DEV Community

#vulnerabilities

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Finding Exposed Services (and Fixing Them) with ScanSearch

Finding Exposed Services (and Fixing Them) with ScanSearch

Comments
5 min read
Confused Deputy: The Old Bug That AI Agents Keep Reintroducing

How AI agents amplify ancient security flaws

Confused Deputy: The Old Bug That AI Agents Keep Reintroducing

7
Comments 8
9 min read
Confirmed vs. Potential Vulnerabilities: How to Act on Each Without Creating Alert Fatigue

Confirmed vs. Potential Vulnerabilities: How to Act on Each Without Creating Alert Fatigue

6
Comments
5 min read
CVE-2026–17633 - Authenticated RCE in Langflow OSS via /api/v1/custom_component

CVE-2026–17633 - Authenticated RCE in Langflow OSS via /api/v1/custom_component

Comments 1
3 min read
7 Vulnerability Patterns I Found in AI-Generated Code (and How to Catch Them)

7 Vulnerability Patterns I Found in AI-Generated Code (and How to Catch Them)

1
Comments 3
5 min read
AI Agent Checkpoint Tampering: The State File Is the Attack Surface

AI Agent Checkpoint Tampering: The State File Is the Attack Surface

Comments 1
5 min read
Benchmarking GPT-4o, Claude 3.5 Sonnet, and Llama 3 for Automated Code Auditing & Vulnerability Detection

Benchmarking GPT-4o, Claude 3.5 Sonnet, and Llama 3 for Automated Code Auditing & Vulnerability Detection

Comments
2 min read
RefluXFS (CVE-2026-64600): A Deep Dive into the Linux XFS Vulnerability That Lets Local Users Become Root

RefluXFS (CVE-2026-64600): A Deep Dive into the Linux XFS Vulnerability That Lets Local Users Become Root

1
Comments
5 min read
Shai-Hulud Strikes Back: Keyv, Cacheable & 800+ npm Packages Hijacked in Massive Worm Attack

Shai-Hulud Strikes Back: Keyv, Cacheable & 800+ npm Packages Hijacked in Massive Worm Attack

Comments 3
5 min read
Vulnerability Management is a Workaround for a Missing Call Graph

Vulnerability Management is a Workaround for a Missing Call Graph

Comments 2
12 min read
Inside the CVE List: How Vulnerabilities Get Their ID Cards

Inside the CVE List: How Vulnerabilities Get Their ID Cards

Comments
1 min read
What I found when I security-scanned 10 AI-built apps (and how to check yours manually)

What I found when I security-scanned 10 AI-built apps (and how to check yours manually)

Comments
4 min read
Windows and Linux Sensitive Directory Path Summary

Windows and Linux Sensitive Directory Path Summary

6
Comments
5 min read
Go-go Gadget...OSV!

Go-go Gadget...OSV!

Comments
1 min read
PamStealer: the macOS stealer that checks your password through PAM before stealing it

PamStealer: the macOS stealer that checks your password through PAM before stealing it

1
Comments 2
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.