Fortify Audit Workbench 笔记索引

• Password Management: Password in Configuration File(明文存储密码)
  
  https://www.cnblogs.com/mahongbiao/p/12496042.html
• Command Injection(命令注入)
  
  https://www.cnblogs.com/mahongbiao/p/12494308.html
• Unreleased Resource: Database 未释放资源：数据库
  
  https://www.cnblogs.com/mahongbiao/p/12494278.html
• SQL Injection SQL注入
  
  https://www.cnblogs.com/mahongbiao/p/12494234.html
• Path Manipulation 路径篡改
  
  https://www.cnblogs.com/mahongbiao/p/12494108.html
• Header Manipulation HTTP请求头篡改
  
  https://www.cnblogs.com/mahongbiao/p/12494057.html
• Dynamic Code Evaluation: Code Injection 动态代码执行：代码注入
  
  https://www.cnblogs.com/mahongbiao/p/12493998.html
• Cross-Site Scripting: Persistent XSS
  
  https://www.cnblogs.com/mahongbiao/p/12493915.html
• Cookie Security: Cookie not Sent Over SSL Cookie未使用SSL加密
  
  https://www.cnblogs.com/mahongbiao/p/12493365.html
• Access Control: Database 数据库访问控制
  
  https://www.cnblogs.com/mahongbiao/p/12493343.html
• File Disclosure: Spring 文件泄露（Spring框架）
  
  https://www.cnblogs.com/mahongbiao/p/12862858.html
• Privacy Violation 隐私泄露
  
  https://www.cnblogs.com/mahongbiao/p/12862884.html
• Privacy Violation: Heap Inspection 隐私泄露（堆检查）
  
  https://www.cnblogs.com/mahongbiao/p/12862885.html
• Race Condition: Singleton Member Field 竞争条件:单例的成员字段
  
  https://www.cnblogs.com/mahongbiao/p/12862899.html