Walter Moar·3d agoUnderstanding CWE-321: Use of Hard-coded Cryptographic KeyLearn how CWE-321 lets attackers forge tokens, decrypt traffic, and impersonate users once a cryptographic key is extracted from source…
Walter Moar·Nov 2Understanding CWE-184: Incomplete List of Disallowed InputsLearn how CWE-184 lets attackers slip past a filter by finding the one dangerous value the developer forgot to list, from file extension…
Walter Moar·Oct 29Understanding CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code (‘Eval…Learn how CWE-95 lets attackers run arbitrary code when user input reaches eval() or similar dynamic-evaluation functions, from calculator…
InDisarming DisinformationbyAdam·Oct 27Tracking Vulnerabilities using DISARMA CWE-inspired structure for tracking vulnerabilities in DISARM v2, starting with Data Voids.
InSystem WeaknessbyWalter Moar·Oct 15Understanding CWE-78: Improper Neutralization of Special Elements used in an OS Command (‘OS…Learn how CWE-78 lets attackers run arbitrary shell commands when user input is concatenated into a system call, from ping utilities to…
Walter Moar·Oct 1Understanding CWE-24: Path Traversal: ‘../filedir’Learn how CWE-24 lets attackers escape a restricted directory by injecting ../ sequences into file paths, from download endpoints to zip…
Walter Moar·Sep 28Understanding CWE-22: Improper Limitation of a Pathname to a Restricted Directory (‘Path…Learn how CWE-22 lets attackers read or write files outside the directory an application meant to expose, from absolute paths to…
Sahil Shah·Sep 22How I Passed the HTB CWES with 100/100 (2026)CWES preparation, Exam experience, Machines & Report TipsA response icon2A response icon2
InGoPenAIbyIvan Ponurovskiy·Sep 1Why LLM jailbreak classification doesn’t work like CWEIn the previous post I looked at the concept of jailbreaking in the context of Large Language Models. As a quick reminder, jailbreak is the…
Jafarlimahir·Jul 29Navigating the Triad of Cyber Risk: A Practical Guide to CVE, CWE, and CVSSIn software security, identifying a problem is only half the battle. The real challenge lies in categorizing it, understanding its root…
