SQL injections are among the long-standing vulnerabilities in web applications. Despite the widespread use of frameworks, ORMs and more secure data access mechanisms, they can still occur when user-controlled data directly influences the structure of a query executed by a…
It is common for a server to send requests to other systems. In certain situations, however, an attacker may manage to manipulate these requests: by altering certain details of the path or parameters, by targeting a different host, or even…
Allowing users to insert HTML content is a common feature in web applications. WYSIWYG editors, commenting systems, messaging services, CMSs and collaborative tools often need to allow the use of rich text whilst preventing the execution of arbitrary JavaScript code.…
Content Security Policy (CSP) is one of the main security mechanisms offered by browsers to limit the impact of client-side vulnerabilities. In theory, a well-designed CSP neutralises a large proportion of injection attacks; in practice, it is often weakened by…
File upload features are ubiquitous in modern applications. Profile photos, invoices, identity documents and media all rely on mechanisms capable of accepting content provided by users or external systems. Behind this standard feature, however, lies a particularly broad attack surface.…
RCE (Remote Code Execution) vulnerabilities are among the most dangerous security flaws affecting modern applications and infrastructure. Their ability to enable the remote execution of arbitrary code makes them a recurring entry point in some of the most high-profile cyberattacks.…
SQL injection (SQLi) is one of the best-known vulnerabilities in web applications. Yet it remains a relevant threat in modern environments. Although frameworks, ORMs and data access libraries have significantly reduced the number of manually constructed SQL queries, they have…
XSS (Cross-Site Scripting) vulnerabilities are among the longest-standing vulnerabilities in web applications. Depending on the context, an XSS vulnerability can lead to session hijacking, credential theft, account takeover, the exposure of sensitive data, or even the compromise of administration interfaces.…
