Cve - DEV Community

Cve - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Nov 13

GHSA-GPWC-27CW-RH9R: CVE-2026-126301: Quadratic CPU Exhaustion in NLTK LegalitySyllableTokenizer

#security #cve #cybersecurity

4 min read

Nov 13

CVE-2026-128067: CVE-2026-128067: Out-of-Bounds Heap Read and Write in Pillow libtiff Encoder via Geometry Tag Overrides

#security #cve #cybersecurity

4 min read

Nov 13

CVE-2026-126084: CVE-2026-126084: Unsigned Content-Type in Rails Active Storage GCS Direct Uploads

#security #cve #cybersecurity

4 min read

Nov 13

CVE-2026-126192: CVE-2026-126192: Quadratic Algorithmic Complexity Denial of Service in Soup Sieve CSS Selector Engine

#security #cve #cybersecurity

6 min read

Nov 13

CVE-2026-126190: CVE-2026-126190: Polynomial-Time Denial of Service in Soup Sieve CSS Descendant Combinator

#security #cve #cybersecurity

4 min read

Nov 11

Node.js November 2026 Security Release: How We Tracked and Patched It

#security #node #cve #pm2

13 min read

threataft

Nov 11

CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

#security #vulnerabilities #barracuda #cve

1 min read

Nov 11

CVE-2026-114155: CVE-2026-114155: Local Elevation of Privilege via TOCTOU Race Condition in Microsoft .NET dotnet-watch

#security #cve #cybersecurity

4 min read

Nov 11

CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing

#security #cve #cybersecurity

4 min read

Nov 11

CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane

#security #cve #cybersecurity

4 min read

Nov 11

CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

#security #cve #cybersecurity

5 min read

bitpage

Nov 10

PHP2Shell on PHP 8: docker build --pull succeeded and PHP is still 8.2.29

#php #docker #cve #frankenphp

14 min read

bitpage

Nov 10

PHP2Shell on PHP 7: patch applied is not patch compiled is not patch working

#php #cve #docker #centos

17 min read

bitpage

Nov 10

PHP2Shell on a mixed fleet: auditing 5.6 to 8.4 and proving each build is actually patched

#php #cve #docker #security

18 min read

Gabriele D'Attile

Nov 9

Breaking the Cold Chain: Technical Breakdown of CVE-2025-41450 and Cyber-Physical OT Sabotage

#cybersecurity #security #cve #iot

2 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.