The background Recently while performing an application penetration test for one of our clients we discovered a very serious arbitrary...

Defining the issue Everyone is familiar with reflected issues like XSS and HTML tampering, but what about when this isn't glaringly...

What do we mean by user enumeration? User enumeration is a simple class of vulnerability much like any other enumeration of data it means...