DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Multiple Vulnerabilities in Thelia 2.6.0 and 2.6.1 Leading to RCE via Upload, Smarty, and Translation Editing

Multiple Vulnerabilities in Thelia 2.6.0 and 2.6.1 Leading to RCE via Upload, Smarty, and Translation Editing

1
Comments
7 min read
Ivanti Connect Secure CVE-2026-104935: Authentication Bypass and Race Condition RCE to Root

Ivanti Connect Secure CVE-2026-104935: Authentication Bypass and Race Condition RCE to Root

1
Comments
8 min read
Docker Hub CVE-2026-105445: PAT Reassigned to Target User During Account-to-Organization Conversion

Docker Hub CVE-2026-105445: PAT Reassigned to Target User During Account-to-Organization Conversion

1
Comments
6 min read
Self-Replicating AI Experiment: Deploying to IoT Nodes via Unauthenticated ADB to Form Decentralized Inference

Self-Replicating AI Experiment: Deploying to IoT Nodes via Unauthenticated ADB to Form Decentralized Inference

1
Comments
6 min read
Windows Shell CVE-2026-96951: Mark of the Web Bypass Zero-Day Actively Exploited

Windows Shell CVE-2026-96951: Mark of the Web Bypass Zero-Day Actively Exploited

1
Comments
6 min read
AssetView CVE-2026-101020: Privilege Escalation from Low-Privilege Windows User to SYSTEM

AssetView CVE-2026-101020: Privilege Escalation from Low-Privilege Windows User to SYSTEM

1
Comments
5 min read
SAP Cloud SDK for Python CVE-2026-89111: OAuth2 Client Credentials Exfiltration via tenant_subdomain

SAP Cloud SDK for Python CVE-2026-89111: OAuth2 Client Credentials Exfiltration via tenant_subdomain

1
Comments
6 min read
Validate X post URLs before requesting video metadata in JavaScript

Validate X post URLs before requesting video metadata in JavaScript

Comments
3 min read
Yield Strategy Optimization Report: USDT0

Yield Strategy Optimization Report: USDT0

Comments
6 min read
Set ENABLE_SIGNUP=false in Open WebUI and sign-up is still open? Check it in one line

Set ENABLE_SIGNUP=false in Open WebUI and sign-up is still open? Check it in one line

Comments
3 min read
Reverse Engineer Anything: Khi Claude Code và Cursor kết hợp cùng Ghidra, IDA Pro

Reverse Engineer Anything: Khi Claude Code và Cursor kết hợp cùng Ghidra, IDA Pro

Comments
11 min read
SQL Server for Genetec Security Center

SQL Server for Genetec Security Center

Comments
9 min read
Postmortem: A Free Route Replayed a Paid Tool Grant

Postmortem: A Free Route Replayed a Paid Tool Grant

Comments
7 min read
True Lease Redaction — Removing PDF Text Instead of Hiding It

True Lease Redaction — Removing PDF Text Instead of Hiding It

Comments
7 min read
The XRPL Overflow Bug: What Developers Can Learn From a Supply-Invariant Failure

The XRPL Overflow Bug: What Developers Can Learn From a Supply-Invariant Failure

Comments
6 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.