181 articles

📰 Dev.to · CVE Reports

Articles from Dev.to · CVE Reports · 181 articles · Updated every 3 hours · View all reads

All ⚡ AI Lessons (10481) ArXiv cs.AIDev.to · FORUM WEBDev.to AIForbes InnovationOpenAI NewsHugging Face Blog
CVE-2026-34974: CVE-2026-34974: Stored Cross-Site Scripting via SVG Sanitizer Bypass in phpMyFAQ
Dev.to · CVE Reports 1w ago
CVE-2026-34974: CVE-2026-34974: Stored Cross-Site Scripting via SVG Sanitizer Bypass in phpMyFAQ
CVE-2026-34974: Stored Cross-Site Scripting via SVG Sanitizer Bypass in...
Read article → + Playlist
CVE-2026-4176: CVE-2026-4176: Remote Code Execution via Heap-Based Buffer Overflow in Perl Compress::Raw::Zlib
Dev.to · CVE Reports 1w ago
CVE-2026-4176: CVE-2026-4176: Remote Code Execution via Heap-Based Buffer Overflow in Perl Compress::Raw::Zlib
CVE-2026-4176: Remote Code Execution via Heap-Based Buffer Overflow in Perl...
Read article → + Playlist
CVE-2026-5281: CVE-2026-5281: High-Severity Use-After-Free in Dawn WebGPU Implementation
Dev.to · CVE Reports 1w ago
CVE-2026-5281: CVE-2026-5281: High-Severity Use-After-Free in Dawn WebGPU Implementation
CVE-2026-5281: High-Severity Use-After-Free in Dawn WebGPU Implementation Vulnerability...
Read article → + Playlist
GHSA-Q56X-G2FJ-4RJ6: CVE-2025-51480: Arbitrary File Write via Path Traversal in ONNX save_external_data
Dev.to · CVE Reports 1w ago
GHSA-Q56X-G2FJ-4RJ6: CVE-2025-51480: Arbitrary File Write via Path Traversal in ONNX save_external_data
CVE-2025-51480: Arbitrary File Write via Path Traversal in ONNX...
Read article → + Playlist
CVE-2026-2950: CVE-2026-2950: Prototype Pollution Bypass in Lodash via Array-Wrapped Path Segments
Dev.to · CVE Reports 1w ago
CVE-2026-2950: CVE-2026-2950: Prototype Pollution Bypass in Lodash via Array-Wrapped Path Segments
CVE-2026-2950: Prototype Pollution Bypass in Lodash via Array-Wrapped Path...
Read article → + Playlist
CVE-2026-4800: CVE-2026-4800: Code Injection and Remote Code Execution in lodash _.template
Dev.to · CVE Reports 1w ago
CVE-2026-4800: CVE-2026-4800: Code Injection and Remote Code Execution in lodash _.template
CVE-2026-4800: Code Injection and Remote Code Execution in lodash...
Read article → + Playlist
GHSA-32WQ-PPWG-3W4M: GHSA-32WQ-PPWG-3W4M: Denial of Service in EnhancedLinq.Async via Microsoft.Bcl.Memory Out-of-Bounds Read
Dev.to · CVE Reports 1w ago
GHSA-32WQ-PPWG-3W4M: GHSA-32WQ-PPWG-3W4M: Denial of Service in EnhancedLinq.Async via Microsoft.Bcl.Memory Out-of-Bounds Read
GHSA-32WQ-PPWG-3W4M: Denial of Service in EnhancedLinq.Async via Microsoft.Bcl.Memory...
Read article → + Playlist
GHSA-W2FM-25VW-VH7F: GHSA-W2FM-25VW-VH7F: Cross-Client Data Leak via Transport Race Condition in mcp-handler
Dev.to · CVE Reports 1w ago
GHSA-W2FM-25VW-VH7F: GHSA-W2FM-25VW-VH7F: Cross-Client Data Leak via Transport Race Condition in mcp-handler
GHSA-W2FM-25VW-VH7F: Cross-Client Data Leak via Transport Race Condition in...
Read article → + Playlist
CVE-2026-4370: CVE-2026-4370: Critical Authentication Bypass in Canonical Juju Dqlite Cluster
Dev.to · CVE Reports 1w ago
CVE-2026-4370: CVE-2026-4370: Critical Authentication Bypass in Canonical Juju Dqlite Cluster
CVE-2026-4370: Critical Authentication Bypass in Canonical Juju Dqlite...
Read article → + Playlist
CVE-2026-34515: CVE-2026-34515: NTLMv2 Credential Leak via Absolute Path Traversal in aiohttp
Dev.to · CVE Reports 1w ago
CVE-2026-34515: CVE-2026-34515: NTLMv2 Credential Leak via Absolute Path Traversal in aiohttp
CVE-2026-34515: NTLMv2 Credential Leak via Absolute Path Traversal in...
Read article → + Playlist
CVE-2026-34751: CVE-2026-34751: Unvalidated Input in Password Recovery Endpoints in Payload CMS
Dev.to · CVE Reports 1w ago
CVE-2026-34751: CVE-2026-34751: Unvalidated Input in Password Recovery Endpoints in Payload CMS
CVE-2026-34751: Unvalidated Input in Password Recovery Endpoints in Payload...
Read article → + Playlist
CVE-2026-34603: CVE-2026-34603: Path Traversal and Link Following in TinaCMS
Dev.to · CVE Reports 1w ago
CVE-2026-34603: CVE-2026-34603: Path Traversal and Link Following in TinaCMS
