Reference
Showing 40 of 508 terms.
The data-plane process on F5 BIG-IP systems that owns virtual servers, terminates client connections and executes traffic-processing modules such as APM. Because it handles unauthenticated network traffic and holds TLS keys and session state, a bug inside TMM is reachable without credentials and a crash takes every virtual server offline.
Transcoding is the conversion of audio or video from one format, codec or bitrate to another, usually on the fly so a client can play it. Media servers run it as a separate process that loads codec libraries.
A software component your application relies on indirectly, pulled in by a library you chose or bundled into a product you deployed rather than selected directly. A vulnerability in a widely reused transitive dependency exposes every product that ships it.
A trojanized update is a legitimate software release that an attacker has modified to include malicious code and then delivered through the vendor's normal update channel, so customers install it as routine patching.
A Trusted Location is a folder Microsoft Office treats as safe, so files saved there open with macros enabled and skip the Mark of the Web check. Microsoft advises using them sparingly and restricting who can write to them.
A security method requiring two different forms of verification to access an account.
A memory-safety bug (CWE-843) in which code accesses a resource using an incompatible type, such as reading a pointer as an integer. In JavaScript engines it typically arises when optimized code trusts an assumption about an object's shape that a callback has since invalidated, as in CVE-2026-85046.
Registering domain names that closely resemble legitimate ones, relying on misspellings or visual similarity to deceive victims or evade scrutiny. Beyond phishing, attackers use typosquatted infrastructure for command-and-control, as StyleSmuggler did with fake time-service domains like time.microsft.run.
A technique that circumvents Windows User Account Control, the prompt that asks a user to approve elevated actions, so that code can gain administrative privileges without the expected consent dialog. Malware loaders often attempt a UAC bypass to escalate from a user-level foothold.
Allows devices to automatically configure port forwarding—convenient but a security risk.
A scheme for representing characters in a URL as a percent sign followed by two hexadecimal digits, for example %50 for the letter P. Because a single path can be spelled in many valid encoded forms, security rules that match one literal spelling can be bypassed by an equivalent encoded variant.
A centralized logging system in Microsoft 365 that records user and admin activities across Exchange, SharePoint, Teams, and other services for security monitoring and compliance.
Unrestricted file upload is a weakness, catalogued as CWE-434, where an application accepts files of a dangerous type without enough checks on name, content or storage location, letting an attacker store files the server or browser may later execute.
A structured index published by a vendor listing available updates with versions, applicability rules and the locations of payload files. Update clients download the catalog, match it against a local inventory and fetch the payloads it references.
A vendor patch-numbering scheme in which fixes are applied incrementally on top of a fixed base version, so two nodes reporting the same version can differ in which security fixes they carry. WSO2 publishes the update level that carries each fix; inventories must track it per node.
A memory-safety bug in which a program keeps using a pointer to memory that has already been released. In the kernel, a use-after-free is a common starting point for privilege-escalation exploits because the freed memory can be reclaimed with attacker-controlled data.
A user access review is a periodic check that every account on a system still has an owner, a business need and the right level of access. Accounts that fail the check are disabled or reduced.
A logical network segment that separates devices even when physically connected to the same network.
The clustered file system VMware ESXi uses to store virtual machine files, such as .vmdk virtual disks, on shared datastores. Because many virtual machines' disks live on one datastore, an attacker with host access can encrypt or destroy them all at the storage layer at once.
A service that encrypts your internet connection and masks your IP address by routing traffic through secure servers.
A vendor security advisory is a vendor's official notice of a vulnerability in its product, listing affected and fixed versions, workarounds and sometimes indicators of compromise. It is the primary source for patch decisions.
A vendored dependency is third-party code copied into a project's own source tree or package instead of loaded from a shared system library. It pins a known version, but each vendored copy needs its own update when the original library is patched.
Vertical privilege escalation is an attack in which a user gains a higher level of access than their role allows, such as a read-only account obtaining administrator or superuser rights through a software flaw.
The use of a compensating control, such as a firewall rule that blocks a vulnerable endpoint, to reduce exposure to a vulnerability without changing the vulnerable code. It buys time before the real patch is applied but leaves the flaw in place, so it must be treated as a temporary measure with a defined expiry.
Voice phishing—a social engineering attack conducted via phone calls where attackers impersonate trusted entities to extract sensitive information or payments.
A per-project or per-group setting on platforms like GitLab that controls who can see it: public (anyone, including anonymous users), internal (any signed-in user), or private (explicit members only). Public projects expose API endpoints to unauthenticated callers.
A weakness in software, hardware, or processes that can be exploited by attackers to gain unauthorized access or cause harm.
WP-CLI is the command-line interface for WordPress. Administrators use it to manage plugins, themes, users and settings from a shell, and to verify core and repository plugin files against WordPress.org checksums.
A Windows feature that enables running Linux distributions natively on Windows without traditional virtual machines or dual-boot setups.
A security control placed in front of a web application that inspects HTTP requests and blocks those matching known-bad patterns or rules. Because rules that match literal strings can be evaded by encoding or otherwise obfuscating a request, a WAF reduces attack surface but does not remove the underlying vulnerability.
A malicious script placed in a web server's content directory that lets an attacker execute commands through HTTP requests. Web shells are a common persistence mechanism after remote code execution and are detected by looking for unexpected files in webapp directories.
An HTTP extension that lets clients read, write, move, and delete files on a remote web server. File-sync and file-sharing platforms commonly expose a WebDAV API for programmatic file access.
Microsoft's control for embedding Chromium-based web content inside Windows applications. The Evergreen runtime updates alongside Microsoft Edge, while a Fixed Version runtime is bundled by the application vendor and receives Chromium security fixes only when the vendor ships a new package.
A highly targeted phishing attack aimed at senior executives or high-value targets, often involving significant research and sophisticated impersonation.
A modern, lightweight VPN protocol known for high speeds and strong security.
WordPress automatic background updates are a core feature that installs releases without an administrator starting them. Administrators should still verify the installed version, because an update can stall without anyone noticing.
WordPress security keys and salts are random values in wp-config.php that WordPress uses to sign login cookies. Changing them invalidates every active session, which forces any attacker holding a stolen cookie to log in again.
The coordination of multi-step processes across services, where an engine schedules tasks, handles retries and passes data between steps. Orchestration engines often sit at the center of an environment with broad reach, which makes a compromised one especially damaging.
A file or directory whose permission bits allow any user on the system to modify it. When a privileged process reads, executes, or trusts content at such a location, an unprivileged user can replace that content and run code with the process's privileges.
Malware that spreads on its own from one system to the next without a user launching it each time, typically by abusing a network service, shared credential, or trusted management channel. A worm's self-propagation is what makes containment, not cleanup, the first response priority.