Tag: Web Security
Fake Cloudflare page on Indian IT agency site pushed terminal commands
A government-linked Indian IT portal served a fake Cloudflare check that tried to get visitors to run a copied command.
WordPress ships emergency fix for pre-auth XSS to RCE chain
WordPress ships an emergency fix for a pre-auth XSS chain that ends in PHP code execution.
Login page quirk lets attackers seize WordPress servers remotely
A pre-auth XSS chain that needs only a crafted username ends in PHP code execution on stock installs.
Adform tracker hack redirected crypto payments to attacker wallets
A poisoned JavaScript file served by ad tech firm Adform rewrote crypto wallet addresses on customer sites.