10
votes
6answers
169 views
+50

What risk rating models are used for calculating risk scores of web vulnerabilities?

What risk rating methods, models, assessments or methodologies are used for calculating or estimating a risk score of vulnerabilities (for example, like described in the OWASP top 10) and which of ...
3
votes
2answers
284 views
+50

Is array injection a vulnerability and what is the proper term for it?

When I'm penetration testing I sometimes notice undesirable behaviour of a PHP script when I inject a single or multidimensional array using the HTTP GET parameters. Possible availability risk This ...
2
votes
1answer
40 views
+50

What is the definition for different access attributes in object access auditing?

Though there is documentation available about configuring Object Access auditing, there is no place where I have found any documents explaining the different attributes in Object Access Auditing. Can ...
4
votes
0answers
46 views
+50

Access-control-allow-origin: * with a bearer token

When testing a single page application, I've identified that the REST endpoints return CORS headers that allow cross-domain access: access-control-allow-credentials: true access-control-allow-methods:...
5
votes
2answers
3k views
+50

What is a good XSS vector without forward slashes and spaces?

I need an XSS vector that doesn't use forward slashes nor spaces. I've gone through lists of hundreds of vectors, but they usually have one of those two. The space gets URL encoded, and anything after ...