OWASP_2025_A10 on ZAP

Buffer Overflow

Mon, 01 Jan 0001 00:00:00 +0000

Buffer overflow errors are characterized by the overwriting of memory spaces of the background web process, which should have never been modified intentionally or unintentionally. Overwriting values of the IP (Instruction Pointer), BP (Base Pointer) and other registers causes exceptions, segmentation faults, and other process errors to occur. Usually these errors end execution of the application in an unexpected way.

Exponential Entity Expansion (Billion Laughs Attack)

Mon, 01 Jan 0001 00:00:00 +0000

An exponential entity expansion, or “billion laughs” attack is a type of denial-of-service (DoS) attack. It is aimed at parsers of markup languages like XML or YAML that allow macro expansions.

Format String Error

Mon, 01 Jan 0001 00:00:00 +0000

A Format String error occurs when the submitted data of an input string is evaluated as a command by the application.

GraphQL Circular Type Reference

Mon, 01 Jan 0001 00:00:00 +0000

A circular reference was detected in the GraphQL schema, where object types reference each other in a cycle. This can be exploited by attackers to craft deeply recursive queries, potentially leading to Denial of Service (DoS) conditions.

Integer Overflow Error

Mon, 01 Jan 0001 00:00:00 +0000

An integer overflow condition exists when an integer used in a compiled program extends beyond the range limits and has not been properly checked from the input stream.