DEV Community

Cybersecurity

Articles related to cybersecurity and much more

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2025-66648: Vega's Visual Betrayal: Leaking the Window via Internal Functions

CVE-2025-66648: Vega's Visual Betrayal: Leaking the Window via Internal Functions

Comments
2 min read
CVE-2026-24785: The Sound of Silence: Breaking Clatter's Post-Quantum Promises (CVE-2026-24785)

CVE-2026-24785: The Sound of Silence: Breaking Clatter's Post-Quantum Promises (CVE-2026-24785)

Comments
2 min read
Your API Is Leaking Its Server Version. Yes, That’s Still a Thing

Your API Is Leaking Its Server Version. Yes, That’s Still a Thing

1
Comments 1
1 min read
CVE-2025-69256: Serverless Command Injection: When 'Experimental' Means 'Remote Shell'

CVE-2025-69256: Serverless Command Injection: When 'Experimental' Means 'Remote Shell'

Comments
2 min read
CVE-2025-69202: The Shared Hallucination: Authorization Bypass in axios-cache-interceptor

CVE-2025-69202: The Shared Hallucination: Authorization Bypass in axios-cache-interceptor

Comments
2 min read
CVE-2026-21446: Bagisto's Open House: How an AJAX Header Stole the Admin Panel

CVE-2026-21446: Bagisto's Open House: How an AJAX Header Stole the Admin Panel

Comments
2 min read
CVE-2025-69226: AIOHTTP Side-Channel: When 403 Means 'I See You'

CVE-2025-69226: AIOHTTP Side-Channel: When 403 Means 'I See You'

Comments
2 min read
CVE-2025-69224: Absolute Zero Security: Smuggling Requests into aiohttp with the Kelvin Sign

CVE-2025-69224: Absolute Zero Security: Smuggling Requests into aiohttp with the Kelvin Sign

Comments
2 min read
CVE-2017-5638: The Billion Dollar Header: Inside the Apache Struts 2 'Equifax' RCE

CVE-2017-5638: The Billion Dollar Header: Inside the Apache Struts 2 'Equifax' RCE

Comments
2 min read
CVE-2025-69223: Puff, The Magic Dragon: Exploding RAM with aiohttp Zip Bombs

CVE-2025-69223: Puff, The Magic Dragon: Exploding RAM with aiohttp Zip Bombs

Comments
2 min read
CVE-2025-65091: Calendar of Doom: A Critical HQL Injection in XWiki

CVE-2025-65091: Calendar of Doom: A Critical HQL Injection in XWiki

Comments
2 min read
CVE-2026-0859: CamelCase Catastrophe: How a Typo in TYPO3 Enabled RCE

CVE-2026-0859: CamelCase Catastrophe: How a Typo in TYPO3 Enabled RCE

Comments
2 min read
CVE-2026-22798: Loose Lips Sink Ships: How Hermes Logged Its Way into a Security Nightmare

CVE-2026-22798: Loose Lips Sink Ships: How Hermes Logged Its Way into a Security Nightmare

Comments
2 min read
GHSA-MQQF-5WVP-8FH8: Slashing Through the Safety Nets: The go-chi Open Redirect

GHSA-MQQF-5WVP-8FH8: Slashing Through the Safety Nets: The go-chi Open Redirect

Comments
2 min read
CVE-2026-23991: Panic at the Distro: Crashing go-tuf with Malformed JSON

CVE-2026-23991: Panic at the Distro: Crashing go-tuf with Malformed JSON

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.