DEV Community

#vulnerabilitymanagement

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Six Linux kernel reports, one public root exploit, and no CVE to track them by

Six Linux kernel reports, one public root exploit, and no CVE to track them by

Comments
4 min read
Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances

Counting the Boxes: A 2,185-Asset Inventory of BeyondTrust Remote Support Edge Appliances

Comments
4 min read
Log injection turns ZooKeeper audit records into attacker-controlled text

Log injection turns ZooKeeper audit records into attacker-controlled text

Comments
5 min read
Four SQL injection bugs in the appliance that keeps your firewall logs

Four SQL injection bugs in the appliance that keeps your firewall logs

Comments
4 min read
Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path

Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path

Comments
4 min read
Session invalidation is a route problem, not a flag problem

Session invalidation is a route problem, not a flag problem

Comments
5 min read
ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed

ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed

Comments
4 min read
Five ways a Groovy sandbox leaked, and what that says about sandbox design

Five ways a Groovy sandbox leaked, and what that says about sandbox design

Comments
4 min read
A request smuggling flaw on an ADC is a flaw in everything behind it

A request smuggling flaw on an ADC is a flaw in everything behind it

Comments
4 min read
A virtual machine escape is a workstation problem until CI shares the hypervisor

A virtual machine escape is a workstation problem until CI shares the hypervisor

Comments
4 min read
Patched Is Not the Same as Safe: Reading Version and Exposure for BeyondTrust Appliances

Patched Is Not the Same as Safe: Reading Version and Exposure for BeyondTrust Appliances

Comments
4 min read
Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not

Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not

Comments
2 min read
Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern

Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern

Comments
2 min read
VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection

VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection

Comments
2 min read
Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle

Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.