Application Security
CWE-257 Storing Passwords in a Recoverable Format
Encrypted passwords that can be decrypted are barely better than plaintext. CWE-257 explains why and what to store instead.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
CWE-256 Plaintext Storage of a Password: Why It Still Happens
Storing a password in plaintext hands it to anyone who can read the file or memory. CWE-256 covers how it happens, how to find it, and what to store.
Oct 18, 20265 min read
Application Security
CWE-253 Incorrect Check of Function Return Value: Checking the Wrong Thing
A return value check that tests the wrong condition is worse than none, because it looks safe. CWE-253 explains common mistakes and the fix.
Oct 18, 20265 min read
Application Security
CWE-252 Unchecked Return Value: The Failure You Never Noticed
When code ignores a function's return value, errors pass silently and later logic runs on false assumptions. CWE-252 explained with C examples.
Oct 18, 20265 min read
Application Security
CWE-250 Execution with Unnecessary Privileges: Least Privilege in Practice
Running code with more privilege than it needs turns small bugs into big ones. CWE-250 covers how it happens and how to cut privilege down.
Oct 18, 20265 min read
Application Security
CWE-25 Path Traversal with '/../filedir': Bypass and Fix
A check that only looks for dot-dot-slash at the start of input misses '/../' in the middle. How CWE-25 works and how to resolve paths properly.
Oct 18, 20262 min read
Application Security
CWE-248 Uncaught Exception: Crashes and Leaks from Unhandled Errors
An exception that nobody catches can crash a service or expose data. CWE-248 shows where it hides in Java, C++ and C#, and how to handle it.
Oct 18, 20263 min read
Application Security
CWE-246 J2EE Bad Practices: Opening Sockets Directly
CWE-246 flags J2EE code that talks over raw sockets instead of framework calls. Custom protocols tend to inherit hard security problems.
Oct 18, 20262 min read
Application Security
CWE-245 J2EE Bad Practices: Managing Connections Yourself
CWE-245 flags J2EE code that opens its own database connections instead of using the container's pooled resources. It is a quality weakness.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.