DEV Community

# vulnerabilities

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Securing Frontend Apps from Lodash Issues

Securing Frontend Apps from Lodash Issues

Comments
3 min read
KEV: V8 CVE-2025-10585 Hits Electron Apps

KEV: V8 CVE-2025-10585 Hits Electron Apps

3
Comments
7 min read
DORA Oversight Guide 2025: What JET Will Check

DORA Oversight Guide 2025: What JET Will Check

4
Comments
7 min read
Semgrep Newsletter | AI Code Assistant Research, Security Alerts, Quarterly Release and More

Semgrep Newsletter | AI Code Assistant Research, Security Alerts, Quarterly Release and More

1
Comments
5 min read
Critical File Upload Vulnerability in Yonyou U8 Cloud (IPFxxFileService)

Critical File Upload Vulnerability in Yonyou U8 Cloud (IPFxxFileService)

10
Comments
2 min read
OWASP Top Ten 2021 explained with simple Java examples and SAST insights

OWASP Top Ten 2021 explained with simple Java examples and SAST insights

Comments
15 min read
Critical SQL Injection in Chanjet T+ ERP Could Lead to RCE

Critical SQL Injection in Chanjet T+ ERP Could Lead to RCE

6
Comments
2 min read
Automating SBOM Generation and Vulnerability Analysis

Automating SBOM Generation and Vulnerability Analysis

4
Comments
4 min read
NIS2 Compliance 2025: What’s Actually In Force

NIS2 Compliance 2025: What’s Actually In Force

3
Comments
7 min read
OnePlus CVE-2025-10184: Ditch SMS 2FA Now

OnePlus CVE-2025-10184: Ditch SMS 2FA Now

4
Comments
6 min read
XXE Injection in React.js — What It Is and How to Prevent It

XXE Injection in React.js — What It Is and How to Prevent It

3
Comments
3 min read
Critical SQL Injection Vulnerability in Weaver e-cology OA: What You Need to Know

Critical SQL Injection Vulnerability in Weaver e-cology OA: What You Need to Know

10
Comments
2 min read
Security Alert: XXE Vulnerability in Weaver e-cology OA

Security Alert: XXE Vulnerability in Weaver e-cology OA

6
Comments
2 min read
An NPM dependency check list

An NPM dependency check list

9
Comments
3 min read
Weaver e-cology Vulnerability: Frontend File Upload RCE Risk

Weaver e-cology Vulnerability: Frontend File Upload RCE Risk

6
Comments
2 min read
Patch Management vs Vulnerability Management: Why the Difference Matters

Patch Management vs Vulnerability Management: Why the Difference Matters

1
Comments
5 min read
Openfire Admin Console Auth Bypass (CVE-2023-32315) — From Path Traversal to RCE

Openfire Admin Console Auth Bypass (CVE-2023-32315) — From Path Traversal to RCE

6
Comments
2 min read
RCE Risk in Yonyou U8Cloud: ServiceDispatcher Deserialization Vulnerability

RCE Risk in Yonyou U8Cloud: ServiceDispatcher Deserialization Vulnerability

6
Comments
2 min read
How to Allow Nextcloud Backup Files with SafeLine WAF

How to Allow Nextcloud Backup Files with SafeLine WAF

7
Comments
3 min read
Smartbi Access Bypass Vulnerability Leads to Admin Takeover

Smartbi Access Bypass Vulnerability Leads to Admin Takeover

6
Comments
2 min read
CVE-2023-42442: JumpServer Session Replay Leak Could Expose Sensitive Ops Data

CVE-2023-42442: JumpServer Session Replay Leak Could Expose Sensitive Ops Data

6
Comments
2 min read
Dealing With Dependency Vulnerabilities

Dealing With Dependency Vulnerabilities

Comments
4 min read
CVE Alert: SQL Injection in Yonyou GRP-U8 – Patch Now

CVE Alert: SQL Injection in Yonyou GRP-U8 – Patch Now

6
Comments
2 min read
Critical Vulnerability Alert: Weaver e-Office Remote Code Execution (RCE) – Patch Now

Critical Vulnerability Alert: Weaver e-Office Remote Code Execution (RCE) – Patch Now

6
Comments
2 min read
Apache RocketMQ RCE (CVE-2023-37582): Are Your Servers Still Exposed?

Apache RocketMQ RCE (CVE-2023-37582): Are Your Servers Still Exposed?

6
Comments
3 min read
loading...