A vulnerability is a weakness that can compromise a system’s security. Studying the underlying cause is more useful than memorising attack names alone.
Security Framework
Vulnerabilities
Common ways software assumptions and security boundaries fail.
Introduction
Why it matters
Recognising unsafe input handling, missing access checks and unintended data exposure improves development and incident triage. Understanding preconditions and impact also helps distinguish a reproducible security issue from a speculative concern.
Key topics to explore
- Injection and unsafe interpretation of input
- Cross-site scripting and output encoding
- Broken access control and object ownership
- Cross-site request forgery and session context
- Server-side request forgery and sensitive data exposure
Practice & notes
Possible first exercise: Use a deliberately vulnerable local lab to examine one failure at a time. Record its cause, preconditions, impact and a test that demonstrates the fix.
Future notes will record the setup, observations, open questions and principles learned. This exercise is a starting idea, not a completed assessment.