SiteGuard's statistics feature runs attacker commands as root
A command-injection bug in the statistics function of SiteGuard Server Edition lets an attacker run OS commands as root or SYSTEM on the host, and i…
DevOps
⚑ Сообщить о проблемеПоследние новости DevOps от Tech News
Все темы
agents
ai
api
architecture
automation
aws
backend
beginners
cloud
database
devchallenge
devops
docker
javascript
kubernetes
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
testing
tutorial
typescript
webdev
PaperCut Vulnerabilities Enable Pre-Authentication RCE: Patch Now to Prevent System Compromise
Introduction: The Critical Threat Within Print Management Systems A seemingly innocuous print management system has emerged as a critical attack vec…
CVE-2026-41264: How a Regex Let Prompts Run Code in Flowise
import pandas as np , os as pandas pandas . system ( " xcalc " ) Those two lines are the whole bypass in CVE-2026-41264 , a CVSS 9.8 bug in Flowise…
Ghost CMS Mass Disclosure — 6 CVEs Including CVSS 8.1 Staff Session Bypass
A Ghost staff user with valid credentials can log into any other staff account using only the target's password — bypassing 2FA entirely. CVE-2026-1…
CVE-2026-67401 Analysis — cPanel & WHM EmailTrack SQL Injection, From Mail Account to Root
Vulnerability Overview Item Detail CVE ID CVE-2026-67401 Component cPanel & WHM — EmailTrack (Email ▸ Track Delivery) Vulnerability class CWE-89…
LightLLM Mass Disclosure — 2 CVSS 9.8 Unauthenticated RCE in LLM Serving Framework
Two unauthenticated CVSS 9.8 RCEs in LightLLM — the LLM serving framework used with LLaMA, Mistral, and Qwen deployments. No patch confirmed. All ve…
Confused Deputy: The Old Bug That AI Agents Keep Reintroducing
Back in 1988, a compiler running on a commercial timesharing system had permission to write to a shared directory for recording language feature usa…
Confirmed vs. Potential Vulnerabilities: How to Act on Each Without Creating Alert Fatigue
Confirmed vulnerabilities are security flaws a scanner has actively verified as present — through direct proof, not inference. Potential vulnerabili…
CVE-2026–17633 - Authenticated RCE in Langflow OSS via /api/v1/custom_component
Summary Field Value CVE ID CVE-2026-17633 CVSS 8.5 (HIGH) CWE CWE-94 (Improper Control of Generation of Code) Affected Langflow OSS 1.0.0 – 1.10.3 P…
Droid ASC: A High-Performance Tool for Android Reverse Engineering and Vulnerability Discovery
Article Summary: Droid ASC is a high-performance tool for Android reverse engineering and mobile security testing. It reduces memory usage by two or…
CVE-2026-12243 — How a Percent-Encoded Slash Bypasses NLTK's Path Traversal Guard
CVE ID CVE-2026-12243 Affects NLTK (Natural Language Toolkit) ≤ 3.9.4 Weakness CWE-22 (Path Traversal) CVSS 3.1 7.5 High — AV:N/AC:L/PR:N/UI:N/S:U/C…
Finding Exposed Services (and Fixing Them) with ScanSearch
Ever wondered what parts of your infrastructure are accidentally visible to the entire internet? It's a common blind spot. We spend a lot of time se…
Benchmarking GPT-4o, Claude 3.5 Sonnet, and Llama 3 for Automated Code Auditing & Vulnerability Detection
Evaluating LLMs on standardized leaderboards (like MMLU or HumanEval) is helpful, but it rarely tells you how a model performs on real-world edge ca…
Go-go Gadget...
Are you looking for vulnerability intel that standard scanners skip? OSV-Scanner is an awesome SCA tool for unearthing vulnerabilities in open-sourc…
PamStealer: the macOS stealer that checks your password through PAM before stealing it
Someone double-clicks what they think is Maccy, a clipboard manager, and gets a macOS password prompt: "Maccy wants to make changes." They type it i…
One CVE, four ignore files: unifying Trivy, Grype, Snyk and osv-scanner
You triaged the CVE. A scanner flagged CVE-2023-45853 in zlib, you read the advisory, confirmed the vulnerable code path isn’t reachable from your i…
Топ самых интересных CVE за апрель 2026 года
Собрали самые интересные CVE апреля в нашу традиционную подборку. Критическими уязвимостями под RCE в прошлом месяце отметились Microsoft Azure и Bi…