cross-site scripting – Noise https://noise.getoto.net The collective thoughts of the interwebz Mon, 07 Sep 2026 07:58:02 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.3 WRAITH – Browser Hooking and Blind XSS Page Mirroring https://noise.getoto.net/2026/09/07/wraith-browser-hooking-and-blind-xss-page-mirroring/ Mon, 07 Sep 2026 07:58:02 +0000 https://www.darknet.org.uk/?p=506132 Email Security Flaw Found in the Wild https://noise.getoto.net/2023/11/21/email-security-flaw-found-in-the-wild/ Tue, 21 Nov 2023 12:05:07 +0000 https://www.schneier.com/?p=68121 Google’s Threat Analysis Group announced a zero-day against the Zimbra Collaboration email server that has been used against governments around the world.

TAG has observed four different groups exploiting the same bug to steal email data, user credentials, and authentication tokens. Most of this activity occurred after the initial fix became public on Github. To ensure protection against these types of exploits, TAG urges users and organizations to keep software fully up-to-date and apply security updates as soon as they become available.

The vulnerability was discovered in June. It has been patched...

]]>