Port Swigger - Security Alert

Port Swigger

Deserialized web security roundup: Algolia API key leak, GitHub CVE reporting, scoring CVSS scores

Deserialized web security roundup: Algolia API key leak, GitHub CVE re...

2 days ago 1

Go SAML library vulnerable to authentication bypass

Go SAML library vulnerable to authentication bypass

2 days ago 1

Critical vulnerability allowed attackers to remotely unlock, control Hyundai, Genesis vehicles

Critical vulnerability allowed attackers to remotely unlock, control H...

3 days ago 1

Bug Bounty Radar // The latest bug bounty programs for December 2022

Bug Bounty Radar // The latest bug bounty programs for December 2022

3 days ago 4

Tailscale VPN nodes vulnerable to DNS rebinding, RCE

Tailscale VPN nodes vulnerable to DNS rebinding, RCE

4 days ago 4

Intel disputes seriousness of Data Centre Manager authentication flaw

Intel disputes seriousness of Data Centre Manager authentication flaw

5 days ago 2

Million-dollar bug bounties: The rise of record-breaking payouts

Million-dollar bug bounties: The rise of record-breaking payouts

5 days ago 2

How to become a penetration tester: Part 1 – your path into offensive security testing

How to become a penetration tester: Part 1 – your path into offensive ...

5 days ago 3

Vulnerability in AWS AppSync allowed unauthorized access to cloud resources

Vulnerability in AWS AppSync allowed unauthorized access to cloud reso...

1 week ago 4

Mastodon vulnerable to multiple system configuration problems

Mastodon vulnerable to multiple system configuration problems

1 week ago 4

Ibexa DXP patched for GraphQL password hash leak vulnerability

Ibexa DXP patched for GraphQL password hash leak vulnerability

2 weeks ago 6

HackerOne encourages customers to adopt standard policy to protect hackers from legal problems

HackerOne encourages customers to adopt standard policy to protect hac...

2 weeks ago 10

Google Roulette: Developer console trick can trigger XSS in Chromium browsers

Google Roulette: Developer console trick can trigger XSS in Chromium b...

2 weeks ago 8

F5 fixes high severity RCE bug in BIG-IP, BIG-IQ devices

F5 fixes high severity RCE bug in BIG-IP, BIG-IQ devices

2 weeks ago 9

Zendesk Explore flaws opened the door to account pillage

Zendesk Explore flaws opened the door to account pillage

2 weeks ago 8

Mastodon users vulnerable to password-stealing attacks

Mastodon users vulnerable to password-stealing attacks

2 weeks ago 8

All Day DevOps: Third of Log4j downloads still pull vulnerable version despite threat of supply chain attacks

All Day DevOps: Third of Log4j downloads still pull vulnerable version...

2 weeks ago 10

Prototype pollution project yields another Parse Server RCE

Prototype pollution project yields another Parse Server RCE

3 weeks ago 9

CSRF in Plesk API enabled privilege escalation

CSRF in Plesk API enabled privilege escalation

3 weeks ago 8

Google Pixel screen-lock hack earns researcher $70k

Google Pixel screen-lock hack earns researcher $70k

3 weeks ago 13

CSS injection flaw patched in Acronis cloud management console

CSS injection flaw patched in Acronis cloud management console

3 weeks ago 12

Passport-SAML auth bypass triggers fix of critical, upstream XMLDOM bug

Passport-SAML auth bypass triggers fix of critical, upstream XMLDOM bu...

3 weeks ago 16

Prototype pollution bug exposed Ember.js applications to XSS

Prototype pollution bug exposed Ember.js applications to XSS

3 weeks ago 12

Boffins rekindle one-time program cryptographic concept

Boffins rekindle one-time program cryptographic concept

1 month ago 14

Gatsby patches SSRF, XSS bugs in Cloud Image CDN

Gatsby patches SSRF, XSS bugs in Cloud Image CDN

1 month ago 15

Malicious proof-of-concepts are exposing GitHub users to malware and more

Malicious proof-of-concepts are exposing GitHub users to malware and m...

1 month ago 13

Urlscan.io API unwittingly leaks sensitive URLs, data

Urlscan.io API unwittingly leaks sensitive URLs, data

1 month ago 15

OpenSSL vulnerability downgraded to ‘high’ severity

OpenSSL vulnerability downgraded to ‘high’ severity

1 month ago 14

Bug Bounty Radar // The latest bug bounty programs for November 2022

Bug Bounty Radar // The latest bug bounty programs for November 2022

1 month ago 17

SQLite patches 22-year-old code execution, denial of service vulnerability

SQLite patches 22-year-old code execution, denial of service vulnerabi...

1 month ago 15

Upcoming ‘critical’ OpenSSL update prompts feverish speculation

Upcoming ‘critical’ OpenSSL update prompts feverish speculation

1 month ago 19

GitHub patches bug that could allow access to another user’s repo

GitHub patches bug that could allow access to another user’s repo

1 month ago 16

Jira Align flaws enabled malicious users to gain super admin privileges – and potentially worse

Jira Align flaws enabled malicious users to gain super admin privilege...

1 month ago 19

Melis Platform CMS patched for critical RCE flaw

Melis Platform CMS patched for critical RCE flaw

1 month ago 17

Critical authentication bug in Fortinet products actively exploited in the wild

Critical authentication bug in Fortinet products actively exploited in...

1 month ago 21

HyperSQL DataBase flaw leaves library vulnerable to RCE

HyperSQL DataBase flaw leaves library vulnerable to RCE

1 month ago 22

Failed Cobalt Strike fix with buried RCE exploit now patched

Failed Cobalt Strike fix with buried RCE exploit now patched

1 month ago 23

Microsoft Office Online Server open to SSRF-to-RCE exploit

Microsoft Office Online Server open to SSRF-to-RCE exploit

1 month ago 22

Security certification body (ISC)² defends ‘undemocratic’ bylaw changes

Security certification body (ISC)² defends ‘undemocratic’ bylaw change...

1 month ago 18

Apache Commons Text RCE: Resemblance to Log4Shell but exposure risk is ‘much lower’

Apache Commons Text RCE: Resemblance to Log4Shell but exposure risk is...

1 month ago 18

Researchers find 633% increase in cyber-attacks aimed at open source repositories

Researchers find 633% increase in cyber-attacks aimed at open source r...

1 month ago 17

‘We don’t teach developers how to write secure software’ – Linux Foundation’s David A Wheeler on reversing the CVE surge

‘We don’t teach developers how to write secure software’ – Linux Found...

1 month ago 20

Adobe patches critical Magento XSS that puts sites at takeover risk

Adobe patches critical Magento XSS that puts sites at takeover risk

1 month ago 18

GitLab patches RCE bug in GitHub import function

GitLab patches RCE bug in GitHub import function

1 month ago 19

Hidden DNS resolver insecurity creates widespread website hijack risk

Hidden DNS resolver insecurity creates widespread website hijack risk

1 month ago 23

Zimbra remote code execution vulnerability actively exploited in the wild

Zimbra remote code execution vulnerability actively exploited in the w...

1 month ago 20

Policy-as-code approach counters ‘cloud native’ security risks

Policy-as-code approach counters ‘cloud native’ security risks

1 month ago 20

The exploitability advisory: CISA’s VEX offers fresh take on tackling known vulnerabilities

The exploitability advisory: CISA’s VEX offers fresh take on tackling ...

1 month ago 24

PHP package manager component Packagist vulnerable to compromise

PHP package manager component Packagist vulnerable to compromise

1 month ago 23

Matrix address flaws that break message encryption assurances

Matrix address flaws that break message encryption assurances

2 months ago 19