mehaase

less info

network profile

361 reputation

110

bio	website	openfisma.org
	location	Washington, DC
	age	29
visits	member for	1 year, 2 months
	seen	May 1 at 22:42
stats	profile views	16

I work on OpenFISMA (http://www.openfisma.org).

summary answers questions tags badges favorites bounties reputation activity

10 Answers

votes activity newest

5	Where can I find a list of un-patched CVEs for a specific piece of software?
2	Is it safe to serve any user uploaded file under only white-listed MIME content types?
2	sslstrip vs. privoxy redirect rule on clients
1	If I include a Forgot Password service, then what's the point of using a password?
1	Scripting a search through php files for dangerous calls for manual review

view more

361 Reputation

+10	CVSS Temporal Data
+10	If I include a Forgot Password service, then what's the point of using a password?
+10	Is it safe to store and replay user-provided mime types?
+10	Is it safe to serve any user uploaded file under only white-listed MIME content types?

view more

4 Questions

votes activity newest

11	Is it safe to store and replay user-provided mime types?
2	CVSS Temporal Data
2	Tiger team versus red team?
1	Can Tamper Data (the plugin) modify multipart requests?

26 Tags

7 appsec × 6	2 xss × 2
5 known-vulnerabilities	2 virus
3 web-application × 4	2 ssl
3 file-upload × 3	2 url-redirection
3 php × 3	2 web-browser

view more

15 Accounts

	Stack Overflow	780 rep	612
	Personal Finance and Money	567 rep	110
	IT Security	361 rep	110
	Super User	310 rep	17
	Code Golf	223 rep	17

11 Badges

recent class name

Yearling	Student
Nice Question	Critic
Scholar	Revival
Commentator	Supporter
Editor	Teacher

view more

0 Active bounties

active offered earned

This user has no active bounties

29 Votes Cast

all time			by type
27	up		8	question
2	down		21	answer

view more