https://www.penscan.org/blog/external-control-of-critical-state-data/ 2023-10-05T00:00:00-04:00 https://www.penscan.org/blog/owasp-top-10/ 2024-06-05T00:00:00-04:00 https://www.penscan.org/blog/soc2-evidence/ 2024-06-12T00:00:00-04:00 https://www.penscan.org/blog/first-pentest-30-minutes/ 2024-06-18T00:00:00-04:00 https://www.penscan.org/blog/absolute-path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/argument-injection-cwe-88/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/asp-net-misconfiguration-creating-debug-binary/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/asp-net-misconfiguration-password-in-configuration-file/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/aspnet-misconfiguration-missing-custom-error-page/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/basic-xss-cwe-80/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/compiler-removal-of-code-to-clear-buffers/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/cwe-69-improper-handling-of-windows-data-alternate-data-stream/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/cwe-73/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/cwe-90/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/deprecated-apple-ds-store-cwe-71/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/direct-use-of-unsafe-jni-cwe-111/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/doubled-character-xss-manipulations-cwe-85/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/eval-injection-cwe-95/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/external-control-of-system-or-configuration-setting/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-control-of-filename-for-include-require-statement-in-php-program-php-remote-file-inclusion-cwe-98/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-control-of-generation-of-code-code-injection/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-control-of-resource-identifiers-resource-injection-cwe-99/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-encoding-or-escaping-of-output/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-apple-hfs-alternate-data-stream-path/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-file-names-that-identify-virtual-resources/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-windows-device-names/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-input-validation/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-link-resolution-before-file-access-cwe-59/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-encoded-uri-schemes-web-page/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-crlf-sequences/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-crlf-sequences-in-http-headers/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-directives-in-statically-saved-code-static-code-injection-cwe-96/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-equivalent-special-elements-cwe-76/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-cwe-79/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-script-in-attributes-of-img-tags/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-special-elements-in-output-used-by-a-downstream-component/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-special-elements-used-in-a-command-cwe-77/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/improper-resolution-of-path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/j2ee-misconfiguration-data-transmission-without-encryption/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/j2ee-misconfiguration-entity-bean-declared-remote/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/j2ee-misconfiguration-insufficient-session-id-length-cwe-6/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/j2ee-misconfiguration-missing-custom-error-page/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/j2ee-misconfiguration-weak-access-permissions-for-ejb-methods/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/misinterpretation-of-input/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/missing-xml-validation/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/os-command-injection-cwe-78/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-fakedir-realdir-cwe-57/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-internal-whitespace-cwe-48/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-multiple-internal-slash-cwe-51/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-trailing-dot-cwe-42/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-trailing-slash-cwe-49/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-trailing-space-cwe-46/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-wildcard-cwe-56/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-equivalence-windows-8-3-filename/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal-cwe-22/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal-multiple-internal-dot-dot-slash-cwe-27/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal-backslash-dot-dot-cwe-28/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal-multiple-dot-cwe-33/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/path-traversal-windows-unc-share-cwe-40/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/process-control-cwe-114/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/relative-path-traversal-cwe-23/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/special-element-injection-cwe-75/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/sql-injection-cwe-89/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/ssi-injection-cwe-97/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-duplicate-validation-forms/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-form-bean-does-not-extend-validation-class/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-form-field-without-validator/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-incomplete-validate-method-definition/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-plug-in-framework-not-in-use/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-unused-validation-form-cwe-107/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-unvalidated-action-form-cwe-108/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-validator-turned-off-cwe-109/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/struts-validator-without-form-field/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/unix-hard-link/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/unix-symbolic-link-following/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/windows-hard-link/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/windows-shortcut-following-lnk-cwe-64/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/xml-injection-cwe-91/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/xss-alternate-syntax-cwe-87/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/xss-in-attributes-cwe-83/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/xss-in-error-message-cwe-81/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/xss-invalid-characters-in-identifiers-cwe-86/ 2026-07-27T00:00:00-04:00 https://www.penscan.org/blog/authentication-bypass-by-assumed-immutable-data/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/authentication-bypass-by-capture-replay/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/authentication-bypass-by-primary-weakness/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/authentication-bypass-by-spoofing/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-120-buffer-copy-without-checking-size-of-input-classic-buffer-overflow/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/buffer-over-read/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/buffer-under-read/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/channel-accessible-by-non-endpoint/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cleartext-storage-in-a-file-or-on-disk/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cleartext-storage-sensitive-information-gui/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/collapse-of-data-into-unsafe-value/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/covert-timing-channel/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cross-site-request-forgery-csrf/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-124-buffer-underwrite/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-135/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-138-improper-neutralization-of-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-146-improper-neutralization-of-expression-command-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-148-improper-neutralization-of-input-leaders/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-153-improper-neutralization-of-substitution-characters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-154-improper-neutralization-of-variable-name-