Vulnerabilities Advisories
Real-world security weaknesses found in web infrastructure. Each article documents the vulnerability class, how it manifests, and confirmed impact.
Other Research Categories
Open Redirect: How It Works, How It Is Detected, and How to Fix It
An open redirect allows an attacker to craft a URL on your domain that sends users to any external destination. The vulnerability is used in phishing, OAuth token theft, and SSRF chains. This article explains the mechanics, attack scenarios, URL validation patterns that fail, and correct remediation.
DOM-Based XSS: Sinks, Sources, and How to Detect It Without a Server
DOM-based XSS differs from reflected and stored XSS because the attack never touches the server. The payload travels through the browser's own DOM APIs. This article covers the sources and sinks that create DOM XSS risk, the patterns the scanner looks for, and how to remediate each one.
Sensitive File Exposure: .env Files, Git Repositories, and Configuration Backups
Sensitive files left accessible on web servers are a consistent source of critical findings in security audits. This article covers the most commonly exposed file types, why they end up publicly accessible, what the concrete impact is for each, and how to detect and prevent exposure.
Secrets and Source Maps in Client-Side JavaScript: Detection and Remediation
JavaScript files served to browsers are readable by anyone. Source maps expose original source code, and hardcoded credentials expose API keys, OAuth secrets, and service tokens. This article explains what the scanner looks for, how to detect these issues, and how to remove them.
CORS Misconfiguration: Wildcard Origins, Reflected Origins, and the Credentials Trap
CORS misconfiguration is one of the few vulnerability classes that can lead to full account compromise from a single misconfigured header. This article explains how each CORS misconfiguration works, the specific attack each enables, and how to fix and verify your configuration.
XSS Without CSP: Understanding the Exposure and Reducing the Risk
A site without a Content Security Policy has no browser-enforced restriction on script execution. This article explains the concrete exposure created by a missing CSP, how XSS payloads exploit it, and the steps to reduce risk without immediately deploying a fully restrictive policy.
DNS Misconfigurations That Affect Web Security
DNS is the first layer of web infrastructure, and misconfigurations there can undermine every layer above it. This article covers dangling DNS records, missing SPF and DMARC policies, open resolvers, and how each condition affects the security posture of a domain.
Subdomain Takeover: How It Happens, How to Detect It, and How to Prevent It
Subdomain takeover occurs when a DNS record points to a service that no longer controls that hostname. An attacker can register the unclaimed resource and serve content under your subdomain. This article explains the mechanics, how WebDefect detects it, and remediation steps.
TLS Configuration Mistakes That Still Appear in Production
Many servers still expose deprecated TLS versions, weak cipher suites, or misconfigured certificate chains. This article documents the most common TLS configuration errors we observe during audits, why each one matters, and how to remediate them.