Sreeraj's user avatar
Sreeraj's user avatar
Sreeraj's user avatar
Sreeraj
  • Member for 7 years, 11 months
  • Last seen more than a week ago
  • India
45 votes
3 answers
9k views

Does a buffer overflow vulnerability always mean a code execution vulnerability?

32 votes
3 answers
45k views

Why doesn't the TLS protocol work without the SSLv3 ciphersuites?

9 votes
2 answers
1k views

Are machines patched against WannaCry protected against the ongoing Petya attacks?

4 votes
1 answer
3k views

Reporting an IP address

3 votes
1 answer
401 views

Wildcard DNS entry from a security PoV

3 votes
2 answers
423 views

Integrating ZAP to SDLC. Am I doing it right?

3 votes
2 answers
1k views

Does allowing unsafe-inline script defeat the purpose of CSP?

2 votes
0 answers
3k views

How to verify SSL/TLS renegotiation vulnerability?

2 votes
2 answers
222 views

Should I update my openSSL package? [closed]

2 votes
1 answer
333 views

Fixing an OpenSSL vulnerability at the firewall

2 votes
1 answer
139 views

Should a webpage where visitors submit e-mail address and phone number be served only over HTTPS?

2 votes
1 answer
382 views

Would an anti-virus software make any other processes consume more CPU?

2 votes
1 answer
4k views

ORDER BY sort direction is exploitable in SQL Injection?

1 vote
2 answers
781 views

Attacking through a malicious HTML file apart from XSS through Javascript?

1 vote
2 answers
519 views

Penetration Testing authorization from AWS

1 vote
1 answer
134 views

Web Cache Deception - exploitable without a cache server?

1 vote
1 answer
185 views

Pseudonymisation - Should e-mail addresses in the application be masked?

1 vote
1 answer
562 views

Risk Assessment - Probability of theft of a physical location

1 vote
4 answers
2k views

Is it safe to set up IP address to domain name redirection?

1 vote
0 answers
127 views

Responsibility of Malware infection in SaaS contracts [closed]

1 vote
1 answer
102 views

Secure cookies - set them in application or the webserver?

1 vote
2 answers
541 views

Should TVRA be done physically by going to the datacenter?

0 votes
1 answer
837 views

Using public IP addresses inside site-to-site VPN

0 votes
1 answer
412 views

Minimum acceptable CIS compliance percentage?

0 votes
1 answer
1k views

Not destroying cookies at log out

0 votes
1 answer
88 views

CVSSv2 score of 10, but no CVSv3 score