DEV Community

#appsec

Application security topics beyond the web, including mobile and desktop applications.

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Inviting an Editor was blocked, promoting an Author to Editor wasn't: a role-check shortcut in Ghost (CVE-2026-105678)
santosh_kumarpuppala_96e profile

Inviting an Editor was blocked, promoting an Author to Editor wasn't: a role-check shortcut in Ghost (CVE-2026-105678)

#security #javascript #node #appsec
Comments
7 min read
🍪 CSRF in 2026: Why SameSite Isn't Your Fix (and What Is)
krishna_kumar_75bdf350b26 profile

🍪 CSRF in 2026: Why SameSite Isn't Your Fix (and What Is)

#security #webdev #appsec #python
Comments
9 min read
🔀 Open Redirects: Why Your ?next= Check Fails, and How to Prove It
krishna_kumar_75bdf350b26 profile

🔀 Open Redirects: Why Your ?next= Check Fails, and How to Prove It

#security #webdev #appsec #javascript
Comments
9 min read
Group and session filters checked the column name, profile filters didn't: ClickHouse SQL injection in OpenPanel (CVE-2026-88890)
santosh_kumarpuppala_96e profile

Group and session filters checked the column name, profile filters didn't: ClickHouse SQL injection in OpenPanel (CVE-2026-88890)

#security #typescript #appsec #database
Comments
7 min read
One exclamation mark switched off the check: forged alarm acknowledgements in OpenNMS (CVE-2026-19182)
santosh_kumarpuppala_96e profile

One exclamation mark switched off the check: forged alarm acknowledgements in OpenNMS (CVE-2026-19182)

#security #java #appsec #networking
Comments
6 min read
Allowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2)
santosh_kumarpuppala_96e profile

Allowed to view the Location, handed the Device: a GraphQL permission gap in Nautobot (GHSA-mfwj-pjgx-22v2)

#security #graphql #python #appsec
Comments
9 min read
The viewer checked the domain, the delete button didn't: cross-tenant quarantine IDOR in MailWatch (CVE-2026-85749)
santosh_kumarpuppala_96e profile

The viewer checked the domain, the delete button didn't: cross-tenant quarantine IDOR in MailWatch (CVE-2026-85749)

#security #php #appsec #email
Comments
6 min read
One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit
santosh_kumarpuppala_96e profile

One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit

#security #cve #java #appsec
Comments
8 min read
“Web cache deception, explained: how a URL extension confuses the cache into storing your private page”
martins808 profile

“Web cache deception, explained: how a URL extension confuses the cache into storing your private page”

#cybersecurity #websecurity #burpsuite #appsec
Comments
3 min read
🔑 JWT Verification Bugs: Pin the Algorithm, Then Prove the Fix
krishna_kumar_75bdf350b26 profile

🔑 JWT Verification Bugs: Pin the Algorithm, Then Prove the Fix

#security #appsec #python #javascript
Comments
9 min read
Top 5 Qualys Alternatives for Vulnerability Management in 2027
alexcybersmith profile

Top 5 Qualys Alternatives for Vulnerability Management in 2027

#devsecops #appsec #cybersecurity #security
Comments
12 min read
The AI Security Stories Are Boring Now, and That's the Point
coridev profile
Cor E

The AI Security Stories Are Boring Now, and That's the Point

#security #ai #appsec #cybersecurity
2
Comments
3 min read
Langflow's Critical Flaws Show Why Agent Tool Calls Need a Scrub Layer, Not Just a Patch
coridev profile
Cor E

Langflow's Critical Flaws Show Why Agent Tool Calls Need a Scrub Layer, Not Just a Patch

#security #ai #appsec #sentinel
2
Comments
5 min read
📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved
krishna_kumar_75bdf350b26 profile

📏 CVSS 4.0 for Bug Reports: Score the Impact You Actually Proved

#security #bugbounty #appsec #webdev
Comments
10 min read
The AI endpoint that charges you money when somebody abuses it
lawaloyinlola profile

The AI endpoint that charges you money when somebody abuses it

#security #ai #appsec #webdev
Comments 1
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.