Stored XSS Flaw in RustFS Console Leaks Admin S3 Credentials
A severe stored cross-site scripting (XSS) flaw in the RustFS Console lets attackers steal admin S3 credentials, enabling full account takeovers.
Published three days...
GitLab Patches Multiple Vulnerabilities Enabling DoS and Cross-Site Scripting Attacks
GitLab, a popular platform for code collaboration, just rolled out urgent security patches for its Community Edition (CE) and Enterprise Edition (EE).
These fixes...
Exploiting XSS in Meta Conversion API for Zero-Click Account Takeover
Security researchers have disclosed two critical cross-site scripting (XSS) vulnerabilities in Meta's Conversions API Gateway that could enable attackers to hijack Facebook accounts on...
Cisco Desk, IP, and Video Phones Vulnerable to Remote DoS and XSS Attacks
Cisco has released a security advisory detailing multiple vulnerabilities in several of its enterprise phone series, which could expose organizations to remote attacks.
The...
Researchers Bypass WAFs to Deliver XSS Payloads Using Parameter Pollution
Security researchers at Ethiack have discovered a sophisticated method to bypass Web Application Firewalls (WAFs) using HTTP Parameter Pollution techniques, successfully circumventing 70.6% of...