Cross Site Scripting

Blog Archive Tag

The Exploit: Penetration Testing Insights From The Frontlines

Exploits

CVE-2022-25373: ManageEngine Support Center Plus Stored Cross-Site Scripting (XSS)
By Raxis Research Team Matt Dunn discovers another ManageEngine Cross-Site Scripting vulnerability, this one in the Support Center Plus application. July 6, 2022
Exploits

CVE-2022-24681: ManageEngine AD SelfService Plus Stored Cross-Site Scripting (XSS)
By Raxis Research Team Raxis’ Matt Dunn continues his prolific discovery of new CSS CVEs. This one affects ManageEngine AD SelfService Plus Stored Cross-Site Scripting. May 17, 2022
Exploits, How To, Injection Attacks, Web Apps

Hackers See Opportunity Where You See Only a Button
By Brad Herring In this post, Raxis VP Brad Herring explains how web proxy tools can turn even simple buttons and check-boxes into avenues for an attack. April 1, 2022
Exploits, How To

Cross-Site Scripting (XSS): Filter Evasion and Sideloading
By Raxis Research Team In this second in a series, learn how to perform Cross-Site Scripting (XSS) attacks such as filter evasion and sideloading content. November 12, 2021
How To, Security Recommendations

Introduction to Cross-Site Scripting
By Raxis Research Team This video covers the basics of cross-site scripting, including reflected, stored, and DOM-based XSS as well as remediation to protect against these attacks. October 29, 2021
Patching, Security Recommendations

Nagios XI Stored Cross-Site Scripting (XSS): CVE-2021-38156
By Raxis Research Team Nagios is open-source network and system monitoring software. Raxis’ Matt Dunn has discovered a cross-site scripting vulnerability that could leave users open to attack. September 17, 2021