Questions tagged [information-exposure]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
22 votes
6 answers
5k views

Backend database username and password revealed in JSP Page

Recently I came across a website and when clicking on one of hyperlinks it displayed a HTTP 500 error page as shown in the image, which indicated that it is using Java Server Pages and on line 23 the ...
user avatar
2 votes
3 answers
127 views

HttpResponse Headers Information Leakage on Server Error (Verbose Headers)

In the past I have dealt with security issues related to Default Service Banners/Verbose Headers/Information Leakage via HttpResponse Headers. These issues are quite common, and usually look ...
user avatar
2 votes
1 answer
97 views

Cookies VS localStorage (JavaScript Security)

I know that HTTP requests made by the site get the browser's localStorage for a site, and document.cookie is encrypted for HTTPs websites, but I'm still wondering the risk of storing sensitive ...
user avatar
1 vote
1 answer
127 views

Which information is disclosed to a merchant when paying online with a credit card?

Several sites require me to input far too many personal details in order to register. This now includes phone numbers, which they have zero legitimate uses for - they are never used after the initial ...
user avatar
32 votes
3 answers
6k views

Is it safe to share .git folder of a public repo?

Say I cloned a repo, then maybe worked on it a bit. Then I reverted/pushed all changes, so my friend has all the repo files. Is it safe for me to send him the .git folder? Is there any private ...
user avatar
  • 583
0 votes
1 answer
70 views

How do mobile apps share details with each other to show customized ads

My question is more towards how this is implemented. I mean do they expose apis to each other or store data at a common place to be accessed by others. Please excuse me if it seems too naive.
user avatar
  • 1,245
7 votes
1 answer
714 views

Does WhatsApp's link preview on the link messages leak information?

When we want to send a message that contains only a link - such as a question from the Stack Exchange network - WhatsApp displays information from the website as below: Does this leak information ...
user avatar
  • 5,389
2 votes
2 answers
155 views

Getting real machine information from a virtual machine

If a malicious software gets into a virtual machine, what is the most information of the actual machine it can obtain?
user avatar
  • 123
3 votes
0 answers
191 views

What is the Meow Attack and how can I guard my databases against it?

Recently, there has been some news articles about unsolicited attacks on unsecured public facing Elastic and Mongo databases. These are commonly being called "Meow" attacks, resulting in ...
user avatar
1 vote
1 answer
83 views

Autofilling sensitive information for publicly available form

We are in the process of designing an app which, simply put, will allow people to accept payments easily. The customer won't need an account and we'll be linking customer data (name, address, and ...
user avatar
  • 217
0 votes
0 answers
212 views

Does Asp.Net Core exposes too much information for required enums that were not supplied?

I have a simple code for an input model: public class MyClass { [Required] public MyEnum? Type { get; set; } } Now if I do not send Type as a part of json to the request, I get this error ...
user avatar