Server-Side Template Injections Explained
Source link
Related Articles
All Mix →
Closing the Loop: Practical Attacks and Defences for GraphQL APIs | by Eugene Lim | CSG @ GovTech
GraphQL is a modern query language for Application Programming Interfaces (APIs). Supported by Facebook and the GraphQL Foundation, GraphQL grew quickly and has entered the…
JNDI Injection Remote Code Execution via Path Manipulation in MemoryUserDatabaseFactory
In this blog post, I’m going to describe a relative new vector to achieve remote code execution via a JNDI Injection that I found independently…
OWASP TOP 10: Broken Authentication
Table of Contents Description Prevalence Potential impact Exploitability Well-known events How to discover How Detectify can help Example of a vulnerable application Remediation Read more…
Ethical Hackers and Bug Bounty Programs
Table of Contents What Are the Challenges? Automation Professional Resources Speed How Do Ethical Hackers Address Security Challenges? 1. Secure Business Development and Growth…
Securing your Workspaces from a Bot Uprising
Table of Contents Slack Apps and the App Directory Securing Slack Apps: Now Securing Slack Apps: Future Options Q&A Real TalkOne thing I appreciated about…
How ethical hacker Frans Rosén deleted your Apple Shortcuts via CloudKit
Table of Contents Security misconfigurations found in Cloudkit Understanding Cloudkit The bugs found in CloudKit Accidentally taking down Shortcuts All bugs were responsibly disclosed Short…