netsparker-research Archives

Infographic: Statistics About the Security State of 104 Open Source Web Applications

In this infographic, we highlight the most common vulnerabilities that are found in open source web applications. Even though this is just a small sample of the web applications that are used on the live website on the internet, these statistics give us a good overview of the real life situation, and how many websites are vulnerable to malicious hacker attacks.

Infographic: Statistics About the Security Scans of 396 Open Source Web Applications

In this infographic we highlight the most common vulnerabilities that are found in open source web applications. Even though this is just a small sample of the web applications that are used on live website on the internet, these statistics give us a good overview of the real life situation, and how many websites are vulnerable to malicious hacker attacks.

Netsparker Web Scanner Automatically Identifies DOM XSS Vulnerability in WordPress Default Theme

Netsparker Web Application Security Scanner was used to automatically identify a DOM based cross-site scripting vulnerability in Twenty Fifteen, a default WordPress theme since WordPress 4.1. Read how this vulnerability affects millions of WordPress websites and how you can fix it.

What Can You Learn from 87 Advisories About Web Application Vulnerabilities?

This article looks into the details of all the 87 advisories Netsparker published about SQL Injection, XSS and other vulnerabilities Netsparker Web Application Security Scanner identified in several open source web applications. It uses statistics to highlight the state of security of both open source and non open source web applications.

Are Hackers a Step Ahead? An Analysis using Web Application Vulnerabilities

In this analysis the Netsparker team used Netsparker Web Application Security Scanner to scan a number of popular open source web applications and identify vulnerabilities in them. The results are very shocking and explain why malicious hackers are always a step ahead of website owners. A vulnerability statistics infographic was also generated from the results.

JavaScript Scope and IntenseDebate’s Privacy Problems

In this web application security article, Ferruh Mavituna, explains a security issue he identified in IntenseDebate online service that could allow attackers to access information about the logged-in session of the victim. Ferruh also suggests a number of remedies for this problem which every web application developer should know of.

SVN Digger – Better Wordlists for Forced Browsing with Netsparker Web Application Security Scanner

In this blog post we explain how we built a database of keywords which will be used in Netsparker Web Application Security Scanner when doing forced browsing security checks to try and identify hidden resources in web applications during a security scan.