Search results

CX Improper_Resource_Shutdown_or_Release @ src/main/java/org/joychou/controller/Deserialize.java [master]

Status: Open.

#83 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Reflected_XSS_All_Clients @ src/main/java/org/joychou/controller/Fastjson.java [master]

Status: Open.

#84 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Information_Exposure_Through_an_Error_Message @ src/main/java/org/joychou/RMI/Server.java [master]

Status: Open.

#81 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX HttpOnlyCookies @ src/main/java/org/joychou/controller/Login.java [master]

Status: Open.

#82 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Heuristic_SQL_Injection @ src/main/java/org/joychou/controller/SSRF.java [master]

Status: Open.

#79 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX HttpOnlyCookies @ src/main/java/org/joychou/controller/CRLFInjection.java [master]

Status: Open.

#80 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Improper_Exception_Handling @ src/main/resources/mapper/UserMapper.xml [master]

Status: Open.

#77 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX HTTP_Response_Splitting @ src/main/java/org/joychou/controller/SSRF.java [master]

Status: Open.

#78 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Public_Data_Assigned_to_Private_Array @ src/main/java/org/joychou/security/SecurityUtil.java [master]

Status: Open.

#76 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Log_Forging @ src/main/java/org/joychou/security/HttpFilter.java [master]

Status: Open.

#74 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Portability_Flaw_Locale_Dependent_Comparison @ src/main/java/org/joychou/security/SecurityUtil.java [master]

Status: Open.

#75 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020

CX Information_Exposure_Through_an_Error_Message @ src/main/java/org/joychou/controller/SSRF.java [master]

Status: Open.

#72 In DannyLoweCx/java-sec-code;

· DannyLoweCx opened on Jun 12, 2020