Subscribe to our newsletter Contact us HOME PRODUCTS SERVICES RESEARCH NEWS MINDED SECURITY BLOG ABOUT US Are you reviewing in depth your business critical application? 1234567891011121314 Latest news from our blog RCE in Oracle NetBeans Opensource Plugins: PrimeFaces 5.x Expression Language Injection PrimeFaces is a open source User Interface (UI) component library for JavaServer Faces (JSF) based applications, sin... Posted on Monday February 15, 2016 RAT WARS 2.0: Advanced Techniques for Detecting RAT Screen Control In the landscape of web maliciousness Remote Administration Trojans [1] are not a new trend but their usage is still strong and growing steady. At its core a RAT is a backdoor facility used to let an attacker enter unnoticed into the victim computer to control it remotely: for example most banking trojan nowadays are using remote desktop modules to open a... Posted on Friday February 05, 2016 Request parameter "_method" may lead to CakePHP CSRF Token Bypass In CakePHP we noticed that under certain circumstances is it possible to bypass the built-in security checks offered by CSRF and anti-tampering.As stated in the official documentation "By using the Security Component you automatically get CSRF and form tampering protection" [1], however this is not true in case a form controller does not check whether the request is... Posted on Tuesday January 12, 2016 MORE ARTICLES Latest tweets Client Side Security Assessment Newsletter Manual Secure Code Review for critical applications Mobile Security Assessment Secure Coding Guidelines Web Fraud Detection Technology Advanced training on how to fix vulnerabilities in your code High level training on Software Security JavaScript Security Training Minded Security Webinar: register here Advanced Penetration Testing with fixing support Software Assurance Maturity Assessment 3.100.000 end users protected 1000M dynamic web pages scanned 17 Achieved Countries Our customers ©2015 Minded Security S.r.l. The Software Security Company - VAT IT05756380480 BACK TO TOP