DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2025-69226: AIOHTTP Side-Channel: When 403 Means 'I See You'

CVE-2025-69226: AIOHTTP Side-Channel: When 403 Means 'I See You'

Comments
2 min read
CVE-2025-29914: The Double-Slash Deception: Bypassing Coraza WAF with RFC Compliance

CVE-2025-29914: The Double-Slash Deception: Bypassing Coraza WAF with RFC Compliance

1
Comments
2 min read
CVE-2025-69223: Puff, The Magic Dragon: Exploding RAM with aiohttp Zip Bombs

CVE-2025-69223: Puff, The Magic Dragon: Exploding RAM with aiohttp Zip Bombs

Comments
2 min read
GHSA-F2MF-Q878-GH58: Parsl Tongue: SQL Injection in High-Performance Computing Visualization

GHSA-F2MF-Q878-GH58: Parsl Tongue: SQL Injection in High-Performance Computing Visualization

Comments
2 min read
CVE-2025-69224: Absolute Zero Security: Smuggling Requests into aiohttp with the Kelvin Sign

CVE-2025-69224: Absolute Zero Security: Smuggling Requests into aiohttp with the Kelvin Sign

Comments
2 min read
CVE-2017-5638: The Billion Dollar Header: Inside the Apache Struts 2 'Equifax' RCE

CVE-2017-5638: The Billion Dollar Header: Inside the Apache Struts 2 'Equifax' RCE

Comments
2 min read
CVE-2024-4990: Magic Methods, Tragic Endings: RCE in Yii2 via Unsafe Reflection

CVE-2024-4990: Magic Methods, Tragic Endings: RCE in Yii2 via Unsafe Reflection

Comments
2 min read
CVE-2026-21441: The Invisible Avalanche: urllib3 Decompression Bomb

CVE-2026-21441: The Invisible Avalanche: urllib3 Decompression Bomb

Comments
2 min read
GHSA-RHFX-M35P-FF5J: Borrow Checker's Revenge: Stacked Borrows Violation in Rust's `lru` Crate

GHSA-RHFX-M35P-FF5J: Borrow Checker's Revenge: Stacked Borrows Violation in Rust's `lru` Crate

Comments
2 min read
CVE-2025-32444: Pickle Rick-Roll: Critical RCE in vLLM's Mooncake Integration

CVE-2025-32444: Pickle Rick-Roll: Critical RCE in vLLM's Mooncake Integration

Comments
2 min read
Beyond Backups: Building Verifiable Cloud Recovery on IBM Cloud

Beyond Backups: Building Verifiable Cloud Recovery on IBM Cloud

1
Comments 1
2 min read
CVE-2025-65091: Calendar of Doom: A Critical HQL Injection in XWiki

CVE-2025-65091: Calendar of Doom: A Critical HQL Injection in XWiki

Comments
2 min read
Why Semantic Analysis Is the Only Sustainable WAF Strategy Going Forward

Why Semantic Analysis Is the Only Sustainable WAF Strategy Going Forward

Comments
3 min read
CVE-2026-22785: Orval Overload: From OpenAPI Spec to Remote Code Execution

CVE-2026-22785: Orval Overload: From OpenAPI Spec to Remote Code Execution

Comments
2 min read
CVE-2026-0859: CamelCase Catastrophe: How a Typo in TYPO3 Enabled RCE

CVE-2026-0859: CamelCase Catastrophe: How a Typo in TYPO3 Enabled RCE

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.