DevelopersCoffee
- 53 skills
- 0 followers
- 1 week ago last updated
- ▌ Cwe 367 Race Condition Toctou · developerscoffeeUse this skill when you need to remediate CWE-367 (Race Condition (TOCTOU)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing race condition (toctou) issues.
- ▌ Cwe 798 Hardcoded Credentials · developerscoffeeUse this skill when you need to remediate CWE-798 (Hardcoded Credentials) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing hardcoded credentials issues.
- ▌ Cwe 820 Unsynchronized Access · developerscoffeeUse this skill when you need to remediate CWE-820 (Missing Synchronization) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing missing synchronization issues.
- ▌ Cwe 209 Error Message Exposure · developerscoffeeUse this skill when you need to remediate CWE-209 (Information Exposure Through Error Message) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing information exposure through error message issues.
- ▌ Cwe 306 Missing Authentication · developerscoffeeUse this skill when you need to remediate CWE-306 (Missing Authentication for Critical Function) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing missing authentication for critical function issues.
- ▌ Cwe 307 Brute Force Protection · developerscoffeeUse this skill when you need to remediate CWE-307 (Improper Restriction of Excessive Authentication Attempts) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper restriction of excessive authentication attempts issues.
- ▌ Cwe 319 Cleartext Transmission · developerscoffeeUse this skill when you need to remediate CWE-319 (Cleartext Transmission of Sensitive Information) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing cleartext transmission of sensitive information issues.
- ▌ Cwe 532 Sensitive Info In Logs · developerscoffeeUse this skill when you need to remediate CWE-532 (Sensitive Information in Logs) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing sensitive information in logs issues.
- ▌ Cwe 113 HTTP Response Splitting · developerscoffeeUse this skill when you need to remediate CWE-113 (HTTP Response Splitting) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing http response splitting issues.
- ▌ Cwe 284 Improper Access Control · developerscoffeeUse this skill when you need to remediate CWE-284 (Improper Access Control) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper access control issues.
- ▌ Cwe 287 Improper Authentication · developerscoffeeUse this skill when you need to remediate CWE-287 (Improper Authentication) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper authentication issues.
- ▌ Cwe 377 Insecure Temporary File · developerscoffeeUse this skill when you need to remediate CWE-377 (Insecure Temporary File) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing insecure temporary file issues.
- ▌ Cwe 434 Unrestricted File Upload · developerscoffeeUse this skill when you need to remediate CWE-434 (Unrestricted Upload of File with Dangerous Type) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing unrestricted upload of file with dangerous type issues.
- ▌ Cwe 501 Trust Boundary Violation · developerscoffeeUse this skill when you need to remediate CWE-501 (Trust Boundary Violation) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing trust boundary violation issues.
- ▌ Cwe 606 Unchecked Loop Condition · developerscoffeeUse this skill when you need to remediate CWE-606 (Unchecked Input for Loop Condition) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing unchecked input for loop condition issues.
- ▌ Cwe 693 Missing Security Headers · developerscoffeeUse this skill when you need to remediate CWE-693 (Missing Security Headers (Clickjacking)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing missing security headers (clickjacking) issues.
- ▌ Cwe 732 Improper File Permissions · developerscoffeeUse this skill when you need to remediate CWE-732 (Improper File Permissions) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper file permissions issues.
- ▌ Cwe 295 Insecure Tls Trust Manager · developerscoffeeUse this skill when you need to remediate CWE-295 (Insecure TLS/SSL Configuration) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing insecure tls/ssl configuration issues.
- ▌ Cwe 552 Files Accessible Externally · developerscoffeeUse this skill when you need to remediate CWE-552 (Files Accessible to External Parties) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing files accessible to external parties issues.
- ▌ Cwe 917 Expression Language Injection · developerscoffeeUse this skill when you need to remediate CWE-917 (Expression Language Injection) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing expression language injection issues.
- ▌ Cwe 326 Inadequate Encryption Strength · developerscoffeeUse this skill when you need to remediate CWE-326 (Inadequate Encryption Strength) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing inadequate encryption strength issues.
- ▌ Cwe 613 Insufficient Session Expiration · developerscoffeeUse this skill when you need to remediate CWE-613 (Insufficient Session Expiration) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing insufficient session expiration issues.
- ▌ Cwe 522 Insufficiently Protected Credentials · developerscoffeeUse this skill when you need to remediate CWE-522 (Insufficiently Protected Credentials) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing insufficiently protected credentials issues.
- ▌ Java Cwe Security Skills Collection · developerscoffee bundle53 AI-ready security remediation guides for Java vulnerabilities
- ▌ Cwe 1333 Redos · developerscoffeeUse this skill when you need to remediate CWE-1333 (ReDoS (Regular Expression Denial of Service)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing redos (regular expression denial of service) issues.
- ▌ Cwe 833 Deadlock · developerscoffeeUse this skill when you need to remediate CWE-833 (Deadlock) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing deadlock issues.
