invicti.com resources

invicti.com

Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-04-19.

JWT 4 Deser 2 SSRF 2 AI 1 API Sec 1 AuthZ 1 CSRF 1 RCE 1 SQLi 1 SSTI 1 XXE 1

Date Added	Resource	Excerpt
2026-04-19 2026	Broken Object-Level Authorization (BOLA): What It Is and How to Prevent It API Sec	Broken Object-Level Authorization (BOLA): What It Is and How to Prevent It
2026-04-17 2026	Code Execution via SSTI Ruby ERB (Invicti)SSTI	Code Execution via SSTI Ruby ERB (Invicti)
2026-04-17 2026	JWT Forgery via unvalidated jku parameter (Invicti)JWT	JWT Forgery via unvalidated jku parameter (Invicti)
2026-04-16 2026	Out-of-Band XML External Entity (OOB XXE)XXE	Out-of-Band XML External Entity (OOB XXE)
2026-04-16 2026	SQL Injection Cheat Sheet - Invicti SQLi	SQL Injection Cheat Sheet - Invicti
2026-04-11 2026	JWT Signature Bypass via unvalidated jku parameter JWT	JWT Signature Bypass via unvalidated jku parameter
2026-04-11 2026	JWT Signature Bypass via kid Path Traversal JWT	JWT Signature Bypass via kid Path Traversal
2026-04-11 2026	JWT Signature Bypass via kid SQL injection JWT	JWT Signature Bypass via kid SQL injection
2026-04-11 2026	OWASP Top 10 for LLMs 2025: Key Risks and Mitigation Strategies AI	OWASP Top 10 for LLMs 2025: Key Risks and Mitigation Strategies
2026-04-10 2026	Broken Access Control: How to Detect and Prevent AuthZ	Broken Access Control: How to Detect and Prevent
2026-04-10 2026	Preventing CSRF with the SameSite Cookie Attribute CSRF	Preventing CSRF with the SameSite Cookie Attribute
2026-04-10 2026	.NET JSON.NET Deserialization RCE Deser	.NET JSON.NET Deserialization RCE
2026-04-10 2026	Insecure Deserialization in Web Applications Deser	Insecure Deserialization in Web Applications
2026-04-03 2026	Rejetto HTTP File Server SSTI RCE (CVE-2024-23692) \| Invicti RCE	Rejetto HTTP File Server SSTI RCE (CVE-2024-23692) \| Invicti
2026-04-03 2026	Server-Side Request Forgery (SSRF) \| Invicti SSRF	Server-Side Request Forgery (SSRF) \| Invicti
2025-08-14 2025	Server-Side Request Forgery (SSRF)SSRF	Server-Side Request Forgery (SSRF) is a security vulnerability where an attacker can manipulate a server into making unintended requests. This can lead to unauthorized access to internal systems, data leaks, or server exploitation. SSRF can be exploited through various methods like URL manipulation or exploiting insecure server configurations. To prevent SSRF attacks, it is crucial to validate and sanitize user input, restrict server access to sensitive resources, and implement secure coding practices. Regular security audits and updates are essential to identify and mitigate SSRF vulnerabilities to protect servers and data from exploitation.