Tag

#vulnerabilities

71 posts9 followers

React Shipped the Fix a Month Ago. Nobody Could See It.

CVE-2026-126187 is a 9.5 in React Server Components — and for four weeks it had no CVE, no security warning, and no scanner that could find it.

4 min readnulltrace.hashnode.dev

Cyber KnightOct 22

A CVSS 10.0 Bug Sat Inside GitLab for 12 Years. It Lived in the Regex Engine.

An out-of-band patch fixed an unauthenticated RCE in a library most developers never heard of — and the researcher who found it is just getting started.

4 min readnulltrace.hashnode.dev

1

SunnyJul 28

TryHackMe Vulnerabilities 101 Beginner-Friendly Learning Guide

Understanding vulnerabilities, vulnerability types, CVSS, VPR, vulnerability databases, vulnerability research, and responsible security learning through the TryHackMe Vulnerabilities 101 room.

14 min readcybersecurity-learning.hashnode.dev

rathsaraMay 19

Building The Technical Foundation For Continuous Vulnerability Visibility

How the hybrid scanning architecture, scanner placement, and a configuration problem we didn't anticipate shaped what the deployment actually looked like.

11 min readrr-cyber.hashnode.dev

Satyam RastogiApr 29

OpenEMR 38-Vulnerability Chain: Patient Data Exfil & Tampering

Originally published on satyamrastogi.com 38 vulnerabilities discovered in OpenEMR medical software enable attackers to access, modify, and exfiltrate sensitive patient health information (PHI). Analysis of exploitation techniques, affected healthca...

6 min readsatyamrastogi.hashnode.dev

Justin WaltersApr 11

Sneak Peek: Unpacking the Security Architecture of Exegy Appliances

An inside look at the security architecture of Exegy Appliances.

2 min readexegy.today

Justin WaltersApr 8

Security Risks and Remediation: Managing Wireless Network Authentication

Sneek Peek

3 min readexegy.today

Taha BenahmadiMar 10

OAuth 2.0 vulnerabilities

OAuth 2.0 vulnerabilities Terminology (OAuth vs OIDC) OAuth 2.0 is an authorization framework. It delegates access to an app without sharing a password. Many products use OAuth to “log in”. That’s usu

6 min readtahaben.hashnode.dev

Taha BenahmadiMar 10

XXE Article

XXE Definition XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server fi...

3 min readtahaben.hashnode.dev

Taha BenahmadiMar 10

Path traversal

Path traversal What is path traversal? Path traversal is also known as directory traversal. These vulnerabilities enable an attacker to read arbitrary files on the server that is running an applicatio

7 min readtahaben.hashnode.dev

Search Hashnode

Trending tags this week

React Shipped the Fix a Month Ago. Nobody Could See It.

A CVSS 10.0 Bug Sat Inside GitLab for 12 Years. It Lived in the Regex Engine.

TryHackMe Vulnerabilities 101 Beginner-Friendly Learning Guide

Building The Technical Foundation For Continuous Vulnerability Visibility

OpenEMR 38-Vulnerability Chain: Patient Data Exfil & Tampering

Sneak Peek: Unpacking the Security Architecture of Exegy Appliances

Security Risks and Remediation: Managing Wireless Network Authentication

OAuth 2.0 vulnerabilities

XXE Article

Path traversal