OculusCyber Logo

OculusCyber

Home

Browse Topics


Articles

Performing code review of Java applications

1. Preparation Before touching the code: Understand the architecture: frameworks (Spring Boot, Struts, JSP, Servlets), libraries, and data flows. Id...

By Admin

Nov 9, 2025

Secure code review of Java applications and code

1. Preparation Before touching the code: Understand the architecture: frameworks (Spring Boot, Struts, JSP, Servlets), libraries, and data flows. Id...

By Admin

Nov 9, 2025

Prioritization Approach for Vulnerability Findings *

Prioritization Approach for Vulnerability Findings Triaging plays a major role in determining which vulnerabilities to fix first. My prioritization ap...

By Admin

Nov 9, 2025

What is SARIF format? Benefits for Integration of various scan tools

SARIF (Static Analysis Results Interchange Format) is an open, standardized, JSON-based format for the output of static analysis tools . It was deve...

By oculus

Nov 9, 2025

A sample format of Checkmarx SAST output format

Checkmarx SAST findings data is available in formats such as JSON, XML, PDF, and CSV reports and contains detailed information about identified vulner...

By oculus

Nov 9, 2025

The Ultimate Guide to Vulnerability Databases and Scoring Systems: CVE, CVSS, CWE, EPSS, KEV, and Beyond

Excellent — here's a comprehensive list of the major vulnerability databases and scoring systems , along with short, clear explanations for each. T...

By oculus

Nov 2, 2025