devwerks

5 ms·

1. 1.▲
   by devwerks 3y ago

   Security Risk Advisors | Senior Software Development Engineer (SDE III) | REMOTE (USA) Full time | https://sra.io/careers/ We're looking for a Senior Java Engineer experienced with Java web app frameworks such as
2. 2.▲
   by devwerks 3y ago

   Security Risk Advisors | Senior Software Development Engineer (SDE III) | REMOTE (USA) Full time | https://sra.io/careers/ We're looking for a Senior Java Engineer experienced with Java web app frameworks such as
3. 3.▲
   by devwerks 4y ago

   Security Risk Advisors | Senior Software Development Engineer | REMOTE (Philadelphia, PA) Fulltime | https://sra.io We're looking for a Senior Engineer, preferability fullstack, but frontend or backend focused is great too!
4. 4.▲
   by devwerks 11y ago

   I would also suggest to add some validation to your file upload. Currently you are allowing arbitrary files to be uploaded. Even though it is password protected, it is still trivial to brute force even with your sleep(3). The danger with al
5. 5.▲
   by devwerks 11y ago

   It's great that you had a need and tackled it by writing a script. However, after a brief look at your source, you have a directory traversal vulnerability - there may be other issues too. You are taking a query parameter "d"