Vulnerabilities
Regular Expression Denial of Service Prevention Checklist
Catastrophic backtracking in regular expressions turns pattern matching into an exponential resource drain that exposes services to denial of service attacks.
code review
Everything TechSec Observer has reported about code review: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
WordPress Theme Vulnerabilities: Mechanics, Risks and Mitigation
Theme code executes with server privileges, meaning a single insecure template file can grant attackers full control over the database and file system.