Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
vulnerabilitymanagement
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Reading a KEV batch: turning seven exploited vulnerabilities into a 72-hour action list
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 16
Reading a KEV batch: turning seven exploited vulnerabilities into a 72-hour action list
#
vulnerabilitymanagement
#
cisakev
#
triage
Comments
Add Comment
3 min read
VEX statements: cutting false positives without hiding real risk
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Oct 15
VEX statements: cutting false positives without hiding real risk
#
supplychain
#
vulnerabilitymanagement
#
vex
1
 reaction
Comments
Add Comment
2 min read
October Patch Tuesday fixes 1,413 CVEs, a record
RC
RC
RC
Follow
Oct 14
October Patch Tuesday fixes 1,413 CVEs, a record
#
patchtuesday
#
microsoft
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
Two Local Privilege Escalations Outranked the Remote Bugs: How to Read the September 2026 Microsoft Patch Wave
yutianle
yutianle
yutianle
Follow
Oct 12
Two Local Privilege Escalations Outranked the Remote Bugs: How to Read the September 2026 Microsoft Patch Wave
#
patchmanagement
#
vulnerabilitymanagement
#
microsoft
#
privilegeescalation
Comments
Add Comment
4 min read
Greenbone on 3,657 hosts: the scanner that knows where every weakness is
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 12
Greenbone on 3,657 hosts: the scanner that knows where every weakness is
#
security
#
zoomeye
#
exposure
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
F5 BIG-IP APM under OAuth: a heap overflow that only fires on one configuration
yutianle
yutianle
yutianle
Follow
Oct 11
F5 BIG-IP APM under OAuth: a heap overflow that only fires on one configuration
#
cybersecurity
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
The September 2026 KEV wave as an operations dataset, not a news cycle
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 6
The September 2026 KEV wave as an operations dataset, not a news cycle
#
cisakev
#
vulnerabilitymanagement
#
edgesecurity
Comments
Add Comment
2 min read
One Console, Every Firewall: What Cisco FMC CVE-2026-20079 Teaches About Management-Plane Risk
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 4
One Console, Every Firewall: What Cisco FMC CVE-2026-20079 Teaches About Management-Plane Risk
#
security
#
vulnerabilitymanagement
#
networksecurity
Comments
Add Comment
4 min read
GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain
yutianle
yutianle
yutianle
Follow
Oct 3
GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain
#
pathtraversal
#
devsecops
#
credentialexposure
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 3
The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation
#
security
#
applicationsecurity
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
Penetration Test Findings That Never Get Fixed: Running a Retest Programme
kozhevniko
kozhevniko
kozhevniko
Follow
Sep 30
Penetration Test Findings That Never Get Fixed: Running a Retest Programme
#
security
#
vulnerabilitymanagement
#
governance
Comments
Add Comment
2 min read
When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint
StarkMan
StarkMan
StarkMan
Follow
Sep 30
When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint
#
security
#
supplychain
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints
kozhevniko
kozhevniko
kozhevniko
Follow
Sep 30
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints
#
cybersecurity
#
aiinfrastructure
#
vulnerabilitymanagement
#
litellm
Comments
Add Comment
4 min read
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route
jeffrey
jeffrey
jeffrey
Follow
Sep 29
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route
#
vulnerabilitymanagement
#
kestra
#
commandinjection
#
cve202649869
1
 reaction
Comments
Add Comment
4 min read
A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways
yutianle
yutianle
yutianle
Follow
Sep 25
A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways
#
security
#
aisecurity
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account