DEV Community

#vulnerabilities

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Vulnerabilities in Windows' SFAPE.dll Enable Arbitrary Code Execution in VBS Enclave, Undermining Isolation Guarantees

Vulnerabilities in Windows' SFAPE.dll Enable Arbitrary Code Execution in VBS Enclave, Undermining Isolation Guarantees

Comments
9 min read
Sandbox Escapes in vm2 3.11.7: Six Boundary Failures in One Patch

Sandbox Escapes in vm2 3.11.7: Six Boundary Failures in One Patch

Comments
5 min read
How to block vulnerable and non-compliant artifacts at admission

How to block vulnerable and non-compliant artifacts at admission

1
Comments
6 min read
PaperCut Vulnerabilities Enable Pre-Authentication RCE: Patch Now to Prevent System Compromise

PaperCut Vulnerabilities Enable Pre-Authentication RCE: Patch Now to Prevent System Compromise

1
Comments
11 min read
VAPT Reporting: The Work Doesn't End After Testing

VAPT Reporting: The Work Doesn't End After Testing

Comments
1 min read
We opened 1,332 AI-built repositories. Five of their dependencies do not exist, and anyone can register them.

We opened 1,332 AI-built repositories. Five of their dependencies do not exist, and anyone can register them.

Comments
5 min read
gradle-161

gradle-161

Comments
3 min read
word-2

word-2

Comments
3 min read
word3-3

word3-3

Comments
3 min read
HyperShift CVE-2026-101919 — CVSS 8.8 Tenant Isolation Bypass via Kubeconfig Passthrough

HyperShift CVE-2026-101919 — CVSS 8.8 Tenant Isolation Bypass via Kubeconfig Passthrough

Comments
1 min read
AGI vs ASI vs Superintelligence: Does Terminology Matter for Security?

AGI vs ASI vs Superintelligence: Does Terminology Matter for Security?

Comments
3 min read
CVE-2026-41264: How a Regex Let Prompts Run Code in Flowise

CVE-2026-41264: How a Regex Let Prompts Run Code in Flowise

Comments
6 min read
Beyond the package name: why following the call is the hard part of supply-chain security

Beyond the package name: why following the call is the hard part of supply-chain security

Comments
3 min read
ZITADEL Cluster: 7 CVEs, Peak CVSS 9.3 — Cross-Org Account Takeover via Passkey Enrollment

ZITADEL Cluster: 7 CVEs, Peak CVSS 9.3 — Cross-Org Account Takeover via Passkey Enrollment

Comments
1 min read
CVE-2026-88779 — Citrix NetScaler SAML Memory Overflow, Actively Exploited, CISA KEV

CVE-2026-88779 — Citrix NetScaler SAML Memory Overflow, Actively Exploited, CISA KEV

Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.