scan4secrets report

Runtime.getRuntime().exec("sh -c " + intent.getStringExtra("cmd"))  // cmd injection (CWE-78)

ProcessBuilder(listOf("convert", validated(file), "out.png")).start()

os.system("ping -c 1 " + host)                          # command injection (CWE-78)

subprocess.run(["ping", "-c", "1", host], shell=False, check=True)

cp.exec('convert ' + req.query.file);                     // command injection (CWE-78)

execFile("ping", ["-c", "1", host], (e, out) => { ... })

RUN curl -fsSL https://get.example.com/install.sh | bash   # remote script piped to shell (CWE-494)

RUN curl -fsSLo i.sh https://x/i.sh && echo "<sha256>  i.sh" | sha256sum -c && sh i.sh

webView.addJavascriptInterface(JsBridge(), "android")               // Android JS bridge (CWE-749)

// prefer WebMessageListener with a fixed allowlisted origin

return <div dangerouslySetInnerHTML={{ __html: html }} />;

<div dangerouslySetInnerHTML={{ __html: DOMPurify.sanitize(html) }} />

cursor.execute("SELECT * FROM users WHERE name = '%s'" % host)  # SQL injection (CWE-89)

cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))

requests.get(request.args.get("url"), verify=False)     # SSRF + disabled TLS (CWE-918/295)

host = urlparse(url).hostname
if host not in ALLOWED_HOSTS: abort(400)

requests.get(request.args.get("url"), verify=False)     # SSRF + disabled TLS (CWE-918/295)

requests.get(url, verify=True)         # or verify="/path/ca-bundle.pem"

open("/data/" + request.args.get("f"))                  # path traversal (CWE-22)

base = Path("/srv/data").resolve()
target = (base / name).resolve()
if base not in target.parents: abort(403)

res.send(`<h1>${req.query.q}</h1>`);                      // reflected XSS (CWE-79)

res.send(`<h1>${escapeHtml(req.query.q)}</h1>`);

db.query(`SELECT * FROM u WHERE id = ${req.params.id}`);  // SQL injection (CWE-89)

db.query("SELECT * FROM users WHERE id = ?", [userId]);

s3cr3tCl13ntV4lu

0Iael9zksjdhfg8273hdksjf

Sup3rP@ssw0rdDB

aGVsbG9lbmNyeXB0aW9ua2V5MTIz

eAxbYmFzaWM6Y3JlZHM=

hashlib.md5(host.encode())                              # weak hash (CWE-327)

hashlib.sha256(data).hexdigest()
bcrypt.hashpw(pw, bcrypt.gensalt())    # passwords

res.redirect(req.query.next);                             // open redirect (CWE-601)

const dest = SAFE_PATHS.has(req.query.next) ? req.query.next : "/";
res.redirect(dest);

<compilation debug="true"/>                    <!-- debug enabled (CWE-11) -->

<compilation debug="false" targetFramework="4.8" />

<customErrors mode="Off"/>                     <!-- stack traces exposed -->

<customErrors mode="RemoteOnly" defaultRedirect="~/Error" />

<pages validateRequest="false"/>               <!-- request validation off (CWE-79) -->

<pages validateRequest="true" />
<httpRuntime requestValidationMode="4.5" targetFramework="4.8" />

xyz23kdt3uij3430xA9

pk7Hs92jLm4nQr8tVw1zXy