Just a quick note to share a useful resource with you. Just came across a good article “25 common programming errors” for software programmers and software testers. Basically this is more useful for programmers but I think software testers can get insight on how developers can unknowingly leave bugs in software programs.
Each bug listed in this resource can lead to serious software vulnerabilities if not fixed. The top 25 security bugs list will help programmers to avoid some common but serious coding mistakes. For software testers list will be useful as a security testing checklist for Internet as well as for testing desktop application.
Here are few top security vulnerabilities discussed in detail in this article:
- Improper input validation
- Improper escaping of output or encoding
- SQL injection
- Cross-site scripting
- Race conditions
- Information leak in error messages
- Error while transmitting sensitive information
- Memory leak
- External control of critical data and file paths
- Improper initialization
- Improper authorization
- Client side security checks
I think, the most common security vulnerability mistake developers make is “Client side enforcement of server side security”.
Check out below article so that you can at least help developers for improving their code standards 
Top 25 common programming Errors
43 comments ↓
I think what u had told is right. It is good article. Thank u.
hi
its nice article.its very helpful fo all..
thank u
Yes, its a good information.
Good information dude. Input validation will be the top prior one always.
Thanks vijay for posting the link. That is really a great cumulative post helpful for security testers.
Keep posting such resources side by side.
Keep going..
Really Helpful information.Thanks for the wonderful article.
This article is very usefull for all tester
Great Article…Thanks for sharing
Very useful article.Keep up the good work.
I LIKE IT…. THNX BUDDY
Very Useful artical
Thanks a lot
Really wonderful information.It is very useful for testers as well as developrs also.
Hi Guys
It’s Nice article,It gives a valuable information
Thanks
Very Informative…..Thanks!!!!
This is a Good article for both developers and testing analysts. Thanks.
My estimate is that new programming languages or newer versions of the existing ones would address these programming errors in future. In the meantime, the programmers should be alert for these errors.
Inder P Singh
This particular concept is giving the heads up to both the DEV & QA to minimize the defects and improve the qulity on common aspects.
hi
this is QTP
Good one ..keep posting !!
This is a good article for all tester.
Yes it’s really helpful to all, Actually i am already work on it. not our application is little bit safe but some time if system slow it’s throw server exception error where shows function or procedure name also i think it’s also harmful, but i am not prove it how it’s harmful so plz explain me if possible.
hello every bady
i done a SQT(Software quality testing) course from noida. if any bady which r present on this site and doing job in any company regard to testng then plz let me know .
plz tell me about agile testing
NIce article.
wat is memory leaking?
[…] http://www.softwaretestinghelp...../#more-353 Category: Uncategorized | Comment (RSS) | Trackback […]
Good to know this information.
thank
Thanks for your information
Good Article for both developers & testers.
hai , i m new to this website.its very good site.i m a
Bsc fresher,i m interested to learn software testing in a
training insitute in B’lore.
i hav some Qs.Plz anyone answer…
1)what is manual testing actually(in real time scenario)?
2)is it learnable by fresh graduates?
3)do we need to know any programming languages?
also can anyone give me ebooks on manual/automation testing?.
email: dwnlodking@ymail.com
Thanks….
hello. plz can any body give me the lists of north india IT companies.plz help me out i done mca and sqt(software quality testing) course.
it`s good buddy..
thnx
hello sir, i am new in testing and want to know how to write the test cases with proper format. though i write few one but i want to know the standard format…plz guide me..your site is really helpful for the person who are in testing..it provides valuable information…good job …
thanks
Hi,
it is very interesting site from this i got lots of knowledge but still i want gain knowledge.
plz tell me vijay or any body u r on this site.my q is still present in comment
It should maintain every tester. and It is a very helpful article
Very very useful article. Thanks.
how to create a web site plz tell me
how to create a web site
Nice Document.. Helped me a lot
Very helpful article .
This is the Best Article ever I have seen for the Testing Guide…!!!
hire developers & software programmers
Securenext software | Hire offshore web developers & programmers
With offices in california, united states and in chennai, india our company consists of experienced programmers, website developers, graphic designers working in ruby on rails, php, .net, database management, providing agile business solution.
Leave a Comment