DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

Nine CVSS 9.8 Junos Flaws in One Bulletin: A Practical Patch-Ordering Decision for Network Teams

Comments
4 min read
Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

Why the Junos October 2026 Flaws Matter Even Without a CISA KEV Entry

Comments
4 min read
Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Wiz counted 13,500 Gheist branches today. I rebuilt its masking bypass in 15 lines and scanned my own repos.

Comments
4 min read
Testing from the outside (2): attack tools and legitimate scanners find different things

Testing from the outside (2): attack tools and legitimate scanners find different things

Comments
14 min read
Before You Patch: Auditing Which Junos Devices Are Actually Exposed to the October 2026 Critical Flaws

Before You Patch: Auditing Which Junos Devices Are Actually Exposed to the October 2026 Critical Flaws

1
Comments
4 min read
Auditorio de draw.io segunda parte

Auditorio de draw.io segunda parte

Comments
2 min read
k0t Edge Device Campaign Exposes 70,000+ Credentials Through FortiGate and GlobalProtect Appliances

k0t Edge Device Campaign Exposes 70,000+ Credentials Through FortiGate and GlobalProtect Appliances

Comments
5 min read
Why any X-Plex-Token value matters in the Plex timeline SSRF

Why any X-Plex-Token value matters in the Plex timeline SSRF

Comments
3 min read
CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

Comments
6 min read
The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks

The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks

Comments
2 min read
CVE-2026-96652: how Plex Media Server turns one request field into an outbound POST

CVE-2026-96652: how Plex Media Server turns one request field into an outbound POST

Comments
3 min read
Four Plex Media Server flaws and what their CVSS vectors say about patch order

Four Plex Media Server flaws and what their CVSS vectors say about patch order

Comments
3 min read
Plex searchOne URL injection: chaining an unauthenticated entry point into plugin calls

Plex searchOne URL injection: chaining an unauthenticated entry point into plugin calls

Comments
2 min read
Detecting exploitation of the Plex timeline SSRF in server and network telemetry

Detecting exploitation of the Plex timeline SSRF in server and network telemetry

Comments
2 min read
From preference string to executed library: the Plex TranscoderH264Options write

From preference string to executed library: the Plex TranscoderH264Options write

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.