Application Security
CWE-761 Free of Pointer Not at Start of Buffer in C
Calling free on a pointer that has moved into the middle of a heap buffer corrupts memory. See the pattern, how ASan finds it, and the simple fix.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-760 One-Way Hash with a Predictable Salt: Why It Fails
A constant or guessable salt gives you none of the protection a salt is meant to provide. See the pattern, the real examples, and the stronger fix.
Oct 18, 20264 min read
Application Security
CWE-76 Equivalent Special Elements: When Filters Miss Twins
Your filter blocks one dangerous character but not its equivalent. CWE-76 explains why fixed deny lists fail and what to do instead.
Oct 18, 20262 min read
Application Security
CWE-759 One-Way Hash Without a Salt: Password Storage Done Right
Unsalted password hashes fall to precomputed tables. Learn why salt alone is not enough, and what MITRE recommends instead for storing passwords.
Oct 18, 20264 min read
Application Security
CWE-758 Reliance on Undefined or Implementation-Defined Behavior
Code that works only because of how one compiler or platform behaves can break on the next build. Learn why it creates vulnerabilities and how to catch it.
Oct 18, 20262 min read
Application Security
CWE-757 Algorithm Downgrade: Negotiating Down to Weak Crypto
When two sides negotiate an algorithm, an attacker can push them toward the weakest one. See how downgrades work and how to set a floor on protocol and cipher.
Oct 18, 20263 min read
Application Security
CWE-756 Missing Custom Error Page: Stop Leaking Stack Details
Default error pages tell attackers which framework, database and paths you run. Learn how to replace them with a custom page and log the detail privately.
Oct 18, 20262 min read
Application Security
CWE-755 Improper Handling of Exceptional Conditions Explained
Detecting an error is half the job. CWE-755 is about what code does next: crash, swallow it, or fall back to something insecure. Examples and fixes inside.
Oct 18, 20264 min read
Application Security
CWE-754 Improper Check for Unusual or Exceptional Conditions
Unchecked return values and ignored edge cases turn rare events into attack paths. Learn what to check, how to test failure on purpose, and how to handle errors safely.
Oct 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.