Vulnerabilities

Robin Birney for Safety Cybersecurity

Sep 25

Beyond CVSS: Project Context, Exploitability, and Reachability of Vulnerabilities - Part 2

#python #vulnerabilities #security #devops

4 min read

Dilver Huertas Guerrero

Sep 25

Análisis dinámico de aplicaciones web con OWASP ZAP

#cybersecurity #vulnerabilities #spanish #testing

1

9 min read

Dilver Huertas Guerrero

Sep 13

Identificando vulnerabilidades en código fuente a través de análisis estático con SonarQube

#cybersecurity #vulnerabilities #beginners #spanish

1

9 min read

Dwayne McDaniel for GitGuardian

Sep 8

Hardcoded secret at the heart of the Dell Compellent VMware vulnerability

#dell #vmware #cybersecurity #vulnerabilities

1

6 min read

Harry Kimpel for New Relic

Jun 22

Level up your security skillset with New Relic

#devsecops #applicationsecurity #vulnerabilities #observability

6 min read

TutorialBoy

Jul 21

Bypassing PHP WAF to Achieve Remote Code Execution In-Depth Analysis

#php #cybersecurity #infosec #vulnerabilities

5 min read

TutorialBoy

Apr 27

The Summary Of Spring Security Authorization Bypass on Java

#cybersecurity #vulnerabilities #infosec #springboot

12 min read

SnykSec for Snyk

Mar 6

Gitpod remote code execution 0-day vulnerability via WebSockets

#applicationsecurity #casestudies #cloudnativesecurity #vulnerabilities

9 min read

SnykSec for Snyk

Jan 9

Supply chain security incident at CircleCI: Rotate your secrets

#vulnerabilities

5 min read

Brian Vermeer 🧑🏼‍🎓🧑🏼‍💻 for Snyk

Dec 14 '22

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

#java #opensource #vulnerabilities #security

4

5 min read

SnykSec for Snyk

Nov 14 '22

Breaking down the ‘critical’ OpenSSL vulnerability

#applicationsecurity #vulnerabilities

7 min read

SnykSec for Snyk

Nov 14 '22

Update: OpenSSL high severity vulnerabilities

#applicationsecurity #engineering #opensource #vulnerabilities

4 min read

SnykSec for Snyk

Oct 27 '22

Understanding DNS attacks: Identifying and patching vulnerabilities

#vulnerabilities

3

8 min read

Brian Vermeer 🧑🏼‍🎓🧑🏼‍💻 for Snyk

Oct 19 '22

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text (Text4Shell)

#java #security #vulnerabilities

2 min read

SnykSec for Snyk

Oct 5 '22

Phony PyPi package imitates known developer

#opensource #vulnerabilities #python #pypi

5 min read

SnykSec for Snyk

Sep 19 '22

Avoiding SMTP Injection: A Whitebox primer

#applicationsecurity #dependencyhealth #vulnerabilities

7 min read

SnykSec for Snyk

Sep 12 '22

How to find and fix XML entity vulnerabilities

#applicationsecurity #vulnerabilities

9 min read

Muhammad Shakeel

Jul 23 '22

Explain Aws API Gateway vulnerabilities Like I'm Five

#api #vulnerabilities #javascript

13

1

1 min read

Yanze Dai for Pitayan Blog

May 20 '22

Capture the flag: A Node.js web app vulnerability practice (part 1)

#vulnerabilities #workshop

6

5 min read

sagu94271

Dec 29 '21

Data Engineering and Secure Coding with a Vulnerability Database

#datascience #whitesource #vulnerabilities #python

4

3 min read

rajdeepmca04

Sep 16 '21

Vulnerability List in React Packages encountered while Building up React Application

#react #vulnerabilities #reactdevutils

1

1 min read

L0WK3Y | I.A.A.N

Sep 18 '21

Network Security & Database Vulnerabilities

#security #cybersecurity #vulnerabilities #networking

2

8 min read

Gilad David Maayan

Mar 21 '21

Top 9 Joomla Security Vulnerabilities and What You Can Do About Them

#joomla #security #vulnerabilities

2

6 min read

Guillermo Varela

Feb 19 '21

Happy 1st Birthday to Sonatype Gradle Scan Plugin - Enter Sherlock Trunks!

