You are here |
escape.tech | ||
| | | |
www.nodejs-security.com
|
|
| | | | Dive into a critical vulnerability in a popular npm package called `nossrf`. This package aims to shield applications from Server-Side Request Forgery (SSRF) attacks by validating user-provided URLs. However, a clever bypass technique renders these safeguards ineffective. Let's dissect the issue and understand how to stay protected. | |
| | | |
konghq.com
|
|
| | | | APIs introduce new security vulnerabilities including injection attacks, broken authentication, sensitive data exposure, and more. This guide covers the top API security risks developers face and provides actionable steps for mitigating them. | |
| | | |
www.lasso.security
|
|
| | | | Discover the top 10 LLM vulnerabilities identified by OWASP, along with mitigation strategies and a security checklist to enhance your LLM app security. | |
| | | |
unit42.paloaltonetworks.com
|
|
| | RCE vulnerability CVE-2023-3519 affects Citrix NetScaler products. This threat brief examines the current evidence, attack scope and interim guidance. |