#cross-site-scripting-xss

[ follow ]
#microsoft-exchange-server #zero-day-vulnerability #outlook-web-access-owa #cybersecurity-mitigation
Information security
fromSecurityWeek
5 hours ago

Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild

CVE-2026-42897 is a spoofing and XSS Exchange zero-day exploited via crafted emails, requiring immediate mitigations until a permanent patch is available.
Web development
fromMozilla Hacks - the Web developer blog
2 months ago

Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148 - Mozilla Hacks - the Web developer blog

Firefox 148 introduces the standardized Sanitizer API, enabling developers to safely remove malicious HTML and JavaScript from user-generated content before inserting it into the DOM.
Information security
fromThe Hacker News
3 months ago

Security Bug in StealC Malware Panel Let Researchers Spy on Threat Actor Operations

A cross-site scripting vulnerability in StealC's web control panel allowed extraction of system fingerprints, session monitoring, and cookie theft from the malware's infrastructure.
[ Load more ]