KaffeNews: The Journal
Calendar
| Mon | Tue | Wed | Thu | Fri | Sat | Sun |
|---|---|---|---|---|---|---|
| « Mar | ||||||
| 1 | 2 | 3 | 4 | 5 | ||
| 6 | 7 | 8 | 9 | 10 | 11 | 12 |
| 13 | 14 | 15 | 16 | 17 | 18 | 19 |
| 20 | 21 | 22 | 23 | 24 | 25 | 26 |
| 27 | 28 | 29 | 30 | 31 | ||
Cross Site Request forgery (CSRF)
Cross Site Request forgery (CSRF) is a kind of Web Application attack which tries to exploit the trust the website has in user’s browser. In this attack the attacker sends a crafted URL to the victim and if the victim clicks on the URL he/she makes an action on a web application he/she is authenticated [...]
IS and OPS – Building the Bridge
I’ve tried writing this post several times and I was never happy with the result. Finally I sat back and realized that I was casting my net too wide. So I decided to break this post up into several parts. But first a quick overview of the concept I want to cover. I’ve been in [...]
Application Security and Bug Free Coding – The Infographic
(Click Image to enlarge) Infographic by Veracode Application Security
Joomscan: Tool for testing vulnerability in joomla
Joomscan is a tool for testing the vulnerability of websites that use free system to regulate online content ‘Joomla’. Given that the last update was in 2009, we decided to go further and help users to protect their Joomla sites. The last update was entered in the database 466 vulnerable components, today it is [...]
5 Most Common Web Application Vulnerabilities
Injection Examples of injection flaws are SQL, LDAP, HTTP header injection (cookies, requests), and OS command injections Attacks occur when untrusted data, such as a query, command or argument, is sent to an interpreter Vulnerable applications can be tricked into executing unintended commands or allowing the attacker to access, and modify, data Cross Site [...]
Most common safety violations
A while ago I came across an interesting recent report developed by the company by Verizon Business, which describes the most common safety problems that occurred during the past four years, causing considerable loss of information in enterprises. The report shows that: In 87% of cases, problems could have avoided problems through without basic safety [...]
Commonly exploited security weaknesses
Many attacks that an environment can suffer for the sole reason of being part of the World Web Wide, so it is necessary to centralize all efforts to improve strategic and proactive manner all aspects representing a potential point attack without neglecting those most trivial. Therefore, we have written a new paper that explains the [...]
