User Sreeraj

45 votes

3 answers

9k views

Does a buffer overflow vulnerability always mean a code execution vulnerability?

asked Nov 26, 2019 at 16:13

32 votes

3 answers

45k views

Why doesn't the TLS protocol work without the SSLv3 ciphersuites?

asked Oct 16, 2014 at 4:11

8 votes

2 answers

1k views

Are machines patched against WannaCry protected against the ongoing Petya attacks?

asked Jun 27, 2017 at 18:26

4 votes

1 answer

3k views

Reporting an IP address

asked Dec 2, 2014 at 5:50

3 votes

1 answer

454 views

Wildcard DNS entry from a security PoV

asked Nov 26, 2014 at 5:21

3 votes

2 answers

448 views

Integrating ZAP to SDLC. Am I doing it right?

asked Apr 10, 2017 at 11:28

3 votes

0 answers

4k views

How to verify SSL/TLS renegotiation vulnerability?

asked Jan 22, 2020 at 19:25

3 votes

2 answers

1k views

Does allowing unsafe-inline script defeat the purpose of CSP?

asked Nov 20, 2018 at 11:16

3 votes

1 answer

7k views

ORDER BY sort direction is exploitable in SQL Injection?

asked Jul 11, 2020 at 13:15

2 votes

1 answer

456 views

Would an anti-virus software make any other processes consume more CPU?

asked May 30, 2020 at 4:16

2 votes

2 answers

226 views

Should I update my openSSL package? [closed]

asked Mar 19, 2015 at 13:01

2 votes

1 answer

370 views

Fixing an OpenSSL vulnerability at the firewall

asked Mar 13, 2017 at 12:17

2 votes

1 answer

147 views

Should a webpage where visitors submit e-mail address and phone number be served only over HTTPS?

asked Apr 4, 2017 at 7:49

1 vote

1 answer

190 views

Pseudonymisation - Should e-mail addresses in the application be masked?

asked Apr 12, 2017 at 11:27

1 vote

1 answer

585 views

Risk Assessment - Probability of theft of a physical location

asked May 24, 2017 at 11:21

1 vote

4 answers

2k views

Is it safe to set up IP address to domain name redirection?

asked Feb 14, 2015 at 7:20

1 vote

0 answers

138 views

Responsibility of Malware infection in SaaS contracts [closed]

asked Jul 3, 2017 at 10:42

1 vote

1 answer

114 views

Secure cookies - set them in application or the webserver?

asked Apr 25, 2018 at 10:48

1 vote

2 answers

560 views

Should TVRA be done physically by going to the datacenter?

asked Jul 19, 2018 at 6:38

1 vote

2 answers

896 views

Attacking through a malicious HTML file apart from XSS through Javascript?

asked Jun 26, 2020 at 16:52

1 vote

1 answer

159 views

Web Cache Deception - exploitable without a cache server?

asked Sep 1, 2020 at 6:00

1 vote

2 answers

536 views

Penetration Testing authorization from AWS

asked Feb 3, 2019 at 10:34

0 votes

0 answers

192 views

How easy or difficult it is to exploit older SSL/TLS protocols?

asked Mar 22 at 10:26

0 votes

1 answer

108 views

CVSSv2 score of 10, but no CVSv3 score

asked Aug 13, 2020 at 7:25

0 votes

1 answer

1k views

Using public IP addresses inside site-to-site VPN

asked Aug 21, 2018 at 11:12

0 votes

1 answer

2k views

Not destroying cookies at log out

asked Dec 19, 2018 at 10:42

0 votes

1 answer

866 views

Minimum acceptable CIS compliance percentage?

asked Apr 18, 2020 at 10:49

Stack Exchange Network

27 Questions

Does a buffer overflow vulnerability always mean a code execution vulnerability?

Why doesn't the TLS protocol work without the SSLv3 ciphersuites?

Are machines patched against WannaCry protected against the ongoing Petya attacks?

Reporting an IP address

Wildcard DNS entry from a security PoV

Integrating ZAP to SDLC. Am I doing it right?

How to verify SSL/TLS renegotiation vulnerability?

Does allowing unsafe-inline script defeat the purpose of CSP?

ORDER BY sort direction is exploitable in SQL Injection?

Would an anti-virus software make any other processes consume more CPU?

Should I update my openSSL package? [closed]

Fixing an OpenSSL vulnerability at the firewall

Should a webpage where visitors submit e-mail address and phone number be served only over HTTPS?

Pseudonymisation - Should e-mail addresses in the application be masked?

Risk Assessment - Probability of theft of a physical location

Is it safe to set up IP address to domain name redirection?

Responsibility of Malware infection in SaaS contracts [closed]

Secure cookies - set them in application or the webserver?

Should TVRA be done physically by going to the datacenter?

Attacking through a malicious HTML file apart from XSS through Javascript?

Web Cache Deception - exploitable without a cache server?

Penetration Testing authorization from AWS

How easy or difficult it is to exploit older SSL/TLS protocols?

CVSSv2 score of 10, but no CVSv3 score

Using public IP addresses inside site-to-site VPN

Not destroying cookies at log out

Minimum acceptable CIS compliance percentage?