Description: When applications through detailed error messages or printstacktrace during the execution of a program then that application is considered to be vulnerable to system information leak. Impact: An adversary could take advantage of system […]
Description: Hardcoded password is nothing but a plaintext password used in the application source code as it is one of the easiest ways to use password for authentication as required to connect and communicate with […]
SSL is secure socket layer, also normalized as TLS known as Transport Layer Security and it is mainly used for secure transmission of data between the client and server and in this article we are […]
Description: If applications do not enforce Http Strict Transport Security then there is a chance that sensitive data could be transmitted in clear text and those having access to the network can sniff and steal […]
Cross site scripting Attacks (XSS) is a client side attack and it occurs if the applications doesn’t validate external input. There are 3 types of Cross site scripting attacks: Reflected Cross site scripting: In this, […]
Malicious File Upload Description: If applications having file upload feature do not check for permissible file extension file size file content etc then those applications are having malicious file upload vulnerability. Impact: The server or computer […]
Cross Site Request Forgery Description: It is also known as session riding or one click attack and sometimes pronounced as sea surf. If an application has this vulnerability then an adversary could take advantage of this weakness […]
Copyright © 2020 Gotowebsecurity