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-156-improper-neutralization-of-whitespace/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-158-improper-neutralization-null-byte/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-159-improper-handling-of-invalid-use-of-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-161-improper-neutralization-multiple-leading-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-163-improper-neutralization-of-multiple-trailing-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-166-improper-handling-of-missing-special-element/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-180/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-181/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-186-overly-restrictive-regular-expression/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-190/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-191-integer-underflow-wraparound/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-201-insertion-of-sensitive-information-into-sent-data/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-206/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-210-self-generated-error-message-containing-sensitive-information/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-211/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-219-storage-of-file-with-sensitive-data-under-web-root/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-226-sensitive-information-in-resource-not-removed-before-reuse/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-229-improper-handling-of-values/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-234-failure-to-handle-missing-parameter/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-241-improper-handling-of-unexpected-data-type/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-244-improper-clearing-of-heap-memory-before-release/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-268-privilege-chaining/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-269-improper-privilege-management/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-272-least-privilege-violation/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-303/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-312-cleartext-storage-of-sensitive-information/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-315-cleartext-storage-of-sensitive-information-in-a-cookie/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-316-cleartext-storage-of-sensitive-information-in-memory/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-318-cleartext-storage-of-sensitive-information-in-executable/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-323-reusing-a-nonce-key-pair-in-encryption/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/cwe-347-improper-verification-of-cryptographic-signature/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/divide-by-zero/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/empty-password-in-configuration-file/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/encoding-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/execution-with-unnecessary-privileges/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-sensitive-information-through-data-queries/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-sensitive-information-to-an-unauthorized-actor-cwe-200/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/failure-to-handle-incomplete-element/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/failure-to-sanitize-paired-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/generation-of-predictable-iv-with-cbc-mode/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/generation-of-predictable-numbers-or-identifiers/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/heap-based-buffer-overflow/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-authentication/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-authorization/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-certificate-validation/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-additional-special-element/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-alternate-encoding-cwe-173/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-extra-values/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-incomplete-structural-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-inconsistent-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-inconsistent-structural-elements-cwe-240/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-insufficient-entropy-in-trng/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-insufficient-permissions-or-privileges/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-insufficient-privileges/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-length-parameter-inconsistency/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-missing-values/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-mixed-encoding/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-parameters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-structural-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-syntactically-invalid-structure/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-undefined-parameters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-undefined-values/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-unicode-encoding/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-url-encoding-hex-encoding/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-comment-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-escape-meta-or-control-sequences/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-input-terminators/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-leading-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-line-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-macro-symbols/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-multiple-internal-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-parameter-argument-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-quoting-syntax-cwe-149/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-record-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-section-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-value-delimiters/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-wildcards-or-matching-symbols/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-trailing-special-elements/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-null-termination-cwe-170/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/log-injection-cwe-117/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-preservation-of-permissions/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-removal-sensitive-information-before-storage-transfer/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-restriction-of-operations-within-the-bounds-of-a-memory-buffer/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improper-validation-of-array-index/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/improperly-implemented-security-check-for-standard/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/inadequate-encryption-strength-cwe-326-examples-prevention/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/incomplete-list-of-disallowed-inputs/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/incorrect-access-of-indexable-resource-range-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/incorrect-calculation-of-buffer-size/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/incorrect-check-of-function-return-value/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/incorrect-privilege-assignment/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/incorrect-regular-expression/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/incorrect-user-management/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/information-loss-or-omission/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/insertion-of-sensitive-information-into-debugging-code/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/insufficient-entropy/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/insufficient-entropy-in-prng/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/insufficient-type-distinction/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/integer-coercion-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/invocation-of-process-using-visible-sensitive-information/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/j2ee-bad-practices-direct-management-of-connections/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/j2ee-bad-practices-direct-use-of-threads/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/j2ee-bad-practices-use-of-system-exit/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/missing-cryptographic-step/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/missing