Security Advisories

Responsible disclosure of security vulnerabilities.

Elisabeth Apicella

Published on 20.12.2018 published.

Security Advisory: Three Findings at prescreen.io and jobbase.io

As aramido discovered, the cloud-based applicant management software of the company Prescreen had several security deficiencies. (read more)

Authorization • Access Control Data Theft Security Concepts Web Application

Elisabeth Apicella

Published on 07.11.2018 published.

Reflected HTML Injection in CRM Software

A security vulnerability in the web software CRM+ by Brainformatik allowed attacks via HTML injection. Who is affected and what should you do now? (read more)

CRM+ Cross Site Scripting (XSS) Defacement Secure Coding Security Concepts

Armin Harbrecht

Published on 03.03.2017 published.

Multiple Vulnerabilities in the New CyberForum Portal

aramido found several security vulnerabilities on the CyberForum website. They show the typical dangers of websites with user-generated content. (read more)

Authorization • Access Control Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Defacement Secure Coding Typo3 Web Application

Armin Harbrecht

Published on 06.02.2017 published.

Security through Transparency – How We Disclose Security Vulnerabilities

The responsible disclosure of security vulnerabilities is a proven approach to making IT systems more secure for everyone. (read more)

Secure Coding Company Web Application Webserver Zero-Day-Exploits