Survey of Notable Web Application Vulnerabilities from the Past Year
summary
Overview of notable web application vulnerabilities discovered in the past year, covering concrete classes of flaws and examples found in real apps. Presents practical cybersecurity knowledge useful for defenders and developers, focusing on recent trends and actionable takeaways for improving web app security.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 2:51API Assistant vulnerabilities
- 6:02Password reset in Flowise AI
- 7:07Dollar menu exploit in McDonald's
- 8:09Subaru portal vulnerability
- 9:33Password reset in GitLab
- 10:14Triofox admin creation flaw
- 12:18Medical data access
- 13:25HackerOne report review
- 14:25Mass assignment in F1
- 16:32Deserialization in MFT
- 18:20SSRF in Oracle Business Suite
- 24:57RCE in Oracle Identity Manager
- 27:49Ivanti Endpoint Manager Mobile
- 30:17Ubiquiti door access flaw
- 32:03IP camera vulnerabilities
- 38:02SQL injection in FortiWeb
- 39:48Palo Alto vulnerability
- 41:16CentOS Web Panel
- 43:03Summary and sources
related talks
45mOverview of Interesting Vulnerabilities in Web Applications - Live Demos
35mWeb Applications: Common Security Issues
41mTop Web Vulnerabilities in 40 Minutes
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
55mBreaking and Fixing Web Application Security
44mSelected Vulnerabilities in Web Applications
48mWeb Application Security
59mPractical Security for Web Applications