Application Attacks 46 articles
More in Threats & Attacks:
Application Attacks 46
Cloud Attacks 18
Data Attacks 17
Identity Attacks 22
Insider Threats 16
Malware 20
Network Attacks 23
Physical & Hybrid Attacks 20
Supply Chain Attacks 19
41
Template Injection (SSTI)
Summary Server-Side Template Injection (SSTI) is a vulnerability that occurs when user input is improperly sanitized and embedded within a server-side template, allowing attackers to inject and execute arbitrary code…
42
Third-Party Script Injection
Summary Third-Party Script Injection is a cyberattack where malicious code is injected into a trusted third-party script that is loaded by a web application, compromising the security and integrity of…
43
Union-based SQL Injection
Summary Union-based SQL Injection is a web application attack technique that exploits vulnerable input fields to execute unauthorized SQL queries by leveraging the UNION SQL operator. This method allows attackers…
44
Unrestricted File Upload
Summary Unrestricted File Upload is a web application vulnerability where attackers can upload malicious files without proper validation, potentially leading to remote code execution, data breaches, or server compromise. Key…
45
Web Cache Poisoning
Summary Web Cache Poisoning is an application attack where an attacker manipulates the caching mechanism of a web server or proxy to serve malicious or altered content to users. By…
46
XML External Entity (XXE)
Summary XML External Entity (XXE) is a type of application attack that exploits vulnerabilities in XML parsers to inject and process malicious external entities, potentially leading to data exposure, denial…