Name	SBA Research Cookie
Provider	SBA Research
Purpose	Saves the settings of the visitors selected in the cookie box.
Cookie name	sba-research-cookie
Cookie runtime	1 year

Name	YouTube
Provider	YouTube
Purpose	Used to unblock YouTube content.
Privacy policy	https://policies.google.com/privacy
Host(s)	google.com
Cookie name	NID
Cookie runtime	6 months

Name	Vimeo
Provider	Vimeo
Purpose	Used to unblock Vimeo content.
Privacy policy	https://vimeo.com/privacy
Host(s)	player.vimeo.com
Cookie name	vuid
Cookie runtime	2 years

Martina Lindorfer receives Hedy Lamarr Award

November 7, 2019

Martina Lindorfer has been awarded the Hedy Lamarr price for her research in the field of automatic malware detection. As a professor at TU Wien she hopes to inspire girls to pursue a career in the field of IT Security. The city of Vienna awards women in the area of… Read More

Rudolf Mayer @ Security Research Event 2019, Helsinki

November 6, 2019

Rudolf Mayer is representing the EU H2020 project FeatureCloud and SBA Research at the Security Research Event 2019 in Helsinki, Finland, co-organized by the European Commission and the Ministry of the Interior in Finland as a side event of Finland’s Presidency of the Council of the European Union (https://www.sre2019.eu). Read More

SBA Research @ Digital Days Vienna

November 5, 2019

New Technologies, new companies and new challenges in the digital world. At the DiDays SBA Research highlights the importance of a holistic security approach and the imminent role of security in a world of digitalization. Explaining interested children and visitors the role of IT, logical thinking and the necessity of… Read More

Die Barbara Karlich Show: Achtung! So werden wir ausspioniert!

October 31, 2019

Edgar Weippl was invited as a guest at the Barbara Karlich Show, talking about security & privacy! https://buff.ly/2orx8H9 (Talk Edgar Weippl ~30 minutes)… Read More

SBA places 15th out of +900 at Hack.lu 2019

October 29, 2019

Andreas Boll and Tobias Fink (WE_OWN_YOU) secured the third place (local) and 15th place (overall) at the hack.lu.CTF. Many thanks to the CTF team and most importantly the CTF LVA students from TU Wien. Hack.lu is an open convention/conference where people can discuss about computer security, privacy, information technology… Read More

Tomasz Miksa chaired the DMP Common Standards WG session at the 14th RDA Plenary in Helsinki

October 29, 2019

Research Data Alliance 14th Plenary in Finland brings together data experts in research, industry and policy-making from all around the world and from all disciplines under the theme Data Makes the Difference. Tomasz Miksa chaired a session of the DMP Common Standards working group. He… Read More

Stefan Jakoubi introduces strategies for technical and organisational protection of trade secrets

October 24, 2019

Stefan Jakoubi gives a talk at the annual IT-LAW.AT symposium on November 28, 2019. This year´s event will circle around trade secrets vs. transparency, security, espionage and GDPR. Read more

SBA Security Advisory – WordPress Plugin – All in One SEO Pack – Stored XSS (CVE-2019-16520)

October 23, 2019

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement. We recommend to update the all-in-one-seo-pack plugin to version 3.2.7 or later. For further details, see the full security advisory. Read More

SBA Security Advisory – WordPress Plugin – Broken Link Checker – Reflected XSS (CVE-2019-16521)

October 23, 2019

The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of an HTTP GET parameter into HTML. The filter function on the page listing all detected broken links can be exploited by providing an XSS payload in the s_filter GET parameter in a filter_id=search request. NOTE: this is an end-of-life product. Read More

SBA Security Advisory – WordPress Plugin – EU Cookie Law (GDPR) – Stored XSS (CVE-2019-16522)

October 23, 2019

The eu-cookie-law plugin through 3.0.6 for WordPress (aka EU Cookie Law (GDPR)) is susceptible to Stored XSS due to improper encoding of several configuration options in the admin area and the displayed cookie consent message. This affects Font Color, Background Color, and the Disable Cookie text. An attacker with high privileges can attack other users. Read More

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

Martina Lindorfer receives Hedy Lamarr Award

Rudolf Mayer @ Security Research Event 2019, Helsinki

SBA Research @ Digital Days Vienna

Die Barbara Karlich Show: Achtung! So werden wir ausspioniert!

SBA places 15th out of +900 at Hack.lu 2019

Tomasz Miksa chaired the DMP Common Standards WG session at the 14th RDA Plenary in Helsinki

Stefan Jakoubi introduces strategies for technical and organisational protection of trade secrets

SBA Security Advisory – WordPress Plugin – All in One SEO Pack – Stored XSS (CVE-2019-16520)

SBA Security Advisory – WordPress Plugin – Broken Link Checker – Reflected XSS (CVE-2019-16521)

SBA Security Advisory – WordPress Plugin – EU Cookie Law (GDPR) – Stored XSS (CVE-2019-16522)

SBA Newsletter

Upcoming events @ SBA

SBA Research at a glance

Highlights of the past years:

Privacy settings

SBA Research is a research center for Information Security funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.

Upcoming Events:

Recent News:

SBA Newsletter

Highlights of the past years:

SBA Research is a research center for Information Security
funded partly by the national initiative for COMET Competence Centers for Excellent Technologies.