C#
Pages46
SQL Injection
C# SQL injection
Command Injection
Command and argument injection risks in C# Process APIs and safer process execution.
Path Traversal
C# path traversal
Zip Slip
Writes outside the extraction directory through unvalidated ZIP entry paths
Server-Side Request Forgery
C# server-side request forgery
XML External Entities (XXE)
XML external entities in C#
Missing XML Schema Validation
Missing XML schema validation in C#
Insecure Deserialization
Preventing unsafe deserialization of untrusted data in C#
Weak Cryptography
Weak cryptography in C#
Predictable Randomness
Predictable randomness in C#
Disabled Certificate Validation
Disabled certificate validation in C#
Cleartext Transmission
Cleartext transmission in C#
Insecure SQL Connection
Transport security disabled for a C# SQL connection
Insufficient Cryptographic Key Size
Insufficient cryptographic key size in C#
Inadequate RSA Padding
Inadequate RSA padding in C#
C# code injection
Execution or compilation of untrusted C# code strings
Expression injection
Expression injection in C# System.Linq.Dynamic.Core
LDAP injection
LDAP search filter injection in C#
XPath injection
XPath injection in C#
Log forging
Log forging with C# Microsoft.Extensions.Logging (CWE-117)
Sensitive data logging
Logging sensitive data in C#
Uncontrolled composite format strings in C#
External input controls a .NET composite format string
XML injection
XML injection in C#
Assembly path injection
Loading C# assemblies from untrusted paths
Resource injection
Database resource injection in C# (CWE-99)
Template injection
Untrusted input compiled or evaluated as C# template source
Weak password hashing
Weak password hashing in C#
Open redirect
Open redirects in C#
Cross-site scripting in ASP.NET Core HTML responses
Reflected XSS when ASP.NET Core returns request text directly as HTML
HTTP response splitting
HTTP response splitting in C#
Cookies without Secure
Cookies without Secure in C#
Cookies without HttpOnly
Cookies without HttpOnly in C#
CORS Misconfiguration
CORS misconfiguration in C#
Missing JWT Signature Verification
Missing JWT signature verification in C#
Password Reset Link Poisoning
Password reset link poisoning in C#
Exception information exposure
Exception information exposure in C#
Weak password policy
Weak password policy in C#
Unsafe file uploads
Unsafe file uploads in C#
Mass assignment
Mass assignment in C#
Sensitive information in URLs
Sensitive information in C# URLs
Disabled CSRF protection
Disabled CSRF protection in C#
Missing rate limits on authentication endpoints
Missing rate limits on C# authentication endpoints
User-controlled role assignment
User-controlled role assignment in C#
Missing function-level access control
Missing function-level access control in C#
Insecure direct object references
Insecure direct object references in C#
Excessive Data Exposure
Excessive data exposure in C#