#gradle #vulnerabilities #ossindex #dependencies

2

1

2 min read

Anton Golub

Jul 10 '20

Yarn audit fix: workaround

#javascript #yarn #audit #vulnerabilities

35

2

3 min read

Vasily Malykhin

May 29 '20

Fix a transitive npm dependency vulnerability

#npm #vulnerabilities #javascript

12

2 min read

nabbisen

Mar 25 '20

Windows zero-day vulnerability ADV200006: How to disable preview pane and details pane in Explorer

#security #windows #vulnerabilities #commandline

7

2 min read

Vivek Nayyar

Mar 19 '20

Fixing security vulnerabilities in npm dependencies in less than 3 mins

#javascript #security #vulnerabilities #npm

18

5

3 min read

Jordan Irabor

Dec 15 '19

How to identify and fix open-source vulnerabilities

#opensource #vulnerabilities #security #softwaredevelopment

21

2

5 min read

Liran Tal for Snyk

Dec 9 '19

Don't let security vulnerabilities crawl into your Node.js Docker images

#docker #scan #image #vulnerabilities

18

2 min read

Richard Klose

Jul 21 '18

Learn from others mistakes: How not to write a PHP install script

#php #vulnerabilities #security #https

36

2

6 min read

Katie McCaskey for Sonatype

Mar 30 '20

Nexus Vulnerability Scanner: Getting Started with Vulnerability Analysis

#vulnerabilities #security #appsec #applicationsecurity

2

1 min read

Antoinette Maria

May 16 '17

Recipe for Infection: Ransomware

#security #hacking #ransomware #vulnerabilities

12

3 min read

Katie McCaskey for Sonatype

Mar 23 '20

Nexus Intelligence Insights: What's in a Ghostcat? CVE-2020-1938 Apache Tomcat - Local File Inclusion Potentially Leads to RCE

#vulnerabilities #tomcat #featured #nexusintelligencei

7

2 min read

Anders Hornor

Dec 18 '19

Vulnerabilities: Filling a Sieve with Sand

#vulnerabilities

4

2 min read

Bruno Bossola

May 8 '19

Time to update Bootstrap and JQuery!

#opensource #javascript #vulnerabilities #cybersecurity

4

2 min read

Uladzislau Murashka

Dec 5 '18

Security Testing: Fighting against bots

#pentest #penetrationtesting #infosec #vulnerabilities

8

3 min read

The OpenShift Ninja

Oct 9 '18

Anchore Security Bundle Policies

#containers #security #malware #vulnerabilities

7

1 min read

DEV Community

# vulnerabilities

Beyond CVSS: Project Context, Exploitability, and Reachability of Vulnerabilities - Part 2

Análisis dinámico de aplicaciones web con OWASP ZAP

Identificando vulnerabilidades en código fuente a través de análisis estático con SonarQube

Hardcoded secret at the heart of the Dell Compellent VMware vulnerability

Level up your security skillset with New Relic

Bypassing PHP WAF to Achieve Remote Code Execution In-Depth Analysis

The Summary Of Spring Security Authorization Bypass on Java

Gitpod remote code execution 0-day vulnerability via WebSockets

Supply chain security incident at CircleCI: Rotate your secrets

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

Breaking down the ‘critical’ OpenSSL vulnerability

Update: OpenSSL high severity vulnerabilities

Understanding DNS attacks: Identifying and patching vulnerabilities

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text (Text4Shell)

Phony PyPi package imitates known developer

Avoiding SMTP Injection: A Whitebox primer

How to find and fix XML entity vulnerabilities

Explain Aws API Gateway vulnerabilities Like I'm Five

Capture the flag: A Node.js web app vulnerability practice (part 1)

Data Engineering and Secure Coding with a Vulnerability Database

Vulnerability List in React Packages encountered while Building up React Application

Network Security & Database Vulnerabilities

Top 9 Joomla Security Vulnerabilities and What You Can Do About Them

Happy 1st Birthday to Sonatype Gradle Scan Plugin - Enter Sherlock Trunks!

Yarn audit fix: workaround

Fix a transitive npm dependency vulnerability

Windows zero-day vulnerability ADV200006: How to disable preview pane and details pane in Explorer

Fixing security vulnerabilities in npm dependencies in less than 3 mins

How to identify and fix open-source vulnerabilities

Don't let security vulnerabilities crawl into your Node.js Docker images

Learn from others mistakes: How not to write a PHP install script

Nexus Vulnerability Scanner: Getting Started with Vulnerability Analysis

Recipe for Infection: Ransomware

Nexus Intelligence Insights: What's in a Ghostcat? CVE-2020-1938 Apache Tomcat - Local File Inclusion Potentially Leads to RCE

Vulnerabilities: Filling a Sieve with Sand

Time to update Bootstrap and JQuery!

Security Testing: Fighting against bots

Anchore Security Bundle Policies