Conviso Application Security

@conviso

In the AppSec market for over 14 years, Conviso has been growing continuously, spreading the Secure Development culture in companies, and empowering Developers

convisoappsec.com Joined March 2009

191 Following 1.4K Followers 1.3K Posts

Latest posts 5

Conviso Application Security @conviso Jan 23, 2025

Continuing our Fuzzing series! 🛠️
In this new article, @th1ag0p3 dives into the methodology for building a harness to perform fuzzing and identify issues in Android applications using the AFL++ fuzzer.
🔗 Read it now: bit.ly/3CmmRC3

#AppSec #Fuzzing #ApplicationSecurity

Conviso Application Security @conviso Jan 2, 2025

🚨 Uncovering Rails Vulnerabilities! 🚨
Discover how an Arbitrary File Write can escalate to RCE in restricted Rails apps and learn how to mitigate it.

📖 By @gqsilva and @rick2600
🔗 bit.ly/4gC47NN

#AppSec #Rails #RCE

blog.convisoappsec.com From Arbitrary File Write to RCE in Restricted Rails apps We describe a technique that can be used to achieve remote code execution (RCE) from an arbitrary file write vulnerability by abusing the cache mechanism of Bootsnap.

Conviso Application Security @conviso Dec 11, 2024

🔒 Manage vulnerable libraries effectively!

Using third-party libraries can expose your applications to cyber threats. In our latest article, @matheus_pnsh explains how EPSS helps prioritize and fix vulnerabilities efficiently.

bit.ly/3VvJ3jy

#AppSec #EPSS

Conviso Application Security @conviso Nov 28, 2024

📱 Curious about Fuzzing in Android? @th1ag0p3x dives into how this technique helps uncover vulnerabilities in native components and why it's a game-changer for app security.

👉 Read the full article: bit.ly/4ePX5n1
#AppSec #Android #Fuzzing #CyberSecurity

blog.convisoappsec.com Introduction to Fuzzing Android Native Components Discover how fuzzing can identify critical vulnerabilities in native Android components, strengthening device security.

Conviso Application Security @conviso Aug 29, 2024

🔎 We’ve analyzed the CVE-2024-43044 vulnerability! Our experts, @gqsilva and @rick2600, developed a POC to help you test if your environment is vulnerable. Learn more and secure your applications!

bit.ly/4e1Idlv

#Conviso #Vulnerabilities #CVE202443044