Search for a command to run...
Articles tagged with #vulnerabilities
XXE Definition XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server fi...
Path traversal What is path traversal? Path traversal is also known as directory traversal. These vulnerabilities enable an attacker to read arbitrary files on the server that is running an applicatio
OS command injection What is command injection? Command injection is a vulnerability that allows an attacker to execute operating system (OS) commands on the server that is running an application. A s
OAuth 2.0 vulnerabilities Terminology (OAuth vs OIDC) OAuth 2.0 is an authorization framework. It delegates access to an app without sharing a password. Many products use OAuth to “log in”. That’s usu
HTTP Host header attacks What is the HTTP Host header? The HTTP Host header is a mandatory request header as of HTTP/1.1. It specifies the domain name that the client wants to access. For example, whe
Authentication Vulnerabilities Conceptually, authentication vulnerabilities are easy to understand. However, they are usually critical because of the clear relationship between authentication and secu