Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way. An attacker can construct...
On 15 September, UBER acknowledged that it was responding to a “cybersecurity incident” and had contacted law authorities about the hack. An individual claiming...
Almost a year back in March 2020 shuffling our private invites stock to crash into a program worthy of our time and excitement. In...
Log4j is a logging framework for Java applications. It is a popular choice for developers looking for a simple and flexible logging solution. However,...
What is SQL Injection SQL injection is a web security vulnerability that allows an attacker to interfere with the queries that an application makes...
Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users have with a...
During our subtle technical experience of 7 years in Application security Industry we have often noticed that majority of the people who are into...
A penetration test, colloquially known as a pen test or ethical hacking, is an authorized simulated cyberattack on a computer system, performed to evaluate...
File sharing or simple file upload functionality is a widely used feature in web apps now a days. Any misconfiguration in this one feature...
Authentication issues are easy to understand however they can sometimes prove the most critical ones because of the fact that authentication is the core...
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific...
Due to the growth of technologies around the world and their effects to our privacy, data security has also been an issue. In terms...
Discover how Snapsec continuously monitors attack surfaces, automates vulnerability management, and streamlines application security in real-time.
![Security Simplified - Open Redirect [Server Side]](/assets/images/SecuritySimplified/or-2/0.png)
