Skip to main content
Swashbuckler's user avatar
Swashbuckler's user avatar
Swashbuckler's user avatar
Swashbuckler
  • Member for 8 years, 3 months
  • Last seen more than a month ago
1 vote

SSH Server Configuration Best Practices?

1 vote

CVSS and chained vulnerabilities

1 vote

Can I trust that the Java CVE's contain only the affected versions?

0 votes

How to scan a list of RPM files for publicly declared (CVE) vulnerabilities?

1 vote

Could've previous owner installed tracking software on my phone, even if I changed the SIM card?

1 vote

Is the most recent version of ojdbc7 still vulnerable to CVE-2016-3506?

2 votes

Can importing an .ics file be dangerous?

1 vote
Accepted

Bootstrap 3.3.7 XSS

5 votes
Accepted

Can you exploit an application that imports a vulnerable library, but does not actually use the classes from the library?

0 votes
Accepted

How to rate CVSS when PR is low but UI of admin user is required

2 votes

Why do we need token authentication?

6 votes
Accepted

Is a cryptographically signing camera possible?

1 vote

Docker container which reads memory belonging to another container

3 votes
Accepted

How can a company tell if my password is similar to the previous 5 passwords?

0 votes

Is sending a cookie with a sessionid in every HTTP response considered a bad practice?

3 votes

What is the use of disabling detailed exception pages on open-sourced apps?

1 vote

Is this method of hashing passwords good? Node.js

3 votes

Would an Ubuntu server accessible from the internet be hacked within days?

1 vote
Accepted

How to report "cryptographic bad practice" to vendor?

0 votes

How to store login information on the user's device

0 votes

Could someone commit a social engineering "hack" on a credit card processor to get my credit card number?

1 vote

Are jQuery vulnerabilities exposed by the file being served from the server of by usage of the vulnerable code?

1 vote

Python Pickle Deserialisation attack

5 votes

Is AES-128-CBC broken?

10 votes
Accepted

Why is linux filesystem considered DAC and not MAC

4 votes
Accepted

openssl vs gpg for file based encryption? Pros vs cons for security?

7 votes
Accepted

AES-256 decryption after key destruction. Possible or not?

2 votes

PGP - 2048-bit key VS filesize of the exported key

1 vote

CVSS3.0 impact score and exploitability score

1 vote

Check uploaded python script for security issues before running it