Itas Security Team has found several security gaps on Open EDX. Open EDX is an online education system developed by Harvard and MIT in 2012. It is used by many international organizations, including Microsoft, IBM, Harvard University, Stanford University, and other organizations. During our security testing for clients using the ... Read More

Cross-Site Scripting (XSS) attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted web sites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a different end user. ... Read More

ITAS Team has just found out a Cross-Site Scripting vulnerability in Zeuscard CMS. ITAS Team recommend that any individual or company is using this CMS should note and fix as soon as posible. 1. Vulnerability information: – Vulnerability: Cross-Site Scripting – Vendor: http://www.zeuscart.com – Download link: http://zeuscart.com/download/ – Affected version: Zeuscart V4 – CVSS v3.0 ... Read More