DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
nginx is not the bug. Two lines of your config are. CVE-2026-42945 on a live stand
cynepmyx profile

nginx is not the bug. Two lines of your config are. CVE-2026-42945 on a live stand

#security #nginx #devops #cve
Comments
17 min read
A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)
santosh_kumarpuppala_96e profile

A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)

#security #cve #linux #appsec
Comments 2
6 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network
santosh_kumarpuppala_96e profile

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

#security #cve #ruby #appsec
Comments
6 min read
It refused to run a dangerous option. I wrote it one character shorter, and it ran
cynepmyx profile

It refused to run a dangerous option. I wrote it one character shorter, and it ran

#security #python #devops #cve
Comments 1
9 min read
Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution
minhhk68 profile

Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

#cve #wordpress #security #rce
Comments
6 min read
Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation
minhhk68 profile

Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation

#security #wordpress #cve #bugbounty
Comments
4 min read
GHSA-GX64-GJ6P-PC4C: GHSA-GX64-GJ6P-PC4C: Stored Cross-Site Scripting in JupyterLab Image Viewer
cverports profile

GHSA-GX64-GJ6P-PC4C: GHSA-GX64-GJ6P-PC4C: Stored Cross-Site Scripting in JupyterLab Image Viewer

#security #cve #cybersecurity #ghsa
Comments
2 min read
30 CVEs filed against MCP servers in 60 days — here's how we're fixing this
edison_flores_6d2cd381b13 profile

30 CVEs filed against MCP servers in 60 days — here's how we're fixing this

#mcp #security #cve #vulnerabilities
Comments
2 min read
Aikido buys Root to patch open source in place, without the upgrade dance
leobaniak profile
Leo

Aikido buys Root to patch open source in place, without the upgrade dance

#supplychain #cve #dependencies #security
Comments
4 min read
MITRE CVE ID Request and Support Follow-Up: No Confirmation Email Received Despite Anti-Filter Measures
kserude profile

MITRE CVE ID Request and Support Follow-Up: No Confirmation Email Received Despite Anti-Filter Measures

#cve #cybersecurity #mitre #communication
1
Comments
8 min read
CVE Severity: Risk-Based Prioritization
nara_naghi profile

CVE Severity: Risk-Based Prioritization

#cybersecurity #cve
Comments
2 min read
How to Actually Protect Yourself From wp2shell (Not Just "Update WordPress")
adityapidurkar profile

How to Actually Protect Yourself From wp2shell (Not Just "Update WordPress")

#wordpress #wp2shell #cve #cybersecurity
Comments 2
5 min read
How Attackers Find Vulnerable Applications — And How to Stay One Step Ahead
vulert_official profile

How Attackers Find Vulnerable Applications — And How to Stay One Step Ahead

#vulnerableapplications #applicationsecurity #cve #vulnerabilitymonitoring
Comments
7 min read
The HTTP Header That Could Execute Linux Commands: Understanding Shellshock
arashad_dodhiya_0e4bdba5a profile

The HTTP Header That Could Execute Linux Commands: Understanding Shellshock

#devops #cybersecurity #linux #cve
1
Comments
4 min read
CVE-2026-48710: CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication Bypass
cverports profile

CVE-2026-48710: CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication Bypass

#security #cve #cybersecurity
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.