Application Security
CWE-561 Dead Code: How It Happens and How to Fix It
Dead code can never run, and that is often a sign something else is wrong. Here is how it appears, why it matters, and how to remove it.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-560 umask() With a chmod-style Argument
umask() masks permission bits out, chmod() sets them. Mixing them up gives files the wrong permissions. What CWE-560 is and how to fix it in C.
Oct 18, 20262 min read
Application Security
CWE-56 Wildcard Path Equivalence: When * Lists Your Files
A trailing asterisk in a path has exposed directory listings in servers. CWE-56 explained, with checks and a fix.
Oct 18, 20262 min read
Application Security
CWE-558 Use of getlogin() in Multithreaded Applications
getlogin() is not reentrant, so another thread can change the username you just read. Why CWE-558 matters and why getlogin_r() is only part of the answer.
Oct 18, 20263 min read
Application Security
CWE-556 ASP.NET Identity Impersonation: Least Privilege Gone Wrong
Running an ASP.NET app under impersonated credentials can hand it more power than it needs. What CWE-556 means and the least privilege fix.
Oct 18, 20262 min read
Application Security
CWE-555 J2EE Plaintext Password in Configuration Files
A plaintext password in a J2EE configuration file is open to anyone who can read it. How CWE-555 happens and how to stop storing credentials that way.
Oct 18, 20263 min read
Application Security
CWE-554 ASP.NET Without an Input Validation Framework
Skipping ASP.NET's validation framework leaves every field to ad hoc checks, and unchecked input drives XSS and SQL injection. What CWE-554 means and the fix.
Oct 18, 20263 min read
Application Security
CWE-553 Command Shell in an Accessible Directory
A shell script left in cgi-bin or any web-reachable folder can hand over the server. What CWE-553 means and how to sweep it out.
Oct 18, 20262 min read
Application Security
CWE-552 Files or Directories Accessible to External Parties
Sensitive files under a web root, archives that include too much, and public cloud buckets all fall under CWE-552. How it happens and how to lock it down.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.