SecurityMetrics Blog

CVE-2020-5497 - MITREid Connect Cross-site Scripting

MITREid Connect Cross-site Scripting Vulnerability: CVE-2020-5497 Here's the situation: I was performing a penetration test that integrated with...
View Post

WiKID 2FA Enterprise Server Cross-Site Scripting

A stored and reflected cross-site scripting vulnerability, CVE-2019-17114, was identified on WiKID Systems 2FA Enterprise Server version...

WiKID Systems 2FA Enterprise Server CSRF

Multiple Cross-Site Request Forgery issues, CVE-2019-17118, were identified on WiKID Systems 2FA Enterprise Server through version 4.2.0-b2053....

Something from nothing; a Pentest story

While performing an external network layer penetration test I encountered a host that presented a single page that was essentially blank: <meta...

WiKID Systems 2FA Enterprise Server SQL injection

A SQL Injection vulnerability, CVE-2019-16917, was identified on WiKID Systems 2FA Enterprise Server through version 4.2.0-b2047. The uid and...

New (And Old) Apache Struts Flaw: CVE-2016-1000031

Apache Struts developers released another security announcement on November 5, 2018 -- two and a half months after their last big security...

SecurityMetrics Guide to PCI DSS Compliance

The SecurityMetrics Guide to PCI DSS Compliance will help you understand current PCI requirements and trends, so that you can better protect data...

2017 HIPAA Survey Results

How did organizations do with HIPAA compliance in 2017? Here are the results along with major takeaways to help you with your own HIPAA compliance efforts.

Do You Need a Web Application Penetration Test?

Do You Need a Web Application Penetration Test? It’s important for your business to find and remediate any vulnerabilities your web applications...

What is Network Penetration Testing?

What is network penetration testing? PCI DSS Requirement 11 calls for regular vulnerability scanning and penetration testing. Naturally,...

PCI Requirement 11: Vulnerability Scans and Penetration Tests

PCI Requirement 11 Vulnerability Scans: A vulnerability scan is an automated, high-level test that looks for and reports potential...

Are You Ready for PCI DSS 3.2?

Are You Ready for PCI DSS 3.2?

How Much Does a Pentest Cost?

How Much Does a Pentest Cost? Your company may have the technology in place to prevent data theft, but is it enough? How do you prove it? The most...

SAQ D: What's Required for Service Providers

SAQ D: What's Required for Service Providers. If you are a service provider who stores credit card data, PCI SAQ D likely applies to you. Service...

PCI DSS 3.2 & 3.2.1 New PCI Requirements for Service...

PIC DSS 3.2 and 3.2.1 Requirements for Service Providers: What You Should Know. The PCI Council released PCI DSS 3.2 in April 2016, which...

Need help securing your business?

Request a quote!

We are excited to work with you.

*Required

Thank you!

Your request has been submitted.