DEV Community

#vulnerabilities

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
SHIRASAGI: Authenticated OS Command Injection and Stored XSS Fixed in v1.21.1

SHIRASAGI: Authenticated OS Command Injection and Stored XSS Fixed in v1.21.1

1
Comments
8 min read
AI Expansion Outpaces Security Measures, Increasing Vulnerability to Attacks and Requiring Urgent Defensive Adaptation.

AI Expansion Outpaces Security Measures, Increasing Vulnerability to Attacks and Requiring Urgent Defensive Adaptation.

1
Comments
9 min read
WordPress Core enters KEV: patching and verification priorities

WordPress Core enters KEV: patching and verification priorities

Comments
2 min read
The Update Button Is the Attack Surface: Inside WordPress CVE-2026-119977

The Update Button Is the Attack Surface: Inside WordPress CVE-2026-119977

Comments
4 min read
Chrome 9.6 CVE — What “No Login Needed” Actually Means (And What It Doesn’t)

Chrome 9.6 CVE — What “No Login Needed” Actually Means (And What It Doesn’t)

Comments
1 min read
CVE-2026-120322 — A 9.9 Path Traversal in Termix-SSH's File Manager

CVE-2026-120322 — A 9.9 Path Traversal in Termix-SSH's File Manager

Comments
2 min read
TeamViewer flaws put support technicians’ machines at risk

TeamViewer flaws put support technicians’ machines at risk

Comments
2 min read
Mitigating Security Risks in AI-Generated Applications: Strategies for Safe Personal and Public Use

Mitigating Security Risks in AI-Generated Applications: Strategies for Safe Personal and Public Use

Comments
15 min read
GitLab's CI/CD Regex Compiler Has a CVSS 10.0 — and It's Being Exploited Right Now

GitLab's CI/CD Regex Compiler Has a CVSS 10.0 — and It's Being Exploited Right Now

Comments
1 min read
Bridging Code and Security: SQL Injection, Hardening and Network Basics | GCF Parul University (Part 1)

Bridging Code and Security: SQL Injection, Hardening and Network Basics | GCF Parul University (Part 1)

Comments
3 min read
CVE-2026-111585: The TeamViewer Host Attacks the Viewer — and the Viewer Is the IT Technician

CVE-2026-111585: The TeamViewer Host Attacks the Viewer — and the Viewer Is the IT Technician

Comments
2 min read
Cisco SD-WAN CVE-2026-20127 — A CVSS 10.0 Auth Bypass, a Key-Stealing Implant, and a Relay Network Built to Disappear

Cisco SD-WAN CVE-2026-20127 — A CVSS 10.0 Auth Bypass, a Key-Stealing Implant, and a Relay Network Built to Disappear

Comments
2 min read
PHP2Shell: Two Critical PHP RCE Flaws and What to Do in the First Hour

PHP2Shell: Two Critical PHP RCE Flaws and What to Do in the First Hour

Comments
5 min read
Silent Train: How Volt Typhoon Quietly Hijacked Hundreds of Everyday Devices

Silent Train: How Volt Typhoon Quietly Hijacked Hundreds of Everyday Devices

Comments
4 min read
Supply-chain vulnerabilities in software

Supply-chain vulnerabilities in software

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.