-encryption-of-sensitive-data/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/missing-support-for-integrity-check/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/not-using-password-aging/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/numeric-truncation-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/obscured-security-relevant-information-by-alternate-name/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/observable-behavioral-discrepancy/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/observable-discrepancy/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/observable-response-discrepancy-cwe-204/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/observable-timing-discrepancy-cwe-208/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/off-by-one-error-cwe-193/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/origin-validation-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/out-of-bounds-read-cwe-125/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/partial-string-comparison-cwe-187/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/passing-mutable-objects-to-an-untrusted-method/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/password-aging-with-long-expiration/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/password-in-configuration-file/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/permissive-list-of-allowed-inputs/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/plaintext-storage-of-a-password/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/predictable-from-observable-state/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/predictable-value-range-from-previous-values/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/privilege-context-switching-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/privilege-defined-with-unsafe-actions/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/privilege-dropping-lowering-errors/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/race-condition-enabling-link-following/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/race-condition-within-a-thread/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/reflection-attack-authentication-protocol/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/reliance-on-data-memory-layout/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/reliance-on-ip-address-for-authentication/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/reliance-on-reverse-dns-resolution-for-a-security-critical-action/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/returning-a-mutable-object-to-an-untrusted-caller/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/signal-handler-race-condition/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/signed-to-unsigned-conversion-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/stack-based-buffer-overflow/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/storage-of-file-with-sensitive-data-under-ftp-root/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/storing-passwords-in-a-recoverable-format/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/truncation-of-security-relevant-information/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/unchecked-return-value/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/unexpected-sign-extension-cwe-194/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/unsigned-to-signed-conversion-error/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-a-broken-or-risky-cryptographic-algorithm/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-a-key-past-its-expiration-date/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-cryptographically-weak-prng/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-externally-controlled-format-string/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-hard-coded-password/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-incorrect-byte-ordering/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-inherently-dangerous-function-cwe-242/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-insufficiently-random-values/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-less-trusted-source/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-single-factor-authentication/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-of-weak-hash-cwe-328/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/use-password-system-primary-authentication/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/using-referer-field-for-authentication/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/weak-encoding-for-password/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/write-what-where-condition/ 2026-07-28T00:00:00-04:00 https://www.penscan.org/blog/detection-of-error-condition-without-action/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unchecked-error-condition-cwe-391/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-report-of-error-condition-cwe-392/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/return-of-wrong-status-code/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unexpected-status-code-or-return-value/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-nullpointerexception-catch-to-detect-null-pointer-dereference/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/declaration-of-throws-for-generic-exception/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/uncontrolled-resource-consumption-cwe-78/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-release-of-memory-after-effective-lifetime/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/transmission-of-private-resources-into-a-new-sphere-resource-leak-cwe-402/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-resource-shutdown-or-release/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/asymmetric-resource-consumption-amplification-cwe-405/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insufficient-control-of-network-message-volume/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/inefficient-algorithmic-complexity-cwe-407/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-behavior-order-early-amplification/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-highly-compressed-data/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insufficient-resource-pool-cwe-410/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-resource-locking-cwe-413/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-lock-check-cwe-414/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/double-free-cwe-415/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-after-free-cwe-416/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unprotected-primary-channel-cwe-419/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-420-unprotected-alternate-channel/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/race-condition-alternate-channel-cwe-421/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unprotected-windows-messaging-channel-shatter/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-protection-of-alternate-path-cwe-424/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/untrusted-search-path-cwe-426/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/uncontrolled-search-path-element-cwe-427/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unquoted-search-path-or-element/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/deployment-of-wrong-handler/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-handler-cwe-431/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/dangerous-signal-handler-not-disabled-during-sensitive-operations/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unrestricted-upload-of-file-with-dangerous-type/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-435-improper-interaction-between-multiple-correctly-behaving-entities/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-436-interpretaion-conflict/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incomplete-model-of-endpoint-features-cwe-437/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/expected-behavior-violation-cwe-440/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unintended-proxy-or-intermediary-confused-deputy-cwe-441/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/inconsistent-http-request-response-smuggling/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-446-ui-discrepancy-for-security-feature/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unimplemented-or-unsupported-feature-in-ui/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/obsolete-feature-in-ui-cwe-448/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-449-the-ui-performs-wrong-action/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/multiple-interpretations-of-ui-input-cwe-450/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/user-interface-misrepresentation-critical-information/