Vulnerabilitymanagement - DEV Community

Vulnerabilitymanagement - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

yutianle

Nov 13

Jpom's User Token Header Reached a Query Parser With Super-Administrator Consequences

#security #vulnerabilitymanagement

3 min read

Nov 13

OpenObserve Accepted an Empty External Password for SSO and Migration-Created Users

#security #vulnerabilitymanagement

3 min read

OnaEiuspkz

Nov 13

FortiOS OSPF Authentication Failure Lets Crafted LSA Traffic Cross a Router Trust Boundary

#security #vulnerabilitymanagement

3 min read

facilishz

Nov 13

INFINITT PACS Trusts Update Files and URI Handlers at the Workstation Boundary

#security #vulnerabilitymanagement

3 min read

SorrelThorncroft

Nov 13

LightRAG API-Key Mode Still Accepted Guest Tokens Minted With a Public Default Secret

#security #vulnerabilitymanagement

2 min read

Nov 13

ImageMagick's Security Boundary Is the Effective Policy, Not the Upload Filename

#security #vulnerabilitymanagement

3 min read

StarkMan

Nov 13

HotGo Let the Client Choose the SMS Login Verification Code

#security #vulnerabilitymanagement

3 min read

jeffrey

Nov 13

Apache Camel KeycloakSecurityPolicy Skipped Token Verification When Roles Were Empty

#security #vulnerabilitymanagement

2 min read

kozhevniko

Nov 13

mailcow Domain Administrators Could Reach a Shared Scanner Through a Footer Template

#security #vulnerabilitymanagement

2 min read

johnettagaweraks

Nov 13

PrestaShop Debug Mode Writes Attacker-Controlled PHP Into Its Runtime Configuration

#security #vulnerabilitymanagement

2 min read

johnettagaweraks

Nov 13

CVE-2026-120868 Puts NetScaler Packet Processing Back in the Patch Queue

#security #vulnerabilitymanagement

2 min read

johnettagaweraks

Nov 13

NextScan's Hardcoded JWT Key Turns an Internal Scanner Into an Admin Takeover

#security #vulnerabilitymanagement

3 min read

SorrelThorncroft

Nov 13

A 2FA Backup Code Path Undercut webMethods Integration Server Authentication

#security #vulnerabilitymanagement

2 min read

SorrelThorncroft

Nov 13

Synology DSM's Auth API SQL Injection Reaches Files Beyond the Login Prompt

#security #vulnerabilitymanagement

2 min read

kozhevniko

Nov 13

Aptabase's Example AUTH_SECRET Was a Production Signing Key

#security #vulnerabilitymanagement

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.