DEV Community

#vulnerabilitymanagement

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
AI and the October 2026 vulnerability storm: what the numbers show

AI and the October 2026 vulnerability storm: what the numbers show

5
Comments
9 min read
Enterprise Vulnerability Assessment: Prioritizing Log4Shell & Zerologon (NIST SP 800-115)

Enterprise Vulnerability Assessment: Prioritizing Log4Shell & Zerologon (NIST SP 800-115)

Comments
2 min read
Prioritizing CVE-2026-60004: why CISA KEV changes the response

Prioritizing CVE-2026-60004: why CISA KEV changes the response

Comments
3 min read
Forensic checks for CVE-2026-60004 exploitation in Gitea

Forensic checks for CVE-2026-60004 exploitation in Gitea

Comments
3 min read
VEX should record a vulnerability decision, not create a blanket exemption

VEX should record a vulnerability decision, not create a blanket exemption

Comments
4 min read
Six Linux kernel reports, one public root exploit, and no CVE to track them by

Six Linux kernel reports, one public root exploit, and no CVE to track them by

Comments
4 min read
Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances

Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances

Comments
4 min read
Log injection turns ZooKeeper audit records into attacker-controlled text

Log injection turns ZooKeeper audit records into attacker-controlled text

Comments
5 min read
Four SQL injection bugs in the appliance that keeps your firewall logs

Four SQL injection bugs in the appliance that keeps your firewall logs

Comments
4 min read
Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path

Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path

Comments
4 min read
Session invalidation is a route problem, not a flag problem

Session invalidation is a route problem, not a flag problem

Comments
5 min read
ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed

ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed

Comments
4 min read
Five ways a Groovy sandbox leaked, and what that says about sandbox design

Five ways a Groovy sandbox leaked, and what that says about sandbox design

Comments
4 min read
A request smuggling flaw on an ADC is a flaw in everything behind it

A request smuggling flaw on an ADC is a flaw in everything behind it

Comments
4 min read
A virtual machine escape is a workstation problem until CI shares the hypervisor

A virtual machine escape is a workstation problem until CI shares the hypervisor

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.