My Heart Security Vulnerabilities

MY HEART ❕ Password submitted using GET method ▸ ❕ Open redirection [5] ▸ ❕ Unencrypted communications [3] ❗ XML external entity injection [8] ▸ ❗ LDAP injection [15] ▸ ❗ Server-side JavaScript code injection ▸ ❗ Python code injection [3] ▸ ❗ SSI injection [4] ▸ ❗ Serialized object in HTTP message [40] ▸ ❕ XML injection [4] ▸ ❕ SMTP header injection [2] ❗ SQL injection [116] ❗ Out-of-band resource load (HTTP) [13] ❗ File path manipulation [13] ❗ Server-side template injection [19] ❗ Cross-origin resource sharing; arbitrary origin trusted [12]

A three-panel meme shows a heart becoming increasingly blurred and frantic as it is confronted with progressively more dangerous web security vulnerabilities. The joke treats a security tester’s heart as if it physically races when seeing injection flaws and other critical findings, with the final panel representing overwhelming excitement or panic.

• @infosecmemes / 174 2020-01-30
• @profunctor_io / 4022 2020-02-15