DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin

Metabase Zero-Day Hits CVSS 10.0: Unauthenticated SQL Injection Gives Full Admin

Comments
4 min read
Hardware Backdoors in x86 CPUs: The 2026 Hacker News Wake-Up Call

Hardware Backdoors in x86 CPUs: The 2026 Hacker News Wake-Up Call

Comments
4 min read
Weekly Cybersecurity Roundup: Week of August 7, 2026

Weekly Cybersecurity Roundup: Week of August 7, 2026

Comments 1
7 min read
4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks

4,407 Rockwell PLCs Sit on the Public Internet, 22 in Cities Hit by Water Utility Attacks

Comments
5 min read
🛡️ Kioptrix Level 4 — Full Walkthrough

🛡️ Kioptrix Level 4 — Full Walkthrough

Comments
6 min read
HTB - Responder

HTB - Responder

Comments
4 min read
HTB - Funnel

HTB - Funnel

Comments
3 min read
HTB - Preignition

HTB - Preignition

Comments
1 min read
PREDICTION-20260801-0010

PREDICTION-20260801-0010

Comments
4 min read
Why CIDS Looks at Behavior, Not Just Individual Requests

Why CIDS Looks at Behavior, Not Just Individual Requests

Comments
3 min read
Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

Postman's Secret Variables Are Not Secret: How Public Workspaces Expose 4,000+ Live Credentials

Comments
6 min read
SAML XSW: Signatures That Validate the Wrong Element

SAML XSW: Signatures That Validate the Wrong Element

Comments
5 min read
Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

Webhook Producers Are SSRF by Default: Seven CVEs the Security Guides Don't Mention

1
Comments
5 min read
JWT Algorithm Negotiation Is a Spec Design Flaw, Not a Library Bug

JWT Algorithm Negotiation Is a Spec Design Flaw, Not a Library Bug

Comments
5 min read
CORS Misconfiguration in APIs: Why Reflected Origin Plus Credentials Is the Dangerous Pattern, Not Wildcard

CORS Misconfiguration in APIs: Why Reflected Origin Plus Credentials Is the Dangerous Pattern, Not Wildcard

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.