Web Security
-
Application Security
SSRF Became Critical When Servers Gained a Metadata Endpoint
A request forgery flaw that once leaked internal pages now reaches a link-local address that hands out cloud credentials.
Read More » -
Application Security
File Uploads Are Remote Code Execution Waiting for a Misconfiguration
Checking the extension proves nothing. What determines the risk is where the file lands and whether anything will interpret it.
Read More »