DEV Community

#vulnerabilities

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Bank of America Addresses System Vulnerabilities with 1,000 Contractors and Remediation Efforts

Bank of America Addresses System Vulnerabilities with 1,000 Contractors and Remediation Efforts

1
Comments
7 min read
An email attachment hands the sender root on Cisco's gateway

An email attachment hands the sender root on Cisco's gateway

Comments
3 min read
Vulnerabilities in Windows' SFAPE.dll Enable Arbitrary Code Execution in VBS Enclave, Undermining Isolation Guarantees

Vulnerabilities in Windows' SFAPE.dll Enable Arbitrary Code Execution in VBS Enclave, Undermining Isolation Guarantees

Comments
9 min read
Sandbox Escapes in vm2 3.11.7: Six Boundary Failures in One Patch

Sandbox Escapes in vm2 3.11.7: Six Boundary Failures in One Patch

Comments
5 min read
How to block vulnerable and non-compliant artifacts at admission

How to block vulnerable and non-compliant artifacts at admission

1
Comments
6 min read
PaperCut Vulnerabilities Enable Pre-Authentication RCE: Patch Now to Prevent System Compromise

PaperCut Vulnerabilities Enable Pre-Authentication RCE: Patch Now to Prevent System Compromise

1
Comments
11 min read
VAPT Reporting: The Work Doesn't End After Testing

VAPT Reporting: The Work Doesn't End After Testing

Comments
1 min read
We opened 1,332 AI-built repositories. Five of their dependencies do not exist, and anyone can register them.

We opened 1,332 AI-built repositories. Five of their dependencies do not exist, and anyone can register them.

Comments
5 min read
gradle-161

gradle-161

Comments
3 min read
word-2

word-2

Comments
3 min read
word3-3

word3-3

Comments
3 min read
HyperShift CVE-2026-101919 — CVSS 8.8 Tenant Isolation Bypass via Kubeconfig Passthrough

HyperShift CVE-2026-101919 — CVSS 8.8 Tenant Isolation Bypass via Kubeconfig Passthrough

Comments
1 min read
Beyond the package name: why following the call is the hard part of supply-chain security

Beyond the package name: why following the call is the hard part of supply-chain security

Comments
3 min read
AGI vs ASI vs Superintelligence: Does Terminology Matter for Security?

AGI vs ASI vs Superintelligence: Does Terminology Matter for Security?

Comments
3 min read
CVE-2026-41264: How a Regex Let Prompts Run Code in Flowise

CVE-2026-41264: How a Regex Let Prompts Run Code in Flowise

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.