DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
A SQL escape is not a shell escape: OS command injection in GOautodial goAPIv2
santosh_kumarpuppala_96e profile

A SQL escape is not a shell escape: OS command injection in GOautodial goAPIv2

#security #cve #php #appsec
Comments
5 min read
CVE-2026-24031 Analysis — Dovecot SQL-Based Authentication Bypass (an auth_username_chars Regression)
guidance_white profile

CVE-2026-24031 Analysis — Dovecot SQL-Based Authentication Bypass (an auth_username_chars Regression)

#database #vulnerabilities #cve #sql
1
Comments
6 min read
BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass
michael_kantor_c1f32eb919 profile

BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

#cve #security #vulnerability #fastifyjwt
Comments
2 min read
CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation
michael_kantor_c1f32eb919 profile

CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation

#cve #apachehive #authn #ssrf
Comments
5 min read
CVE-2026-80104: DB-GPT Skill Upload Path Traversal (and Sibling CVE-2026-73034)
michael_kantor_c1f32eb919 profile

CVE-2026-80104: DB-GPT Skill Upload Path Traversal (and Sibling CVE-2026-73034)

#cve #dbgpt #pathtraversal #ai
Comments
4 min read
CVE-2026-69112: Hugging Face Accelerate Path Traversal Lets Attackers Read Arbitrary Files
michael_kantor_c1f32eb919 profile

CVE-2026-69112: Hugging Face Accelerate Path Traversal Lets Attackers Read Arbitrary Files

#cve #security #vulnerability #accelerate
Comments
4 min read
CVE-2026-45018: Chainlit MCP stdio unauthenticated RCE (and sibling CVE-2026-45019)
michael_kantor_c1f32eb919 profile

CVE-2026-45018: Chainlit MCP stdio unauthenticated RCE (and sibling CVE-2026-45019)

#cve #chainlit #mcp #rce
Comments 1
3 min read
CVE-2026-48854: CVE-2026-48854: Unauthenticated Denial of Service via Resource Exhaustion in elixir-grpc Server
cverports profile

CVE-2026-48854: CVE-2026-48854: Unauthenticated Denial of Service via Resource Exhaustion in elixir-grpc Server

#security #cve #cybersecurity
Comments
2 min read
Deep-Dive Write-up by Huynh Kien Minh: CVE-2026-13736 — NewPath WildApricotPress Member Directory PII Disclosure
minhhk68 profile

Deep-Dive Write-up by Huynh Kien Minh: CVE-2026-13736 — NewPath WildApricotPress Member Directory PII Disclosure

#security #wordpress #cve #infosec
Comments
4 min read
GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles
cverports profile

GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles

#security #cve #cybersecurity #ghsa
Comments
2 min read
A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)
santosh_kumarpuppala_96e profile

A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)

#security #cve #linux #appsec
Comments 2
6 min read
They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network
santosh_kumarpuppala_96e profile

They scoped the customer and forgot the customer's ledger — a High-severity cross-tenant BOLA in Open Food Network

#security #cve #ruby #appsec
Comments
6 min read
Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution
minhhk68 profile

Deep-Dive Technical Write-up by Huynh Kien Minh: CVE-2026-13157 — Theme Demo Import Arbitrary File Upload to Remote Code Execution

#cve #wordpress #security #rce
Comments
6 min read
Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation
minhhk68 profile

Huynh Kien Minh: CVE-2026-13152 — Custom Fields Account Registration For WooCommerce Privilege Escalation

#security #wordpress #cve #bugbounty
Comments
4 min read
GHSA-GX64-GJ6P-PC4C: GHSA-GX64-GJ6P-PC4C: Stored Cross-Site Scripting in JupyterLab Image Viewer
cverports profile

GHSA-GX64-GJ6P-PC4C: GHSA-GX64-GJ6P-PC4C: Stored Cross-Site Scripting in JupyterLab Image Viewer

#security #cve #cybersecurity #ghsa
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.