DEV Community

#vulnerabilitymanagement

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Log injection turns ZooKeeper audit records into attacker-controlled text

Log injection turns ZooKeeper audit records into attacker-controlled text

Comments
5 min read
Four SQL injection bugs in the appliance that keeps your firewall logs

Four SQL injection bugs in the appliance that keeps your firewall logs

Comments
4 min read
Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path

Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path

Comments
4 min read
Session invalidation is a route problem, not a flag problem

Session invalidation is a route problem, not a flag problem

Comments
5 min read
ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed

ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed

Comments
4 min read
Five ways a Groovy sandbox leaked, and what that says about sandbox design

Five ways a Groovy sandbox leaked, and what that says about sandbox design

Comments
4 min read
A request smuggling flaw on an ADC is a flaw in everything behind it

A request smuggling flaw on an ADC is a flaw in everything behind it

Comments
4 min read
A virtual machine escape is a workstation problem until CI shares the hypervisor

A virtual machine escape is a workstation problem until CI shares the hypervisor

Comments
4 min read
Patched Is Not the Same as Safe: Reading Version and Exposure for BeyondTrust Appliances

Patched Is Not the Same as Safe: Reading Version and Exposure for BeyondTrust Appliances

Comments
4 min read
Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not

Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not

Comments
2 min read
Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern

Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern

Comments
2 min read
VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection

VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection

Comments
2 min read
Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle

Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle

Comments
4 min read
Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed

Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed

Comments
2 min read
Scoring two OpenVPN flaws against your own exposure, not the internet's

Scoring two OpenVPN flaws against your own exposure, not the internet's

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.