Live Webinar: Using open source safely and effectively. Wed, Dec 15th @ 9am PT. Register now. Company Login Community and Training Learn to Secure Your Code Learn how to identify and fix vulnerabilities with our free courses, training, and webinars. Free OWASP Top 10 Java Courses Filter by All Content Types FREE TRAINING Deserialization Learn how to use NG SAST to identify and fix areas of your code that facilitate insecure deserialization issues. Start Course FREE TRAINING Directory Traversal Learn how to use NG SAST to identify and fix the areas of your code that make your application vulnerable to directory traversal exploitation. Start Course FREE TRAINING Remote Code Execution Identify and fix areas of your code that make it vulnerable to remote code execution. Start Course FREE TRAINING Sensitive Data Leak Learn how to use NG SAST to identify and fix areas of your code that make your application vulnerable to sensitive data leaks. Start Course FREE TRAINING XSS Learn how to use NG SAST to identify and fix your code areas that make your application vulnerable to XSS. Start Course Vulnerability Fix Database Filter by All Content Types JAVA Arbitrary File Writes (Java) If your web-server writes files to disk, the output filename and path should not be generated from untrusted input. A web-server that permits arbitrary file writes to be triggered by maliciously crafted HTTP requests will allow an attacker to drop malicious files on your server or overwrite existing resources. Read Article NODE SECURITY Arbitrary File Writes (Node Security) If your web-server writes files to disk, the output filename and path should not be generated from untrusted input. A web-server that permits arbitrary file writes to be triggered by maliciously crafted HTTP requests will allow an attacker to drop malicious files on your server or overwrite existing resources. Read Article SCALA Arbitrary File Writes (Scala) If your web-server writes files to disk, the output filename and path should not be generated from untrusted input. A web-server that permits arbitrary file writes to be triggered by maliciously crafted HTTP requests will allow an attacker to drop malicious files on your server or overwrite existing resources. Read Article ANGULAR + REACT Authentication Bypass (Angular + React) All sensitive actions on your website should require the user to be authenticated (i.e. to have identified who they are) and to be authorized (i.e. to have sufficient permissions to perform that action). If web routes fail to check the user identity, attackers will be able to access sensitive resources. Read Article ANGULAR Authentication Bypass (Angular) All sensitive actions on your website should require the user to be authenticated (i.e. to have identified who they are) and to be authorized (i.e. to have sufficient permissions to perform that action). If web routes fail to check the user identity, attackers will be able to access sensitive resources. Read Article JAVA Authentication Bypass (Java) All sensitive actions on your website should require the user to be authenticated (i.e. to have identified who they are) and to be authorized (i.e. to have sufficient permissions to perform that action). If web routes fail to check the user identity, attackers will be able to access sensitive resources. Read Article 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 Join our community on Discord. Connect with hundreds of Developers and AppSec professionals in our official Discord server. Join Our Community Featured Resources Blog How To Review Code For Vulnerabilities Performing a code review to find vulnerabilities in applications is one o fthe best ways to find security issues in applications. February 5, 2021 Webinar - April 21, 2021 Introducing ShiftLeft Intelligent SCA Watch Webinar White Paper - February 2021 Static Analysis of a Dynamic Language View White Paper Report - July 31, 2021 AppSec Shift Left Progress Report 2021 View Report Ready to secure code at scale? Get Free Account Share your email to get the latest ShiftLeft updates, resources, and more. Enter your email address submit newsletter Platform Overview Next Gen Static Analysis Intelligent SCA ShiftLeft Educate ShiftLeft Ocular ShiftLeft Illuminate Pricing Why ShiftLeft How it Works Our Technology See It For Yourself Learn Resource Hub Blog Community & Training Open Source Resources Documentation Company About Us Press & News Careers Contact Us Twitter LinkedIn Discord Github Status Privacy & Security Terms of Use Cookie Policy © 2016 - 2021 ShiftLeft Inc. All rights reserved.