Vulnerability

👋 Sign in for the ability to sort posts by relevant, latest, or top.

ohmygod

Mar 12

CVE-2026-20435: How a MediaTek Boot Chain Flaw Exposes Crypto Wallets on 25% of Android Phones

#security #android #crypto #vulnerability

5 min read

Olga Larionova

Mar 13

Zombie ZIP Vulnerability Enables Malware to Bypass 95% of Antivirus Software, Requiring Urgent Security Updates

#cybersecurity #malware #vulnerability #antivirus

8 min read

Amartya Jha

Mar 12

EPSS Explained: Why Exploit Prediction Scoring Changes Everything for Vulnerability Prioritization

#security #vulnerability #devsecops #programming

2 min read

Amartya Jha

Mar 11

Denial of Service in yauzl 3.2.0: One Zip File Crashes the Library Behind VS Code and Electron

#security #javascript #node #vulnerability

5 min read

Kunal

Mar 12

MediaTek's Security Nightmare: How a Nothing Phone Was Hacked in 45 Seconds (Except It Wasn't)

#cybersecurity #mediatek #androidsecurity #vulnerability

6 min read

Amartya Jha

Mar 10

CVE-2026-28292: How a Simple Case-Sensitivity Bug Turns simple-git Into a Remote Code Execution Weapon (CVSS 9.8)

#security #javascript #node #vulnerability

4 min read

Amartya Jha

Mar 5

Your Server's Public Key Is All I Need to Become Admin, CVE-2026-29000

#security #java #jwt #vulnerability

5 min read

Dar Fazulyanov

Mar 5

Breaking: New "PleaseFix" Vulnerabilities Turn AI Agents Against Their Users

#ai #security #cybersecurity #vulnerability

3 min read

Ksenia Rudneva

Mar 5

Pac4j-JWT Authentication Bypass Vulnerability Undetected for Six Years Despite Advanced Security Tools

#security #vulnerability #ai #auditing

9 min read

DeepSeaX

Mar 1

ClawJacked: How Malicious Websites Hijack Local AI Agents via WebSocket

#aisecurity #websocket #openclaw #vulnerability

3 min read

Tiamat

Mar 10

Qualcomm Integer Overflow Zero-Day (CVE-2026-21385) Under Active Exploitation: What You Need to Know

#cybersecurity #android #vulnerability #qualcomm

5 min read

Tiamat

Mar 9

CVE-2026-22719: Why Your VMware Upgrade Is Actually A Breach Waiting To Happen

#cybersecurity #vmware #vulnerability #infrastructure

7 min read

ecap0

Feb 16

Context Pivoting: A New Attack Vector in Multi-Server MCP Deployments

#security #mcp #ai #vulnerability

4 min read

Tiamat

Mar 8

CVE-2026-25253: How 42,000+ OpenClaw Instances Got Pwned (And Why Your AI Assistant Is a Security Disaster)

#aisecurity #cve #cybersecurity #vulnerability

7 min read

Mark0

Jan 30

CVE-2025-12758: Unicode Variation Selectors Bypass in 'validator' library (isLength)

#cybersecurity #infosec #javascript #vulnerability

1 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# vulnerability

CVE-2026-20435: How a MediaTek Boot Chain Flaw Exposes Crypto Wallets on 25% of Android Phones

Zombie ZIP Vulnerability Enables Malware to Bypass 95% of Antivirus Software, Requiring Urgent Security Updates

EPSS Explained: Why Exploit Prediction Scoring Changes Everything for Vulnerability Prioritization

Denial of Service in yauzl 3.2.0: One Zip File Crashes the Library Behind VS Code and Electron

MediaTek's Security Nightmare: How a Nothing Phone Was Hacked in 45 Seconds (Except It Wasn't)

CVE-2026-28292: How a Simple Case-Sensitivity Bug Turns simple-git Into a Remote Code Execution Weapon (CVSS 9.8)

Your Server's Public Key Is All I Need to Become Admin, CVE-2026-29000

Breaking: New "PleaseFix" Vulnerabilities Turn AI Agents Against Their Users

Pac4j-JWT Authentication Bypass Vulnerability Undetected for Six Years Despite Advanced Security Tools

ClawJacked: How Malicious Websites Hijack Local AI Agents via WebSocket

Qualcomm Integer Overflow Zero-Day (CVE-2026-21385) Under Active Exploitation: What You Need to Know

CVE-2026-22719: Why Your VMware Upgrade Is Actually A Breach Waiting To Happen

Context Pivoting: A New Attack Vector in Multi-Server MCP Deployments

CVE-2026-25253: How 42,000+ OpenClaw Instances Got Pwned (And Why Your AI Assistant Is a Security Disaster)

CVE-2025-12758: Unicode Variation Selectors Bypass in 'validator' library (isLength)