Understanding vulnerabilities and exploits
A vulnerability is an error in the code of our application, or in the configuration that it produces, that an attacker can use to change the behavior of the application, such as injecting code or accessing private data.
A vulnerability also can be a weakness in the security of a system that can be exploited to gain access to it. These can be exploited in two ways: remotely and locally.
A remote attack is one that is made from a different machine than the one being attacked, while a local attack is one performed, as its name implies, locally on the machine being attacked. These attacks are based on a series of techniques designed to gain access and elevate privileges on that machine.
One of the main problems we have with automatic scanners is that they cannot test for all types of vulnerabilities and can give false positives that have to be investigated and analyzed manually. The non-detection of some vulnerabilities and the classification...
