DEV Community

Faizan Akhtar profile picture

Faizan Akhtar

Cyber Security Researcher & Ethical Hacker from Pakistan | Synack Red Team | Bug Bounty Hunter | Daily CVE analysis

Joined Joined on  Personal website https://faizanakhtarcyber.blogspot.com/
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons
iamfaizanakhtar profile

OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
7 min read
CVE-2026-76519: Cisco Secure Email Gateway Path Traversal RCE Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-76519: Cisco Secure Email Gateway Path Traversal RCE Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
6 min read
CVE-2026-105134: Ahsay AhsayCBS OS Command Injection RCE Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-105134: Ahsay AhsayCBS OS Command Injection RCE Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
6 min read
CVE-2026-105445: Docker Hub Personal Access Token Impersonation Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-105445: Docker Hub Personal Access Token Impersonation Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
6 min read
CVE-2026-96119: IBM i HTTP Server Administration Code Injection Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-96119: IBM i HTTP Server Administration Code Injection Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-75732: Adobe Experience Manager Incorrect Authorization RCE Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-75732: Adobe Experience Manager Incorrect Authorization RCE Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-89107: SAP S/4HANA Code Injection Remote Code Execution Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-89107: SAP S/4HANA Code Injection Remote Code Execution Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
8 min read
CVE-2026-105192: LMCache (vLLM KV-Cache) Unauthenticated Remote Code Execution Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-105192: LMCache (vLLM KV-Cache) Unauthenticated Remote Code Execution Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-96951: Microsoft Windows Shell Mark-of-the-Web Bypass Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-96951: Microsoft Windows Shell Mark-of-the-Web Bypass Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-104935: Ivanti Connect Secure Authentication Bypass Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-104935: Ivanti Connect Secure Authentication Bypass Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons
iamfaizanakhtar profile

Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
CVE-2026-19386: ASUS Router Firmware Arbitrary Code Execution Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-19386: ASUS Router Firmware Arbitrary Code Execution Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-85097: Bricksforge WordPress Plugin Arbitrary File Upload Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-85097: Bricksforge WordPress Plugin Arbitrary File Upload Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
6 min read
CVE-2026-97229: GitLab CI/CD Regex Compiler Integer Overflow Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-97229: GitLab CI/CD Regex Compiler Integer Overflow Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Authentication Bypass — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Authentication Bypass — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
6 min read
CVE-2026-102255: SonicWall SMA1000 Pre-Auth SSRF Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-102255: SonicWall SMA1000 Pre-Auth SSRF Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
5 min read
CVE-2026-21589: Atlassian Data Center Arbitrary File Access Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-21589: Atlassian Data Center Arbitrary File Access Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
5 min read
DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis
iamfaizanakhtar profile

DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis

#cybersecurity #bugbounty #infosec #vulnerability
Comments
6 min read
CVE-2026-107406: Citrix NetScaler SAML Memory Overflow Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-107406: Citrix NetScaler SAML Memory Overflow Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments 1
7 min read
CVE-2026-17609: Super Forms WordPress Plugin Arbitrary Directory Deletion Vulnerability (CVSS 9.1) — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-17609: Super Forms WordPress Plugin Arbitrary Directory Deletion Vulnerability (CVSS 9.1) — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments 1
27 min read
CVE-2026-80381: IBM Guardium Data Protection SQL Injection Vulnerability (CVSS 9.8) — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-80381: IBM Guardium Data Protection SQL Injection Vulnerability (CVSS 9.8) — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
6 min read
CVE-2026-76482: Cisco License On-Prem Signature Verification Vulnerability (CVSS 10.0) — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-76482: Cisco License On-Prem Signature Verification Vulnerability (CVSS 10.0) — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
7 min read
CVE-2026-96940: Microsoft Exchange Server Elevation of Privilege Vulnerability — Analysis & Mitigation
iamfaizanakhtar profile

CVE-2026-96940: Microsoft Exchange Server Elevation of Privilege Vulnerability — Analysis & Mitigation

#cybersecurity #cve #vulnerability #infosec
Comments
4 min read
loading...