Tech news from the best sources
CVE-2026-48854: Unauthenticated Denial of Service via Resource Exhaustion in elixir-grpc Server Vulnerability ID: CVE-2026-48854 CVSS Score: 8.7 Pub…
🔐 Vulnerability ID: CVE-2026-13736 | 🎯 CVSS Score: 5.3 Medium | 🏆 Lead Researcher: Huynh Kien Minh (MinhHK) | 🔗 WPScan Advisory: Verified Report | 🌐…
GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles Vulnerability ID: GHSA-5CWR-5JXG-PCF6 C…
A critical nginx vulnerability, 9.2 on CVSS, sat in the code for eighteen years. It was found not by a human but by an AI agent, and six hours were…
TL;DR What: Gammu SMSD — the daemon behind a huge number of SMS gateways, alerting rigs and 2FA senders — runs an operator-configured hook every tim…
TL;DR What: POST /api/v1/customer_account_transaction in Open Food Network authorized against the class , not the record. It took customer_id straig…
Everyone's telling you the same thing right now: update WordPress. Which is, fine, yes, obviously but that's not enough. Patching closes the hole. W…
Every open-source CVE backlog has that one line item you keep sliding into next quarter. The library is a couple of majors behind, the upgrade break…
Introduction: The CVE Request Process and Its Challenges The Common Vulnerabilities and Exposures (CVE) ID request process serves as a cornerstone f…
In large networks, security teams receive hundreds of CVE notifications every day. It is resource-intensive to patch all vulnerabilities at once and…
CVE-2026-48710: Starlette BadHost HTTP Host-Header Path-Poisoning and Authentication Bypass Vulnerability ID: CVE-2026-48710 CVSS Score: 7.0 Publish…
Last week, precisely on a Monday morning, the "Critical Alert" notifications on my monitor struck fear into my eyes. The systems running on my own V…
Introducing Reachble — open-source VEX generation for npm projects, backed by import-graph reachability analysis. I got tired of triaging the same C…