Application Security

XQuery Injection uses improperly validated data that is passed to XQuery commands. This in turn will execute commands on behalf of the attacker that the XQuery routines have access to.

OWASP ZAP, now known as Zed Attack Proxy, is a free, open-source web application security scanner originally developed by the OWASP project. It's a dynamic application security testing (DAST) tool designed to find vulnerabilities in web applications while they are running.

A zero-day attack (also referred to as Day Zero) is an attack that exploits a potentially serious hardware, firmware, or software security weakness that the vendor or developer may be unaware of.