NCSC Netherlands چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۴۸

NCSC-2026-0483 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiSandbox

Fortinet heeft een kwetsbaarheid verholpen in meerdere versies van FortiSandbox. De kwetsbaarheid betreft een Cross-Site Scripting (XSS)-probleem als gevolg van onvoldoende neutralisatie van invoer tijdens het genereren van webpagina's. Een niet-geauthenticeerde aanvaller kan misbruik maken van deze kwetsbaarheid door speciaal vervaardigde HTTP-verzoeken te versturen en via social engineering een gebruiker te verleid…

Programming & Languages App & Web Security

Read the full article at NCSC Netherlands Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

PortSwigger Research چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۵۶

Blind trust: stealing credentials through CSP

Content Security Policy is supposed to be the safety net that stops an HTML injection from turning into XSS. Usually it works. But sometimes it doesn't, because the policy allows-lists a domain that h

App & Web Security

Source

Cloudflare Blog چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۵۴

Choosing QuePaxa, an unusual consensus algorithm

Cloudflare is building an experimental consensus service using a never-before-deployed consensus algorithm, QuePaxa. In this post we explain how QuePaxa works and why we chose it.

Programming & Languages Web Development Software Engineering & Testing

Source

Cloudflare Blog چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۵۴

Choosing QuePaxa, an unusual consensus algorithm

Cloudflare is building an experimental consensus service using a never-before-deployed consensus algorithm, QuePaxa. In this post we explain how QuePaxa works and why we chose it.

Programming & Languages Web Development Software Engineering & Testing

Source

CERT-Bund چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۷:۵۲

[NEU] [hoch] Red Hat Enterprise Linux (python-jwcrypto, sos, hickory-resolver, libimobiledevice, gcc, python-oauthlib): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux (python-jwcrypto, sos, hickory-resolver, libimobiledevice, gcc, python-oauthlib) ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Berechtigungen zu erhöhen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.

Botnet & DDoS Programming & Languages Operating Systems

Source