Fortify Audit Workbench 筆記索引

• Password Management: Password in Configuration File(明文存儲密碼)
  https://www.cnblogs.com/mahongbiao/p/12496042.html
• Command Injection(命令注入)
  https://www.cnblogs.com/mahongbiao/p/12494308.html
• Unreleased Resource: Database 未釋放資源：數據庫
  https://www.cnblogs.com/mahongbiao/p/12494278.html
• SQL Injection SQL注入
  https://www.cnblogs.com/mahongbiao/p/12494234.html
• Path Manipulation 路徑篡改
  https://www.cnblogs.com/mahongbiao/p/12494108.html
• Header Manipulation HTTP請求頭篡改
  https://www.cnblogs.com/mahongbiao/p/12494057.html
• Dynamic Code Evaluation: Code Injection 動態代碼執行：代碼注入
  https://www.cnblogs.com/mahongbiao/p/12493998.html
• Cross-Site Scripting: Persistent XSS
  https://www.cnblogs.com/mahongbiao/p/12493915.html
• Cookie Security: Cookie not Sent Over SSL Cookie未使用SSL加密
  https://www.cnblogs.com/mahongbiao/p/12493365.html
• Access Control: Database 數據庫訪問控制
  https://www.cnblogs.com/mahongbiao/p/12493343.html
• File Disclosure: Spring 文件泄露（Spring框架）
  https://www.cnblogs.com/mahongbiao/p/12862858.html
• Privacy Violation 隱私泄露
  https://www.cnblogs.com/mahongbiao/p/12862884.html
• Privacy Violation: Heap Inspection 隱私泄露（堆檢查）
  https://www.cnblogs.com/mahongbiao/p/12862885.html
• Race Condition: Singleton Member Field 競爭條件:單例的成員字段
  https://www.cnblogs.com/mahongbiao/p/12862899.html