Web security learning note-Common Security Vulnerability types and attack types

Common security vulnerability types

Security Vulnerabilities	Example
Weak Password	§ The employee uses an empty or default password
Software without timely Patching	§ The patch is not the latest. § No security is used for timely repairProgram
Improperly configured software	§ The Service has excessive permissions. The service runs with a local system user account.
Social Engineering	§ The customer service administrator unconfirmed the speaker's identity and directly reset the password
Weak Internet connection security	§ Unnecessary services and unnecessary ports § firewall is incorrectly used
Unencrypted Data Transmission	§ Verification packages are sent in plain text. § important data is sent on the Internet in plain text format.
Buffer Overflow	§ Untrusted processes run reliablyCode

Common attack types