Cve - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

HackerMe

Nov 11

Contact Form 7 File Upload Flaw (CVE-2026-114432): Which WordPress Sites Are Exposed and What to Do

#wordpress #security #cve #webdev

4 min read

Nov 11

Node.js November 2026 Security Release: How We Tracked and Patched It

#security #node #cve #pm2

13 min read

threataft

Nov 11

CVE-2026-116606 + CVE-2026-111560: How a Predictable Secret Turns Two Barracuda Bugs Into a Root Shell

#security #vulnerabilities #barracuda #cve

1 min read

Nov 11

CVE-2026-114155: CVE-2026-114155: Local Elevation of Privilege via TOCTOU Race Condition in Microsoft .NET dotnet-watch

#security #cve #cybersecurity

4 min read

Nov 11

CVE-2026-109478: CVE-2026-109478: Algorithmic Complexity Denial of Service in ASP.NET Core Header Parsing

#security #cve #cybersecurity

4 min read

Nov 11

CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane

#security #cve #cybersecurity

4 min read

Nov 11

CVE-2026-114157: CVE-2026-114157: Local Privilege Escalation via Race Condition in ASP.NET Core Kestrel Named Pipes Transport

#security #cve #cybersecurity

5 min read

bitpage

Nov 10

PHP2Shell on PHP 8: docker build --pull succeeded and PHP is still 8.2.29

#php #docker #cve #frankenphp

14 min read

bitpage

Nov 10

PHP2Shell on PHP 7: patch applied is not patch compiled is not patch working

#php #cve #docker #centos

17 min read

bitpage

Nov 10

PHP2Shell on a mixed fleet: auditing 5.6 to 8.4 and proving each build is actually patched

#php #cve #docker #security

18 min read

Gabriele D'Attile

Nov 9

Breaking the Cold Chain: Technical Breakdown of CVE-2025-41450 and Cyber-Physical OT Sabotage

#cybersecurity #security #cve #iot

2 min read

Nov 9

CVE-2026-88984: CVE-2026-88984: RBAC Authorization Bypass in Kubeflow Pipelines Multi-User API Server

#security #cve #cybersecurity

3 min read

Santosh Kumar Puppala

Nov 10

The role check passed, the group check was missing: cross-org IDOR in CiviForm (CVE-2026-107856)

#security #cve #java #appsec

6 min read

Santosh Kumar Puppala

Nov 10

retrieve said 403. history_detail said 200. (Objects API, CVE-2026-82411)

#security #cve #python #appsec

7 min read

Nov 9

[CVE-2026-110186] Langflow : How a Default-On Auto-Login Opens the Door to Unauthenticated RCE

#security #cybersecurity #cve #python

5 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.