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/external-initialization-of-trusted-variables-or-data-stores-cwe-454/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-uninitialized-variable/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/duplicate-key-in-alist/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-463-deletion-of-data-structure-sentinel/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-464-addition-of-data-structure-sentinel/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/return-pointer-value-outside-of-expected-range/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-pointer-scaling-cwe-468/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-469-use-of-pointer-subtraction-to-determine-size/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-externally-controlled-input-to-select-classes-or-code/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-471/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/external-control-of-assumed-immutable-web-parameter/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/php-external-variable-modification-cwe-473/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-function-inconsistent-implementations/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-475/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/null-pointer-dereference/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-obsolete-function/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/signal-handler-use-of-a-non-reentrant-function/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/comparison-of-classes-by-name/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-data-element-to-wrong-session-cwe-488/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/active-debug-code-cwe-489/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/download-of-code-without-integrity-check/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/private-data-structure-public-method/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/public-data-assigned-to-private-array-typed-field/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cloneable-class-sensitive-information/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/trust-boundary-violation-cwe-501/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/deserialization-of-untrusted-data-cwe-502/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/trojan-horse-cwe-507/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/non-replicating-malicious-code-cwe-708/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/replicating-malicious-code-virus-or-worm/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/trapdoor-cwe-510/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/spyware-cwe-512/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-514-covert-channel/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/covert-storage-channel-cwe-515/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-520-net-misconfiguration/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/weak-password-requirements-cwe-521/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insufficiently-protected-credentials-cwe-522/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unprotected-transport-of-credentials-cwe-523/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-web-browser-cache-containing-sensitive-information/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cleartext-storage-of-sensitive-information-in-environment-variable/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-core-dump-file-to-unauthorized-control-sphere/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-access-control-list-files-to-an-unauthorized-control-sphere/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-information-through-shell-error-message/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/java-runtime-error-message-sensitive-information/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-538-insertion-of-sensitive-information/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-persistent-cookies-containing-sensitive-information/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/inclusion-of-sensitive-information-in-an-include-file/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-standardized-error-handling-mechanism-cwe-544/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-546-suspicious-comment/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-hard-coded-security-relevant-constants/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-information-through-directory-listing-cwe-548/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-password-field-masking-cwe-549/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-behavior-order-authorization-before-parsing-and-canonicalization/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/command-shell-in-accessible-directory/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/asp-net-misconfiguration-not-using-input-validation-framework/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/j2ee-misconfiguration-plaintext-password-in-configuration-file/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-556/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-getlogin-in-multithreaded-application/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/return-of-stack-variable-address-cwe-562/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/sql-injection-hibernate/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-565-reliance-on-cookies-without-validation-and-integrity-checking/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/authorization-bypass-through-user-controlled-sql-primary-key-cwe-566/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unsynchronized-access-to-shared-data-in-a-multithreaded-context-cwe-567/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/call-to-thread-run-instead-of-start/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-573-improper-following-of-specification-by-caller/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-578-use-of-class-loader/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/j2ee-bad-practices-non-serializable-object-stored-in-session/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/object-model-violation-just-one-of-equals-and-hashcode-defined/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/explicit-call-to-finalize/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/attempt-to-access-child-of-a-non-structure-pointer/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/symbolic-name-mapping-correct-object/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/declaration-of-catch-for-generic-exception/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/file-descriptor-leak/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-412-unrestricted-access-lock/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/direct-request-forced-browsing/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unparsed-raw-web-content-delivery/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-439-behavioral-change-new-version-environment/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-453-insecure-default-variable-initialization/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/non-exit-on-failed-initialization/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-initialization-of-a-variable-cwe-456/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incomplete-cleanup/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-460-improper-cleanup-on-thrown-exception/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-sizeof-on-pointer-type-cwe-467/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-default-case-in-multiple-condition-expression-cwe-478/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-incorrect-operator-cwe-480/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-481-assigning-comparing/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/comparing-instead-of-assigning/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-483-incorrect-block-delimitation/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-484-omitted-break-statement-in-switch/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/reliance-on-package-level-scope/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/public-cloneable-method-without-final-object-hijack-cwe-491/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-inner-class-containing-sensitive-data/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/critical-public-variable-without-final-modifier-cwe-493/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/serializable-class-containing-sensitive-data-cwe-499/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/public-static-field-not-marked-final-cwe-500/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/logic-time-bomb-cwe-511/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-cache-containing-sensitive-information-cwe