Security Recommendations

Get actionable cybersecurity advice from Raxis experts. Explore best practices, tips, and recommendations to strengthen your organization’s security.

the exploit blog logo
The Exploit: Penetration Testing Insights From The Frontlines

Articles Categorized as Security Recommendations

  • Nagios XI Stored Cross-Site Scripting (XSS): CVE-2021-38156

    Nagios XI Stored Cross-Site Scripting (XSS): CVE-2021-38156

    Nagios is open-source network and system monitoring software. Raxis’ Matt Dunn has discovered a cross-site scripting vulnerability that could leave users open to attack.
    Read More
  • Cookie Jar

    Keep Your Cookies in the Cookie Jar: HttpOnly and Secure Flags

    How can cookies be used against you? And how do you keep that from happening? Raxis’ Matt Dunn explains.
    Read More
  • Scottie in 2004 on Navarre Beach in the wake of the Hurricane Ivan

    Hurricane Ida: Limiting the Damage

    Lead penetration tester Scottie Cole is a Gulf Coast resident and former first responder. Read his tips for avoiding hackers and scams that can be as costly as a natural disaster.
    Read More
  • PRTG Network Monitor Stored Cross-Site Scripting Vulnerability (CVE-2021-29643)

    PRTG Network Monitor Stored Cross-Site Scripting Vulnerability (CVE-2021-29643)

    Raxis lead penetration tester Matt Dunn uncovers a new vulnerability in the PRTG Network Monitor (CVE-2021-29643). Read more here.
    Read More
  • Screaming person with smartphone

    Don’t Take the Smishbait

    Unwanted text messages are annoying, but some also hide malicious links. Here are some ways to avoid being “smished.”
    Read More
  • JavaScript Execution to Display User's Cookie in an Alert Box

    ManageEngine Applications Manager Stored Cross-Site Scripting Vulnerability (CVE-2021-31813)

    Raxis’ Matt Dunn has discovered another ManangeEngine cross-site scripting (XSS) vulnerability, this time in the Applications Manager product (CVE-2021-31813).
    Read More