Here's another delicious Byte. Ucha Gobejishvili, a Georgian Security Researcher under the handle of longrifle0x, discovered two cross site scripting (XSS) vulnerabilities on the official website ...

The UPS.com XSS vulnerability has since been fixed based on BleepingComputer's tests. BleepingComputer has contacted UPS with questions about the attack but has not heard back at this time.

Cross-Site Scripting (XSS) attacks are often misunderstood as harmless glitches that display alerts in the browser, while in actuality they are one of the most powerful and malicious vulnerabilities ...