Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
vulnerabilitymanagement
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Log injection turns ZooKeeper audit records into attacker-controlled text
andreagomez
andreagomez
andreagomez
Follow
Oct 24
Log injection turns ZooKeeper audit records into attacker-controlled text
#
security
#
vulnerabilitymanagement
Comments
Add Comment
5 min read
Four SQL injection bugs in the appliance that keeps your firewall logs
StarkMan
StarkMan
StarkMan
Follow
Oct 24
Four SQL injection bugs in the appliance that keeps your firewall logs
#
security
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 24
Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path
#
security
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
Session invalidation is a route problem, not a flag problem
OnaEiuspkz
OnaEiuspkz
OnaEiuspkz
Follow
Oct 24
Session invalidation is a route problem, not a flag problem
#
security
#
vulnerabilitymanagement
Comments
Add Comment
5 min read
ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed
facilishz
facilishz
facilishz
Follow
Oct 24
ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed
#
security
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
Five ways a Groovy sandbox leaked, and what that says about sandbox design
yutianle
yutianle
yutianle
Follow
Oct 24
Five ways a Groovy sandbox leaked, and what that says about sandbox design
#
security
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
A request smuggling flaw on an ADC is a flaw in everything behind it
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 24
A request smuggling flaw on an ADC is a flaw in everything behind it
#
security
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
A virtual machine escape is a workstation problem until CI shares the hypervisor
jeffrey
jeffrey
jeffrey
Follow
Oct 24
A virtual machine escape is a workstation problem until CI shares the hypervisor
#
security
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
Patched Is Not the Same as Safe: Reading Version and Exposure for BeyondTrust Appliances
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 23
Patched Is Not the Same as Safe: Reading Version and Exposure for BeyondTrust Appliances
#
zoomeye
#
vulnerabilitymanagement
#
beyondtrust
#
verification
Comments
Add Comment
4 min read
Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Oct 23
Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not
#
cvss
#
riskscoring
#
vulnerabilitymanagement
#
arista
Comments
Add Comment
2 min read
Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 22
Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern
#
trendanalysis
#
sdwan
#
vulnerabilitymanagement
#
arista
Comments
Add Comment
2 min read
VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection
facilishz
facilishz
facilishz
Follow
Oct 23
VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection
#
patchmanagement
#
vulnerabilitymanagement
#
sdwan
#
arista
Comments
Add Comment
2 min read
Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle
andreagomez
andreagomez
andreagomez
Follow
Oct 22
Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle
#
strategy
#
edgesecurity
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed
SorrelThorncroft
SorrelThorncroft
SorrelThorncroft
Follow
Oct 22
Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed
#
openvpn
#
vpn
#
cve
#
vulnerabilitymanagement
Comments
Add Comment
2 min read
Scoring two OpenVPN flaws against your own exposure, not the internet's
Ioneyrezende
Ioneyrezende
Ioneyrezende
Follow
Oct 21
Scoring two OpenVPN flaws against your own exposure, not the internet's
#
openvpn
#
vpn
#
cve
#
vulnerabilitymanagement
Comments
Add Comment
2 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account