-524/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-version-control-repository-to-unauthorized-control-sphere/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-530-exposure-of-backup-file-to-unauthorized-control-sphere/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/inclusion-of-sensitive-information-in-test-code/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insertion-of-sensitive-information-into-log-file-cwe-532/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/inclusion-of-sensitive-information-in-source-code-cwe-540/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-543-use-of-singleton-pattern-without-synchronization-in-multithreaded-context/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/files-directories-accessible-to-external-parties/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-560-use-of-umask-with-chmod-style-argument/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-561-dead-code/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/finalize-method-without-super-finalize/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-570-expression-is-always-false/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-571-expression-is-always-true/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-574-ejb-bad-practices-synchronization-primitives/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-575-ejb-bad-practices-use-of-awt-swing/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-576-ejb-bad-practices-java-io/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-577-ejb-bad-practices-use-of-sockets/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/clone-method-without-super-clone/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/array-declared-public-final-static/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-583-finalize-method-public/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-584-return-inside-finally-block/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/empty-synchronized-block/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/assignment-of-fixed-address-pointer/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/free-of-memory-not-on-the-heap-cwe-590/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/sensitive-data-storage-in-improperly-locked-memory/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/j2ee-framework-saving-unserializable-objects-to-disk/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/comparison-of-object-references-instead-of-object-contents-cwe-595/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-http-request-with-sensitive-query-string-cwe-598/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-599-missing-validation-of-openssl-certificate/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/uncaught-exception-in-servlet/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/url-redirection-to-untrusted-site-open-redirect/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-602-client-side-enforcement-of-server-side-security/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-client-side-authentication/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unchecked-input-for-loop-condition/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/struts-non-private-field-actionform-class/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/double-checked-locking/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-restriction-of-xml-external-entity-reference/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insufficient-session-expiration-cwe-613/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/sensitive-cookie-without-secure-flag/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incomplete-identification-of-uploaded-file-variables-php/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/reachable-assertion-cwe-617/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-619-dangling-database-cursor/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unverified-password-change-cwe-620/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/variable-extraction-error-cwe-621/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-622-improper-validation-of-function-hook-arguments/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/executable-regular-expression-error-cwe-624/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-626-null-byte-interaction-error/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/dynamic-variable-evaluation-cwe-627/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/function-call-with-incorrectly-specified-arguments/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/not-failing-securely/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-637-unecessary-complexity-in-protection-mechanism/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/not-using-complete-mediation-cwe-638/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/authorization-bypass-through-user-controlled-key/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/weak-password-recovery-mechanism-for-forgotten-password/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-641-improper-restriction-of-names-for-files-and-other-resources/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/xpath-injection-cwe-643/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-neutralization-of-http-headers-for-scripting-syntax/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/overly-restrictive-account-lockout-mechanism/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-646-reliance-on-file-name-or-extension-of-externally-supplied-file/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-non-canonical-url-paths-for-authorization-decisions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-use-of-privileged-apis/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/reliance-on-obfuscation-or-encryption-of-security-relevant-inputs-without-integrity-checking/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/trusting-http-permission-methods-on-the-server-side/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/xquery-injection/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-653-improper-isolation-compartmentalization/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/reliance-on-a-single-factor-in-security-decision/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-655-insufficient-psychological-acceptability/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/reliance-on-security-through-obscure/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/violation-of-secure-design-principles-cwe-657/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-synchronization-cwe-662/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-664-improper-control-of-a-resource-through-its-lifetime/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-665-improper-initialization/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-667-improper-locking/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-resource-to-wrong-sphere-cwe-668/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-669/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/always-inorrect-control-flow-implementation/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-671-lack-of-administrator-control-over-security/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/operation-on-a-resource-after-expiration-or-release/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-673-external-influence-of-sphere-definition/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/uncontrolled-recursion-cwe-674/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-675-multiple-operations-on-resource-in-single-operation-context/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-potentially-dangerous-function-cwe-676/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/integer-overflow-to-buffer-overflow-cwe-680/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-681/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-calculation/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-683-function-call-with-incorrect-order-of-arguments/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-684/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/function-call-with-incorrect-number-of-arguments-cwe-685/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-686-function-call-with-incorrect-argument-type/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-687-function-call-with-incorrectly-specified-argument-value/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/function-call-with-incorrect-variable-or-reference-as-argument/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-689-permission-race-condition-during-resource-copy/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unchecked-return-value-null-pointer-dereference/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-691-insufficient-control-flow-management/