Security News

PHP flaws allowed God mode access to top smut site (The Register)
2016-07-25 00:01

Severe Swagger vulnerability compromises NodeJS, PHP, Java (ZDNet)
2016-06-23 14:42

PHP, Python still fail to spot revoked TLS certificates (Help Net Security)
2016-04-01 16:04

In 2012, a group of researchers demonstrated that SSL certificate validation is broken in many applications and libraries, and pointed out the root causes for that situation: badly designed APIs...

Bypass PHP safe mode by abusing SQLite3s FTS tokenizer (Reddit)
2016-01-20 17:41

Full Disclosure: CCA on CoreProc/crypto-guard and an Appeal to PHP Programmers (Reddit)
2016-01-16 01:00

Content-Security-Policy Builder (PHP) (Reddit)
2016-01-01 20:39

SeedSpring - A seeded, deterministic PRNG PHP 7 (Reddit)
2015-12-22 19:38

Jumping The Fence How Detecting Malicious PHP Files Isnt That Easy. (Reddit)
2015-12-22 18:38

86% of PHP-based apps contain at least one XSS vulnerability (Help Net Security)
2015-12-04 08:53

Four out of five applications written in PHP, Classic ASP and ColdFusion that were assessed by Veracode failed at least one of the OWASP Top 10. Given the volume of PHP applications developed for the ...

Infosec bods rate app languages; find Java 'king', put PHP in bin (The Register)
2015-12-04 07:52