Application Security
CWE-806 Buffer Access Using Size of Source Buffer
Copying with the source size instead of the destination size is a classic overflow. Here is the pattern behind CWE-806 and how to stop it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-805 Buffer Access with Incorrect Length Value, Explained
CWE-805 is what happens when a copy or read uses the wrong length. See how it leads to overflows in C and C++ and the habits that prevent it.
Oct 18, 20265 min read
Application Security
CWE-804 Guessable CAPTCHA: How It Happens and How to Fix It
A CAPTCHA that a script can guess or recognize protects nothing. Here is how CWE-804 shows up in real products and what to do about it.
Oct 18, 20263 min read
Application Security
CWE-80 Basic XSS: Unescaped Script-Related HTML Characters
Characters like angle brackets and ampersands reach a web page unescaped. CWE-80 is the plain version of XSS, and encoding on output is the core fix.
Oct 18, 20263 min read
Application Security
CWE-8 J2EE Entity Bean Declared Remote: What Goes Wrong
Exposing a remote interface on an entity bean can expose its getters and setters to callers you never meant to trust. A look at CWE-8.
Oct 18, 20262 min read
Application Security
CWE-799 Improper Control of Interaction Frequency: Rate Limits
No limit on how often someone can call you means password guessing, coupon abuse and easy denial of service. See how CWE-799 appears and how to add limits that hold.
Oct 18, 20264 min read
Application Security
CWE-798 Use of Hard-coded Credentials: Find Them and Remove Them
Passwords and keys baked into code are shared by every install and impossible to rotate. See inbound and outbound forms of CWE-798, how to detect them, and how to fix them.
Oct 18, 20265 min read
Application Security
CWE-797 Only Filtering Special Elements at an Absolute Position
A filter that checks byte 10 and nothing else is easy to evade. See what CWE-797 means, why fixed offsets fail, and how to validate whole inputs.
Oct 18, 20262 min read
Application Security
CWE-796 Only Filtering Special Elements Relative to a Marker
Filtering only the start or end of a string, or only one argument, leaves other special elements alive. See how CWE-796 plays out and what to do instead.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.