PayPal Merchant Launch Site: Authentication Bypass Vulnerability

  While most applications require authentication to gain access to private information or to execute tasks, not every authentication method is able to provide adequate security. Negligence, ignorance, or simple understatement of security threats often result in authentication schemes that can be bypassed by simply skipping the log in page and directly calling an internal … Read more

WhatsApp: LFI Vulnerability

      Before starting to describe the issue found on WhatsApp i want to introduce the LFI Vulnerability. The File Inclusion vulnerability allows an attacker to include a file, usually exploiting a “dynamic file inclusion” mechanisms implemented in the target application. The vulnerability occurs due to the use of user-supplied input without proper validation. … Read more

YouTube IconTwitter IconVisit Our Linkedin profile