Tag: vulnerabilities
Browse 26 practical software engineering resources tagged with "vulnerabilities". Discover code recipes, design patterns, documentation templates, and in-depth guides to help you build, deploy, and maintain production-ready solutions involving vulnerabilities. Each resource is written for engineers who ship real systems, with copy-paste examples and practical trade-offs.
Vulnerability Management
Vulnerability management is the continuous process of identifying, assessing, prioritizing, and remediating security weaknesses. It bridges development, operations, and security teams to reduce real risk.
The resources below cover scanning, dependency audits, CVSS, patch management, secure coding, and incident response. Each recipe shows how to find and fix vulnerabilities before they become incidents.
Every resource includes clear explanations, copy-paste code, and practical warnings. Use them to make informed decisions, avoid production pitfalls, and speed up your delivery. If you are just getting started, read the beginner-friendly articles first; if you are experienced, jump straight to the advanced patterns and architecture guides. New resources are added regularly, so bookmark this page and check back for the latest patterns.
Secure APIs with HTTP Security Headers
How to configure essential security headers like HSTS, CSP, and X-Frame-Options to protect APIs and...
Container Security Scanning
Scan container images for vulnerabilities, misconfigurations, and secrets with Trivy, Clair, and...
Protect Web Forms Against CSRF Attacks
How to prevent Cross-Site Request Forgery attacks using synchronizer tokens, SameSite cookies, and...
Data Privacy and GDPR Compliance
Implement data privacy controls, consent management, data anonymization, and GDPR-compliant data...
Schema-Based Data Validation with Zod in TypeScript
Validate and sanitize incoming data using Zod schemas with TypeScript inference, custom...
Implement Encryption at Rest for Databases and File Storage
How to encrypt sensitive data before storing it in databases, object storage, and backups using...
HMAC Request Signing
Secure API requests with HMAC-SHA256 signatures to ensure integrity and authenticity.
Implement OAuth 2.0 PKCE for Single-Page Applications
How to implement the OAuth 2.0 PKCE flow in single-page applications to securely authenticate users...
Password Hashing in Production
Securely hash and verify passwords using bcrypt, scrypt, and Argon2 with what works.
Scan Python Packages for Known CVEs with pip-audit
How to use pip-audit to scan Python dependencies for known vulnerabilities, configure ignore lists,...
Implement Rate Limiting for APIs and Web Applications
How to protect APIs and web endpoints from abuse using token bucket, sliding window, and fixed...
Implement Request Signing with HMAC
Secure API requests with HMAC signatures and AWS Signature v4 authentication for tamper-proof...
Security Headers
Harden web applications with HTTP security headers: CSP, HSTS, X-Frame-Options, and a thorough...
Prevent SQL Injection Attacks
How to write parameterized queries and use ORMs to eliminate SQL injection vulnerabilities across...
Live Database Credentials with HashiCorp Vault
How to use HashiCorp Vault to generate short-lived database credentials, eliminating hardcoded...
Prevent Cross-Site Scripting (XSS)
How to sanitize user input, escape output, and use Content Security Policy to prevent XSS attacks...
Dependency Vulnerability Triage Template
Template for triaging CVEs by severity and impact: vulnerability scoring, exploitability...
OWASP Top 10 Remediation Checklist
Checklist for tracking OWASP Top 10 vulnerability remediation per application: risk assessment, fix...
Penetration Test Remediation Template
A template for tracking security findings, assigning remediation owners, and validating fixes after...
Penetration Test Report Template
A template for penetration test reports covering scope, methodology, findings, severity ratings,...