CVE-2026-34603: Path Traversal and Link Following in TinaCMS Vulnerability ID:...
Read article → + Playlist
CVE-2026-34604: CVE-2026-34604: Path Validation Bypass via Symlinks in @tinacms/graphql
Dev.to · CVE Reports 1w ago
CVE-2026-34604: CVE-2026-34604: Path Validation Bypass via Symlinks in @tinacms/graphql
CVE-2026-34604: Path Validation Bypass via Symlinks in @tinacms/graphql Vulnerability ID:...
Read article → + Playlist
GHSA-5724-X3RH-5QQQ: CVE-2025-46349: Reflected Cross-Site Scripting in YesWiki File Upload
Dev.to · CVE Reports 1w ago
GHSA-5724-X3RH-5QQQ: CVE-2025-46349: Reflected Cross-Site Scripting in YesWiki File Upload
CVE-2025-46349: Reflected Cross-Site Scripting in YesWiki File Upload Vulnerability ID:...
Read article → + Playlist
CVE-2026-34605: CVE-2026-34605: Reflected Cross-Site Scripting via SVG Namespace Bypass in SiYuan
Dev.to · CVE Reports 1w ago
CVE-2026-34605: CVE-2026-34605: Reflected Cross-Site Scripting via SVG Namespace Bypass in SiYuan
CVE-2026-34605: Reflected Cross-Site Scripting via SVG Namespace Bypass in...
Read article → + Playlist
CVE-2026-33578: CVE-2026-33578: Sender Policy Bypass via Incorrect Authorization in OpenClaw Extensions
Dev.to · CVE Reports 1w ago
CVE-2026-33578: CVE-2026-33578: Sender Policy Bypass via Incorrect Authorization in OpenClaw Extensions
CVE-2026-33578: Sender Policy Bypass via Incorrect Authorization in OpenClaw...
Read article → + Playlist
CVE-2026-32734: CVE-2026-32734: DOM-Based Cross-Site Scripting in baserCMS Tag Creation
Dev.to · CVE Reports 1w ago
CVE-2026-32734: CVE-2026-32734: DOM-Based Cross-Site Scripting in baserCMS Tag Creation
CVE-2026-32734: DOM-Based Cross-Site Scripting in baserCMS Tag Creation Vulnerability ID:...
Read article → + Playlist
CVE-2026-21861: CVE-2026-21861: Authenticated OS Command Injection in baserCMS Core Update Feature
Dev.to · CVE Reports 1w ago
CVE-2026-21861: CVE-2026-21861: Authenticated OS Command Injection in baserCMS Core Update Feature
CVE-2026-21861: Authenticated OS Command Injection in baserCMS Core Update...
Read article → + Playlist
GHSA-39MP-545Q-W789: GHSA-39MP-545Q-W789: Improper Authorization in OpenClaw /send Command
Dev.to · CVE Reports 1w ago
GHSA-39MP-545Q-W789: GHSA-39MP-545Q-W789: Improper Authorization in OpenClaw /send Command
GHSA-39MP-545Q-W789: Improper Authorization in OpenClaw /send Command Vulnerability ID:...
Read article → + Playlist
CVE-2026-34377: CVE-2026-34377: Consensus Split Vulnerability in Zebra Transaction Verification Cache
Dev.to · CVE Reports 1w ago
CVE-2026-34377: CVE-2026-34377: Consensus Split Vulnerability in Zebra Transaction Verification Cache
CVE-2026-34377: Consensus Split Vulnerability in Zebra Transaction Verification...
Read article → + Playlist
GHSA-955R-262C-33JC: CVE-2026-33634: Supply Chain Compromise and Malicious Code Execution in Telnyx Python SDK
Dev.to · CVE Reports 1w ago
GHSA-955R-262C-33JC: CVE-2026-33634: Supply Chain Compromise and Malicious Code Execution in Telnyx Python SDK
CVE-2026-33634: Supply Chain Compromise and Malicious Code Execution in Telnyx Python...
Read article → + Playlist
CVE-2026-34385: CVE-2026-34385: Second-Order SQL Injection in Fleet Apple MDM Profile Delivery
Dev.to · CVE Reports 1w ago
CVE-2026-34385: CVE-2026-34385: Second-Order SQL Injection in Fleet Apple MDM Profile Delivery
CVE-2026-34385: Second-Order SQL Injection in Fleet Apple MDM Profile...
Read article → + Playlist
CVE-2026-34386: CVE-2026-34386: Authenticated SQL Injection in Fleet MDM Bootstrap Package Configuration
Dev.to · CVE Reports 1w ago
CVE-2026-34386: CVE-2026-34386: Authenticated SQL Injection in Fleet MDM Bootstrap Package Configuration
CVE-2026-34386: Authenticated SQL Injection in Fleet MDM Bootstrap Package...
Read article → + Playlist
CVE-2026-34388: CVE-2026-34388: Authenticated Denial of Service via Unhandled gRPC Log Type in Fleet Launcher
Dev.to · CVE Reports 1w ago
CVE-2026-34388: CVE-2026-34388: Authenticated Denial of Service via Unhandled gRPC Log Type in Fleet Launcher
CVE-2026-34388: Authenticated Denial of Service via Unhandled gRPC Log Type in Fleet...
Read article → + Playlist