Community Blog

Get to know more about Cross-Site Scripting

February 1, 2012

What is a Cross-site Scripting attack? The so-called Cross-site scripting (XSS) consists of a vulnerability caused by failure in the validation of user’s input parameters within the web application towards the output HTML document. This attack allows HTML code to be inserted into target user’s browser on an arbitrary way. Technically, this problem occurs when […]

N-Stalker build 116 is available for software update

November 9, 2011

N-Stalker’s engineering team has just released build 116 containing improvements and bugfixes for N-Stalker Web Application Security Scanner 2012. This release includes: New command-line mode including a monitor console to follow up your scan session; New malware signature checks to detect compromised webservers; Added webserver infrastructure security analysis for manual mode; Performance enhancements Bugfixes Take […]

Find out if you might be a victim of the JBoss worm

November 9, 2011

Since the end of October there are several rumors of a new kind of worm targeting unpatched JBoss servers. These malicious scripts are attacking an old vulnerability that is described in the CVE-2010-0738 as a misconfiguration vulnerability, its default installation would allow remote attackers to invoke the administration console and deploy any arbitrary java program to […]

« Older Entries   Newer Entries »