Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
infosec
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Auditorio de draw.io segunda parte
Audit with Proof
Audit with Proof
Audit with Proof
Follow
Oct 25
Auditorio de draw.io segunda parte
#
analysis
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
Why any X-Plex-Token value matters in the Plex timeline SSRF
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Oct 25
Why any X-Plex-Token value matters in the Plex timeline SSRF
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
3 min read
CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python
Etairos.ai
Etairos.ai
Etairos.ai
Follow
Oct 25
CVE-2026-111497: Google Brotli Decoder Flaw Reaches Node.js, Bun, Envoy, Istio and Python
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
6 min read
The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 25
The Plex transcode path that accepts arbitrary hosts, and what that means for internal networks
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
CVE-2026-96652: how Plex Media Server turns one request field into an outbound POST
facilishz
facilishz
facilishz
Follow
Oct 25
CVE-2026-96652: how Plex Media Server turns one request field into an outbound POST
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
3 min read
Four Plex Media Server flaws and what their CVSS vectors say about patch order
yutianle
yutianle
yutianle
Follow
Oct 25
Four Plex Media Server flaws and what their CVSS vectors say about patch order
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
3 min read
Plex searchOne URL injection: chaining an unauthenticated entry point into plugin calls
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 25
Plex searchOne URL injection: chaining an unauthenticated entry point into plugin calls
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
Detecting exploitation of the Plex timeline SSRF in server and network telemetry
jeffrey
jeffrey
jeffrey
Follow
Oct 25
Detecting exploitation of the Plex timeline SSRF in server and network telemetry
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
From preference string to executed library: the Plex TranscoderH264Options write
StarkMan
StarkMan
StarkMan
Follow
Oct 25
From preference string to executed library: the Plex TranscoderH264Options write
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
From Ethical Hacking to Critical Infrastructure Security: My Professional Journey
Cihangir DĂĽndar
Cihangir DĂĽndar
Cihangir DĂĽndar
Follow
Oct 25
From Ethical Hacking to Critical Infrastructure Security: My Professional Journey
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
2 min read
Eye Security Pushed 2 Million Unrequested Updates to Kill an Abandoned Popcorn Time Updater. It Was the Right Call.
Etairos.ai
Etairos.ai
Etairos.ai
Follow
Oct 24
Eye Security Pushed 2 Million Unrequested Updates to Kill an Abandoned Popcorn Time Updater. It Was the Right Call.
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
6 min read
Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release
Etairos.ai
Etairos.ai
Etairos.ai
Follow
Oct 24
Leaked LiteLLM Master Key Sat Unrevoked for 136 Days, Then Shipped a Malicious 1.107.0 Release
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
5 min read
Cross-Site Request Forgery (CSRF): When Your Browser Becomes the Attacker
Ahmed Omeiza
Ahmed Omeiza
Ahmed Omeiza
Follow
Oct 24
Cross-Site Request Forgery (CSRF): When Your Browser Becomes the Attacker
#
cybersecurity
#
infosec
#
security
1
 reaction
Comments
Add Comment
2 min read
You Can't Respin a House
Jack Heath
Jack Heath
Jack Heath
Follow
Oct 23
You Can't Respin a House
#
security
#
devops
#
infosec
Comments
Add Comment
5 min read
BlackX UEFI Bootkit Revives Baton Drop on Patched Windows Hosts That Skipped DBX Revocation
Etairos.ai
Etairos.ai
Etairos.ai
Follow
Oct 23
BlackX UEFI Bootkit Revives Baton Drop on Patched Windows Hosts That Skipped DBX Revocation
#
cybersecurity
#
infosec
#
security
Comments
Add Comment
5 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account