Category: Code Security

path traversal attack - file upload vulnerability

Path Traversal in File Uploads: How Developers Create Their Own Exploits

Stop a path traversal attack before it starts. Learn how insecure uploads create a file upload vulnerability and how to secure your handlers.
bepinex.configurationmanager

BepInEx.ConfigurationManager: How Insecure Settings Expose Sensitive Data

Learn how to secure bepinex.configurationmanager settings and prevent leaked tokens or paths with safe config practices and automated checks!
hangfire .net - background job processing c#

Hangfire .NET Jobs: How Background Tasks Create Hidden Vulnerabilities

Secure hangfire .net and background job processing c# by avoiding hidden vulnerabilities, protecting dashboards, and validating job inputs.
c# httpclient - httpclient c# - c sharp httpclient

C# HttpClient: Common Security Pitfalls and Safe Practices

Secure C# HttpClient usage is critical. How misused C sharp HttpClient patterns expose data? And configure safe requests?
c# regex - regex for c# - regex c#

C# Regex DoS: When Patterns Become Attack Vectors

C# Regex vulnerabilities trigger ReDoS. How unsafe regex for C# patterns cause backtracking risks and how to secure regex with timeouts?
ilspy - what is decompile in assembly - dotnet decompiler

ILSpy and .NET Decompiler Risks: What Your Assemblies Reveal

ILSpy shows what is decompile in assembly: dotnet decompiler tools expose secrets, logic, and metadata, how to protect your .NET assemblies.
system.text.json - jsonserializer - system text json serialization

System.Text.Json Defaults in .NET: When Convenience Opens Data Exposure

System.Text.Json defaults can expose data. How JsonSerializer risks arise, how to secure system.text.json serialization to prevent leaks?
MCP Security

MCP Security: Protecting the Model Context Protocol

Learn model context protocol and MCP security basics plus server security best practices for safer AI–DevOps.
6 min read
.net 8.0

.NET 8 Security Updates Every Developer Should Know

Essential .NET 8.0 security updates, from modern crypto to safer identity, runtime hardening, and secure CI/CD practices for resilient apps!
static analysis vs dynamic analysis - static vs dynamic analysis - Static Testing vs Dynamic Testing - static vs dynamic code analysis

Static Analysis vs Dynamic Analysis: Key Differences in AppSec

Static vs dynamic analysis explained. Discover static testing vs dynamic testing and how Xygeni enhances code security.
5 min read
async vs sync - synch vs sync - c# async

Async vs Sync in C#: Why It’s More Than Just Performance

Secure C# async vs sync development: understand synch vs sync risks, avoid race conditions, and build safer asynchronous code!
penetration testing vs vulnerability scanning - vulnerability scanning vs penetration testing - vulnerability scan vs penetration test

Penetration Testing vs Vulnerability Scanning: What Developers Need to Know

Compare penetration testing vs vulnerability scanning. Learn how DevSecOps teams secure code and automate testing in CI/CD.
6 min read