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incomplete-denylist-cross-site-scripting/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/protection-mechanism-failure-cwe-693/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-694-use-of-multiple-resources-with-duplicate-identifier/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-low-level-functionality/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-696/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/execution-after-redirect/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-703-improper-check-handling-of-exceptional-conditions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-704/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-control-flow-scoping-cwe-705/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-706-use-of-incorrectly-resolved-name-or-reference/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-707-improper-neutralization/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-ownership-assignment-cwe-708/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-710-improper-adherence-to-coding-standards/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-permission-assignment-critical-resource/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/compiler-optimization-security-critical-code/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-749-exposed-dangerous-method-or-function/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-check-unusual-conditions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-exceptional-conditions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/selection-of-less-secure-algorithm-during-negotiation-cwe-757/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-758-reliance-on-undefined-behavior/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-a-one-way-hash-without-a-salt/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-a-one-way-hash-with-predictable-salt/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/free-of-pointer-not-at-start-of-buffer/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/mismatched-memory-management-routines/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/multiple-locks-of-a-critical-resource/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-765-multiple-unlocks-of-a-critical-resource/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/access-critical-private-variable-via-public-method/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/allocation-of-resources-without-limits-or-throttling/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-restriction-of-recursive-entity-references-in-dtds/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/regular-expression-without-anchors/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insufficient-logging-cwe-778/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/logging-of-excessive-data-cwe-779/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-rsa-algorithm-without-oaep/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-781-improper-address-validation-in-i-octl-method-neither/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposed-ioctl-insufficient-access-control/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-784-reliance-on-cookies-without-validation-and-integrity-checking-in-a-security-decision/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-path-manipulation-function-without-maximum-sized-buffer/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/out-of-bounds-write/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/authentication-bypass-alternate-path-channel/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/authentication-bypass-by-alternate-name/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cleartext-storage-in-the-registry/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cleartext-transmission-of-sensitive-information-cwe-319/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/context-switching-race-condition/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/creation-of-chroot-jail-without-changing-working-directory/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/creation-of-temporary-file-in-directory-with-insecure-permissions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/creation-of-temporary-file-with-insecure-permissions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-178-improper-handling-of-case-sensitivity/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-223/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-277-insecure-inherited-permissions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-278-insecure-preserved-inherited-permissions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-279/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-282-improper-ownership-management/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-307-improper-restriction-of-excessive-authentication-attempts/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-334-small-space-of-random-values/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-349/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-354-improper-validation-of-integrity-check-value/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-357-insufficient-ui-warning/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-367-toctou-race-condition/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/cwe-372-incomplete-internal-state-distinction/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/double-decoding-of-the-same-data/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-private-personal-information-to-an-unauthorized-actor/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/exposure-of-sensitive-information-due-to-incompatible-policies/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/generation-of-error-message-containing-sensitive-information/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-access-control-cwe-284/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-check-for-certificate-revocation/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-check-for-dropped-privileges-cwe-273/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-following-of-a-certificate-chain-of-trust/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-handling-of-extra-parameters/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-validation-of-certificate-expiration/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/improper-validation-of-certificate-with-host-mismatch/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-behavior-order-early-validation/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-default-permissions-cwe-276/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/incorrect-seed-prng/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insecure-temporary-file-cwe-377/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/insufficient-verification-of-data-authenticity/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/j2ee-bad-practices-direct-use-of-sockets/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/key-exchange-without-entity-authentication/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-authentication-for-critical-function/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-check-certificate-revocation-initial-check/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/missing-critical-step-in-authentication/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/observable-behavioral-discrepancy-with-equivalent-products-cwe-207/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/predictable-exact-value-from-previous-values/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/predictable-seed-prng/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/product-ui-does-not-warn-user-of-unsafe-actions/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/race-condition-cwe-362/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/same-seed-in-pseudo-random-number-generator-prng-cwe-336/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/session-fixation/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/small-seed-space-prng/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/trust-of-system-event-data/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/uncaught-exception-cwe-248/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/unverified-ownership-cwe-283/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-hard-coded-cryptographic-key/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/use-of-invariant-value-dynamically-changing-context/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/blog/wrap-around-error-cwe-128/ 2026-07-29T00:00:00-04:00 https://www.penscan.org/about/ https://www.penscan.org/blog/ https://www.penscan.org/contact/ https://www.penscan.org/features/ https://www.penscan.org/ https://www.penscan.org/pricing/ https://www.penscan.org/responsible-disclosure/ https://www.penscan.org/security/