DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Allowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2)
santosh_kumarpuppala_96e profile

Allowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2)

#security #graphql #python #appsec
Comments
9 min read
The viewer checked the domain, the delete button didn't: cross-tenant quarantine IDOR in MailWatch (CVE-2026-85749)
santosh_kumarpuppala_96e profile

The viewer checked the domain, the delete button didn't: cross-tenant quarantine IDOR in MailWatch (CVE-2026-85749)

#security #php #appsec #email
Comments
6 min read
One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit
santosh_kumarpuppala_96e profile

One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit

#security #cve #java #appsec
Comments
8 min read
“Web cache deception, explained: how a URL extension confuses the cache into storing your private page”
martins808 profile

“Web cache deception, explained: how a URL extension confuses the cache into storing your private page”

#cybersecurity #websecurity #burpsuite #appsec
Comments
3 min read
🔑 JWT Verification Bugs: Pin the Algorithm, Then Prove the Fix
krishna_kumar_75bdf350b26 profile

🔑 JWT Verification Bugs: Pin the Algorithm, Then Prove the Fix

#security #appsec #python #javascript
Comments
9 min read
Top 5 Qualys Alternatives for Vulnerability Management in 2027
alexcybersmith profile

Top 5 Qualys Alternatives for Vulnerability Management in 2027

#devsecops #appsec #cybersecurity #security
Comments
12 min read
The AI Security Stories Are Boring Now, and That's the Point
coridev profile
Cor E

The AI Security Stories Are Boring Now, and That's the Point

#security #ai #appsec #cybersecurity
2
Comments
3 min read
Langflow's Critical Flaws Show Why Agent Tool Calls Need a Scrub Layer, Not Just a Patch
coridev profile
Cor E

Langflow's Critical Flaws Show Why Agent Tool Calls Need a Scrub Layer, Not Just a Patch

#security #ai #appsec #sentinel
2
Comments
5 min read
đź“Ź CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved
krishna_kumar_75bdf350b26 profile

đź“Ź CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

#security #bugbounty #appsec #webdev
Comments
10 min read
The AI endpoint that charges you money when somebody abuses it
lawaloyinlola profile

The AI endpoint that charges you money when somebody abuses it

#security #ai #appsec #webdev
Comments 1
5 min read
Secure Code Review: How It Differs From Everyday Code Review, With a 2026 Checklist
dev_barron profile

Secure Code Review: How It Differs From Everyday Code Review, With a 2026 Checklist

#security #codereview #appsec #devops
Comments
10 min read
🗂️ Path Traversal: Why Your ../ Filter Fails (and the Fix That Holds)
krishna_kumar_75bdf350b26 profile

🗂️ Path Traversal: Why Your ../ Filter Fails (and the Fix That Holds)

#security #python #webdev #appsec
Comments
8 min read
Threat modeling a feature in 20 minutes
soren_vest profile

Threat modeling a feature in 20 minutes

#security #appsec #architecture
Comments
1 min read
A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.
coridev profile

A Poisoned AGENTS.md in ~/Downloads Hijacked Codex and Claude Code. Here's Where the Scrub Step Fits.

#security #ai #llm #appsec
3
Comments 1
5 min read
Notes from triaging forty SSRF reports
soren_vest profile

Notes from triaging forty SSRF reports

#security #appsec #webdev
Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.