site Scripting Vulnerabilities
Critical nginx UI tool vulnerability opens web servers to full compromise
WordPress plugin suite hacked to push malware to thousands of sites
Medusa Ransomware Attack
European Commission admits attackers broke into public web systems, but says little else
[NEU] [mittel] Cisco Catalyst SD-WAN Manager: Schwachstelle ermöglicht Cross-Site Scripting
[NEU] [mittel] SolarWinds Platform: Mehrere Schwachstellen ermöglichen Cross-Site Scripting
Magento PolyShell – Unauthenticated File Upload to RCE in Magento (APSB25-94)
WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
Schneider Electric Modicon Controllers M241, M251, M258, and LMC058
Claude Code Security and Magecart: Getting the Threat Model Right
[NEU] [UNGEPATCHT] [mittel] NetBox: Schwachstelle ermöglicht Cross-Site Scripting
Multiple Cisco Contact Center Products Cross-Site Scripting Vulnerabilities
[NEU] [hoch] Siemens SIMATIC S7: Schwachstelle ermöglicht Cross-Site Scripting
[NEU] [mittel] Drupal Extensions: Mehrere Schwachstellen
Cisco Webex Services Cross-Site Scripting Vulnerability
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Services Cross-Site Scripting Vulnerability
Multiples vulnérabilités dans MISP (02 mars 2026)
Fedora 42 Update: vim-9.1.1706-1.fc42 - package-announce - Fedora mailing-lists
Battling bots face off in cybersecurity arena
Dark Patterns Undermine Security One Click at a Time