AVsecurity – Page 2

17 Jul

Security Review of Microsoft DirectAccess Implementation

Posted by Vinesh Redkar Blog Post, Direct Access, Mobile Security, Security Review No Comments

This article presents the key risks with DirectAccess and how to audit them. Let’s begin by first understanding the DirectAccess technology Introduction of DirectAccess From the Wikipedia definition DirectAccess, also known...

17 Jun

Decrypting Password Encryption -HP ALM Product 11

Posted by Vinesh Redkar Blog Post, Bug Bounty, Security Review, Web Application Security No Comments

Hi All, It’s been long time haven’t write any security post but i have come up with security issue on HP ALM Product 11. While testing HP ALM Product latest...

01 Apr

OpenSSL Heartbleed Vulnerability

Posted by Vinesh Redkar Blog Post, Web Application Security No Comments

Hello Every One, Recently Web Researcher has uncovered an extremely critical vulnerability in recent versions of OpenSSL in short this vulnerability allows anyone on the Internet to read the memory of the systems protected by...

18 Feb

Insufficient Authorization Vulnerability in Yahoo! Pipes

Posted by Vinesh Redkar Blog Post, Bug Bounty, Web Application Security No Comments

Recently, I found an interesting issue qualifying on Yahoo! Pipes. But before going into the details of this specific issue, let’s understand some basic points. What does Authorization mean? In...

18 Jun

NOKIA – Insecure Direct Object Reference

Posted by Vinesh Redkar Blog Post, Bug Bounty, Mobile Security, Web Application Security No Comments

Hi all, Recently i have found Insecure Direct Object Issue on Nokia. I have already reported this issue and also got fixed. Thanks to Nokia developer Team. They have listed...

17 May

Stored XSS On Rediff Mail

Posted by Vinesh Redkar Blog Post, Bug Bounty, Web Application Security No Comments

Hi Guys, the other day i discovered Stored XSS Issue on Rediff mail and also reported this issue to Rediff didn’t get any Credit for it though 🙂 They dropped me...

17 Apr

WordPress XML-RPC Pingback Vulnerability

Posted by Vinesh Redkar Blog Post, Web Application Security, Wordpress Security No Comments

Hi all, Today, I going to Talk About Word Press XMS-RPC Pingback Vulnerability. Using this vulnerability we can perform a Port Scan on Intranet & Internet. Before that lets start with quick...

01 Apr

Oracle Hardening – Part I

Posted by Ajinkya Patil Blog Post, Oracle, Security Document, Security Guidelines, Security Review 2 Comments

Hey!! We are back again with some more wealth I will be taking you through Operating System security and Database Security concepts. This won’t be a checklist based on different...

Our Blog