- ▌ Cwe 330 Weak Prng · developerscoffeeUse this skill when you need to remediate CWE-330 (Use of Insufficiently Random Values) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing use of insufficiently random values issues.
- ▌ Cwe 89 SQL Injection · developerscoffeeUse this skill when you need to remediate CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper neutralization of special elements used in an sql command issues.
- ▌ Cwe 91 XML Injection · developerscoffeeUse this skill when you need to remediate CWE-91 (XML Injection) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing xml injection issues.
- ▌ Cwe 22 Path Traversal · developerscoffeeUse this skill when you need to remediate CWE-22 (Improper Limitation of a Pathname to a Restricted Directory (Path Traversal)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper limitation of a pathname to a restricted directory (path traversal) issues.
- ▌ Cwe 601 Open Redirect · developerscoffeeUse this skill when you need to remediate CWE-601 (URL Redirection to Untrusted Site (Open Redirect)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing url redirection to untrusted site (open redirect) issues.
- ▌ Cwe 90 Ldap Injection · developerscoffeeUse this skill when you need to remediate CWE-90 (LDAP Injection) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing ldap injection issues.
- ▌ Cwe 93 Crlf Injection · developerscoffeeUse this skill when you need to remediate CWE-93 (CRLF Injection) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing crlf injection issues.
- ▌ Cwe 94 Code Injection · developerscoffeeUse this skill when you need to remediate CWE-94 (Code Injection) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing code injection issues.
- ▌ Cwe 362 Race Condition · developerscoffeeUse this skill when you need to remediate CWE-362 (Race Condition) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing race condition issues.
- ▌ Cwe 369 Divide By Zero · developerscoffeeUse this skill when you need to remediate CWE-369 (Divide By Zero) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing divide by zero issues.
- ▌ Cwe 643 Xpath Injection · developerscoffeeUse this skill when you need to remediate CWE-643 (XPath Injection) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing xpath injection issues.
- ▌ Cwe 190 Integer Overflow · developerscoffeeUse this skill when you need to remediate CWE-190 (Integer Overflow) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing integer overflow issues.
- ▌ Cwe 77 Command Injection · developerscoffeeUse this skill when you need to remediate CWE-77 (Improper Neutralization of Special Elements used in a Command (Command Injection)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper neutralization of special elements used in a command (command injection) issues.
- ▌ Cwe 780 Rsa Without Oaep · developerscoffeeUse this skill when you need to remediate CWE-780 (RSA Without OAEP Padding) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing rsa without oaep padding issues.
- ▌ Cwe 191 Integer Underflow · developerscoffeeUse this skill when you need to remediate CWE-191 (Integer Underflow) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing integer underflow issues.
- ▌ Cwe 327 Weak Cryptography · developerscoffeeUse this skill when you need to remediate CWE-327 (Use of a Broken or Risky Cryptographic Algorithm) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing use of a broken or risky cryptographic algorithm issues.
- ▌ Cwe 329 Missing Random Iv · developerscoffeeUse this skill when you need to remediate CWE-329 (Missing Random IV in CBC Mode) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing missing random iv in cbc mode issues.
- ▌ Cwe 359 Privacy Violation · developerscoffeeUse this skill when you need to remediate CWE-359 (Privacy Violation) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing privacy violation issues.
- ▌ Cwe 259 Hardcoded Password · developerscoffeeUse this skill when you need to remediate CWE-259 (Hardcoded Password) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing hardcoded password issues.
- ▌ Cwe 328 Weak Hash Algorithm · developerscoffeeUse this skill when you need to remediate CWE-328 (Weak Hash Algorithm (MD5/SHA1)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing weak hash algorithm (md5/sha1) issues.
- ▌ Cwe 400 Resource Exhaustion · developerscoffeeUse this skill when you need to remediate CWE-400 (Uncontrolled Resource Consumption) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing uncontrolled resource consumption issues.
- ▌ Cwe 78 Os Command Injection · developerscoffeeUse this skill when you need to remediate CWE-78 (Improper Neutralization of OS Command) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing improper neutralization of os command issues.
- ▌ Cwe 200 Information Exposure · developerscoffeeUse this skill when you need to remediate CWE-200 (Information Exposure) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing information exposure issues.
- ▌ Cwe 321 Hardcoded Crypto Key · developerscoffeeUse this skill when you need to remediate CWE-321 (Hard-coded Cryptographic Key) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing hard-coded cryptographic key issues.
- ▌ Cwe 347 JWT Signature Bypass · developerscoffeeUse this skill when you need to remediate CWE-347 (JWT Signature Bypass) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing jwt signature bypass issues.
- ▌ Cwe 776 XML Entity Expansion · developerscoffeeUse this skill when you need to remediate CWE-776 (XML Entity Expansion (Billion Laughs)) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing xml entity expansion (billion laughs) issues.
- ▌ Cwe 311 Non Encrypted Storage · developerscoffeeUse this skill when you need to remediate CWE-311 (Missing Encryption of Sensitive Data) vulnerabilities in Java code. Triggers on SAST findings, security reviews, or when fixing missing encryption of sensitive data issues.