Vulnerabilities
Stop Server-Side Template Injection with Input Sandboxing
Template engines often execute code by default, meaning untrusted input becomes executable logic until you explicitly restrict the execution context.
Read moreweb security
Everything BlueTeam Insider has reported about web security: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
HTTP Request Smuggling Mistakes That Leave Your Server Open
Mismatched parsers between proxies and backends allow attackers to inject hidden requests that bypass security controls and access other users' data without detection.
Read more
Vulnerabilities
Server-Side Request Forgery: Risks and Protection for Small Businesses
Server-side request forgery lets attackers trick your server into accessing internal resources or external services without your permission.
Read more
Vulnerabilities
CSS Injection: PortSwigger Unveils Overlapping Fragment Method to Evade Token Limits and Exfiltrate Data
PortSwigger researchers demonstrate how overlapping CSS fragments bypass token limits to exfiltrate data via CSS injection attacks, a significant risk for web applications.
Read more
Vulnerabilities
Use-After-Free Vulnerabilities: How Memory Errors Become Hacks
A use-after-free error turns normal memory management into a backdoor by letting code read or write data that the system has already discarded.
Read more