Overview Many vulnerabilities in modern web applications occur due to the improper handling of user-supplied input. Command injection, cross-site scripting, XML External Entity (XXE) injections, and ...

This API, powered by NestJs, MySQL, and TypeORM, serves as the backend for my Art Query Web App. It encompasses modules for authentication, user management, and saving artworks, providing a ...

The vulnerability exists in the user.get API endpoint that can be exploited by a non-admin user with API access, including accounts with the default User role. The SQL injection flaw exists in the ...