🔐 aramido makes IT secure.

Further information

All blog articles on the subject of Cross Site Scripting (XSS)

Hannah Schneider

Published on 21.10.2021 in the category Web Application Security published.

The New OWASP Top 10 - 2021

The OWASP Top 10 - 2021 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) DDoS OWASP Secure Coding SQL Injections Threat Modeling Web Application

Tristan Wagner

Published on 09.07.2020 in the category Security Advisories published.

Two Vulnerabilities in TeamBeam

aramido was able to identify two vulnerabilities in the data exchange platform TeamBeam. (read more)

Cross Site Scripting (XSS) Secure Coding Web Application

Benjamin Pokrant

Published on 06.05.2020 in the category Security Advisories published.

HTML Injection Vulnerability in WordPress Plugin WPForms

A security vulnerability in the WordPress plugin WPForms allowed attacks via HTML injection. How does this vulnerability affect systems and how can it be closed? (read more)

Cross Site Scripting (XSS) Secure Coding Security Concepts Spear Phishing Web Application WordPress Zero-Day-Exploits

Andreas Sperber

Published on 09.07.2019 in the category Communication Security published.

HTTP Security Headers Protect Your Visitors

Security headers protect website users and expand the defense-in-depth strategy. We demonstrate how they are implemented and their specific impact. (read more)

Click-Jacking Cross Site Scripting (XSS) HTTP Strict Transport Security (HSTS) JavaScript Man-In-The-Middle (MIM) Secure Coding Social Engineering SSL-Stripping Encryption

Andreas Sperber

Published on 21.11.2018 in the category Web Application Security published.

What are the OWASP Top 10 - 2017?

The OWASP Top 10 - 2017 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Best Practice Guide Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening Secure Coding Session Management SQL Injections Web Application

Elisabeth Apicella

Published on 07.11.2018 in the category Security Advisories published.

Reflected HTML Injection in CRM Software

A security vulnerability in the web software CRM+ by Brainformatik allowed attacks via HTML injection. Who is affected and what should you do now? (read more)

CRM+ Cross Site Scripting (XSS) Defacement Secure Coding Security Concepts

Regina Okun

Published on 18.09.2018 in the category Web Application Security published.

PHP Security Podcasts on phpdevradio.de

In PHPDevRadio "The Podcast for PHP", Michael Döhler (PHPDevRadio Crew) and Andreas Sperber (aramido) talk about current PHP security topics (read more)

Regina Okun

Published on 19.06.2018 in the category aramido published.

PHP Secure Coding Training: aramido launches external seminar offerings

Following the great success of the PHP Secure Coding training as an in-house seminar, the training can now also be booked as an external seminar. (read more)

Authentication Authorization • Access Control Brute Force Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Hardening Cryptology • Cryptography Live Hacking Secure Coding Session Hijacking Session Management Training Workshop Event

Andreas Sperber

Published on 01.01.2018 in the category Web Application Security published.

Five good resolutions for secure IT systems in 2018

At the latest after a serious hacking incident, everyone becomes active. To prevent this from happening, aramido presents five security measures for web applications. (read more)

Apache Backup • Data Security Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening HTTP Strict Transport Security (HSTS) Incident Response Joomla Man-In-The-Middle (MIM) Secure Coding SQL Injections SSL-Stripping Web Application Zero-Day-Exploits

Armin Harbrecht

Published on 03.03.2017 in the category Security Advisories published.

Multiple Vulnerabilities in the New CyberForum Portal

aramido found several security vulnerabilities on the CyberForum website. They show the typical dangers of websites with user-generated content. (read more)

Authorization • Access Control Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Defacement Secure Coding Typo3 Web Application

Andreas Sperber

Published on 15.12.2016 in the category Web Application Security published.

Live-Hacking a Symfony application

Andreas Sperber from aramido is a guest at SensioLabs in Cologne on Dec 21, 2016. He hacks a Symfony app and shows what can be done for IT security. (read more)

Cross Site Scripting (XSS) DDoS Defacement Live Hacking PHP Secure Coding Shopware SQL Injections SSL-Stripping Event Web Application

Andreas Sperber

Published on 01.08.2016 in the category Penetration Testing published.

What is a Penetration Test?

IT is an integral part of our lives. Hackers exploit vulnerabilities to profit. Penetration tests improve IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) Authentication BSI Cross Site Scripting (XSS) Data Theft DDoS Hardening IT Risk Management PHP Social Engineering Spear Phishing SQL Injections Web Application Economic Espionage Zero-Day-Exploits