Search for a command to run...
Articles tagged with #owasp
What is API Abuse? API abuse refers to the act of wrong-handling of APIs, gaining unsanctioned access, and modifying the key functions so that APIs can be used for adversarial processes like raiding a server or overburdening a server. It’s performed ...
What is LaTex Injection? The "LaTeX Injection" vulnerability is a security issue affecting web applications that allow users to enter LaTeX-formatted content. If these applications do not properly validate or filter LaTeX content entered by users, we...
What is Deserialization Attack? Deserialization is the process of restoring this byte stream to a fully functional replica of the original object, in the exact state as when it was serialized. The website's logic can then interact with this deseriali...
What is LDAP Injection? LDAP injection arises when user-controllable data is copied in an unsafe way into an LDAP query that is performed by the application. If we as attackers can inject LDAP metacharacters into the query, then they can interfere wi...
What is NoSQL Injection? NoSQL databases provide looser consistency restrictions than traditional SQL databases. By requiring fewer relational constraints and consistency checks, NoSQL databases often offer performance and scaling benefits. Yet these...
What is Type Juggling? Type Juggling (also known as Type Confusion) vulnerabilities are a class of vulnerabilities wherein an object is initialized or accessed as the incorrect type, allowing us as attackers to potentially bypass authentication or un...
