DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
PHP2Shell on PHP 8: docker build --pull succeeded and PHP is still 8.2.29
bitpage profile

PHP2Shell on PHP 8: docker build --pull succeeded and PHP is still 8.2.29

#php #docker #cve #frankenphp
Comments
14 min read
PHP2Shell on PHP 7: patch applied is not patch compiled is not patch working
bitpage profile

PHP2Shell on PHP 7: patch applied is not patch compiled is not patch working

#php #cve #docker #centos
Comments
17 min read
PHP2Shell on a mixed fleet: auditing 5.6 to 8.4 and proving each build is actually patched
bitpage profile

PHP2Shell on a mixed fleet: auditing 5.6 to 8.4 and proving each build is actually patched

#php #cve #docker #security
Comments
18 min read
Breaking the Cold Chain: Technical Breakdown of CVE-2025-41450 and Cyber-Physical OT Sabotage
gabrieledattile profile

Breaking the Cold Chain: Technical Breakdown of CVE-2025-41450 and Cyber-Physical OT Sabotage

#cybersecurity #security #cve #iot
Comments
2 min read
CVE-2026-88984: CVE-2026-88984: RBAC Authorization Bypass in Kubeflow Pipelines Multi-User API Server
cverports profile

CVE-2026-88984: CVE-2026-88984: RBAC Authorization Bypass in Kubeflow Pipelines Multi-User API Server

#security #cve #cybersecurity
Comments
3 min read
The role check passed, the group check was missing: cross-org IDOR in CiviForm (CVE-2026-107856)
santosh_kumarpuppala_96e profile

The role check passed, the group check was missing: cross-org IDOR in CiviForm (CVE-2026-107856)

#security #cve #java #appsec
Comments 1
6 min read
retrieve said 403. history_detail said 200. (Objects API, CVE-2026-82411)
santosh_kumarpuppala_96e profile

retrieve said 403. history_detail said 200. (Objects API, CVE-2026-82411)

#security #cve #python #appsec
Comments
7 min read
[CVE-2026-110186] Langflow : How a Default-On Auto-Login Opens the Door to Unauthenticated RCE
guidance_white profile

[CVE-2026-110186] Langflow : How a Default-On Auto-Login Opens the Door to Unauthenticated RCE

#security #cybersecurity #cve #python
Comments
5 min read
One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit
santosh_kumarpuppala_96e profile

One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit

#security #cve #java #appsec
Comments
8 min read
October's Node.js fixes have to land in Azure Pipelines more than once
leobaniak profile
Leo

October's Node.js fixes have to land in Azure Pipelines more than once

#node #cve #azurepipelines #vulnerabilitymanagement
Comments
2 min read
CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller
cverports profile

CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator
cverports profile

CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator

#security #cve #cybersecurity
Comments
4 min read
CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export
cverports profile

CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

#security #cve #cybersecurity
Comments
4 min read
GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus
cverports profile

GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus

#security #cve #cybersecurity
Comments
6 min read
GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus
cverports profile

GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus

#security #cve #cybersecurity
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
⌂ 换网址