Cross-Site Scripting

Google patches XSS hole in its Buzz social media platform

Angela Moscaritolo February 17, 2010

Google on Tuesday fixed a cross-site scripting (XSS) vulnerability in the "Google Buzz for mobile" website that could have allowed an attacker to hijack user's accounts.

Researcher demonstrates Pentagon XSS vulnerability

Dan Kaplan December 08, 2009

A cross-site scripting vulnerability affecting the Pentagon website is not a major security threat -- but it could turn into one, said a researcher who examined the bug.

Researcher finds "frighteningly bad" Adobe Flash flaw

Greg Masters November 13, 2009

A new point of entry has been discovered in Adobe Flash that allows attackers to infect any website which permits visitors to upload content, a researcher claims.

Study finds 64 percent of websites contain serious flaws

Greg Masters November 12, 2009

Web application vulnerabilities remains the primary avenue of attack for cybercriminals, according to a new report.

Reddit succumbs then cleans up from XSS attack

Dan Kaplan September 28, 2009

Reddit is the latest Web 2.0 site to be slowed by a cross-site scripting attack.

Twitter XSS vulnerability not yet fixed

Angela Moscaritolo August 26, 2009

Because of the bug, an attacker could potentially capture account credentials, redirect a user to any site, alter a user's tweets or followers, or send messages from a compromised account.

Adobe ColdFusion, JRun updated for critical issues

Angela Moscaritolo August 17, 2009

Vulnerabilities that affect Adobe's ColdFusion 8.0.1 (and earlier versions) and JRun 4.0 could result in user accounts or an affected system being compromised.