Insecure deserialization leading to remote code execution
A sample analysis of how deserializing untrusted data can escalate to remote code execution, with request/response evidence, detection, and remediation.
CyberSecFix
Vulnerabilities
Vulnerability write-ups and root-cause analysis.
Authentication bypass via inconsistent path normalization
A walkthrough of how mismatched path handling between a proxy and an application can bypass authentication controls, and how to prevent it.
Server-side request forgery through user-configurable webhooks
Webhook features let users tell your server where to send requests, a natural home for SSRF. How the flaw arises and how to constrain outbound requests.