DEV Community

#infosec

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Auditorio de draw.io segunda parte

Auditorio de draw.io segunda parte

Comments
2 min read
Why any X-Plex-Token value matters in the Plex timeline SSRF

Why any X-Plex-Token value matters in the Plex timeline SSRF

Comments
3 min read
CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python

Comments
6 min read
The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks

The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks

Comments
2 min read
CVE-2026-96652: how Plex Media Server turns one request field into an outbound POST

CVE-2026-96652: how Plex Media Server turns one request field into an outbound POST

Comments
3 min read
Four Plex Media Server flaws and what their CVSS vectors say about patch order

Four Plex Media Server flaws and what their CVSS vectors say about patch order

Comments
3 min read
Plex searchOne URL injection: chaining an unauthenticated entry point into plugin calls

Plex searchOne URL injection: chaining an unauthenticated entry point into plugin calls

Comments
2 min read
Detecting exploitation of the Plex timeline SSRF in server and network telemetry

Detecting exploitation of the Plex timeline SSRF in server and network telemetry

Comments
2 min read
From preference string to executed library: the Plex TranscoderH264Options write

From preference string to executed library: the Plex TranscoderH264Options write

Comments
2 min read
From Ethical Hacking to Critical Infrastructure Security: My Professional Journey

From Ethical Hacking to Critical Infrastructure Security: My Professional Journey

Comments
2 min read
Eye Security Pushed 2 Million Unrequested Updates to Kill an Abandoned Popcorn Time Updater. It Was the Right Call.

Eye Security Pushed 2 Million Unrequested Updates to Kill an Abandoned Popcorn Time Updater. It Was the Right Call.

Comments
6 min read
Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release

Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release

Comments
5 min read
Cross-Site Request Forgery (CSRF): When Your Browser Becomes the Attacker

Cross-Site Request Forgery (CSRF): When Your Browser Becomes the Attacker

1
Comments
2 min read
You Can't Respin a House

You Can't Respin a House

Comments
5 min read
BlackX UEFI Bootkit Revives Baton Drop on Patched Windows Hosts That Skipped DBX Revocation

BlackX UEFI Bootkit Revives Baton Drop on Patched Windows Hosts That Skipped DBX Revocation

Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.