Security Advisories

Responsible disclosure of security vulnerabilities.

Benjamin Pokrant

Published on 06.05.2020 published.

HTML Injection Vulnerability in WordPress Plugin WPForms

A security vulnerability in the WordPress plugin WPForms allowed attacks via HTML injection. How does this vulnerability affect systems and how can it be closed? (read more)

Cross Site Scripting (XSS) Secure Coding Security Concepts Spear Phishing Web Application WordPress Zero-Day-Exploits

Jonas Lehmann

Published on 03.04.2020 published.

How can IT managers ensure a secure home office during the coronavirus pandemic?

A six-step guide for information security in the home office and tips for financial support. (read more)

IT Governance Employee Awareness Company WLAN

Elisabeth Apicella

Published on 20.12.2018 published.

Security Advisory: Three Findings at prescreen.io and jobbase.io

As aramido discovered, the cloud-based applicant management software of the company Prescreen had several security deficiencies. (read more)

Authorization • Access Control Data Theft Security Concepts Web Application

Elisabeth Apicella

Published on 07.11.2018 published.

Reflected HTML Injection in CRM Software

A security vulnerability in the web software CRM+ by Brainformatik allowed attacks via HTML injection. Who is affected and what should you do now? (read more)

CRM+ Cross Site Scripting (XSS) Defacement Secure Coding Security Concepts

Armin Harbrecht

Published on 03.03.2017 published.

Multiple Vulnerabilities in the New CyberForum Portal

aramido found several security vulnerabilities on the CyberForum website. They show the typical dangers of websites with user-generated content. (read more)

Authorization • Access Control Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Defacement Secure Coding Typo3 Web Application