-
Hi,
I was wondering what the best practices are for hardening a Synapse server?
For example, I noticed Synapse listens on http://127.0.0.1:8008
Does it make sense to get a local certificate t…
-
We're using the Fedora RPM via dnf, PulledPork v0.7.3, and when running:
`pulledpork.pl -c /etc/snort/pulledpork.conf`
This appears:
```
Issuing reputation socket reload command
Unable to con…
-
**Describe the bug**
Acunetix vunlerability scanner recommends updating versions of some of the frontend dependencies.
**To Reproduce**
**What application are you using?**
OJS 3.4
**Additi…
-
Hello
There are some missing features in fuzzer which I found after having a few days experience with ZAP.
* the request can't be edit before sending it to fuzzer
 is used with a property get with default value but the property exists and is null
``` python
item = { "XXX" : null }
text_…
-
## 关于XML解析存在的安全问题指引
https://pay.weixin.qq.com/wiki/doc/api/jsapi.php?chapter=23_5
微信支付商户，最近暴露的XML外部实体注入漏洞(`XML External Entity Injection`，简称 XXE)，该安全问题是 **由XML组件默认没有禁用外部实体引用导致** ，非微信支付系统存在漏洞。
…