--- title: "#vulnerabilities articles | Hashnode" description: "Explore 71 articles tagged #vulnerabilities on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/vulnerabilities" --- Tag # #vulnerabilities 71 posts · 9 followers [Cyber Knight](https://hashnode.com/@cyberknight2479) · [9h ago](https://hashnode.com/posts/react-shipped-the-fix-a-month-ago-nobody-could-see-it/6af6b62f752615dbba8a4d05) ### [React Shipped the Fix a Month Ago. Nobody Could See It.](https://nulltrace.hashnode.dev/react-shipped-the-fix-a-month-ago-nobody-could-see-it?utm_source=hashnode&utm_medium=feed) CVE-2026-126187 is a 9.5 in React Server Components — and for four weeks it had no CVE, no security warning, and no scanner that could find it. 4 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/react-shipped-the-fix-a-month-ago-nobody-could-see-it?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Oct 22](https://hashnode.com/posts/a-cvss-10-0-bug-sat-inside-gitlab-for-12-years-it-lived-in-the-regex-engine/6ad9b89b476a7f24ac3d4bc6) ### [A CVSS 10.0 Bug Sat Inside GitLab for 12 Years. It Lived in the Regex Engine.](https://nulltrace.hashnode.dev/a-cvss-10-0-bug-sat-inside-gitlab-for-12-years-it-lived-in-the-regex-engine?utm_source=hashnode&utm_medium=feed) An out-of-band patch fixed an unauthenticated RCE in a library most developers never heard of — and the researcher who found it is just getting started. 4 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/a-cvss-10-0-bug-sat-inside-gitlab-for-12-years-it-lived-in-the-regex-engine?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/a-cvss-10-0-bug-sat-inside-gitlab-for-12-years-it-lived-in-the-regex-engine/6ad9b89b476a7f24ac3d4bc6) [Sunny](https://hashnode.com/@sunny1103) · [Jul 28](https://hashnode.com/posts/tryhackme-vulnerabilities-101-beginner-friendly-learning-guide/6a68c79c893b399cc819e3c6) ### [TryHackMe Vulnerabilities 101 Beginner-Friendly Learning Guide](https://cybersecurity-learning.hashnode.dev/tryhackme-vulnerabilities-101-beginner-friendly-learning-guide?utm_source=hashnode&utm_medium=feed) Understanding vulnerabilities, vulnerability types, CVSS, VPR, vulnerability databases, vulnerability research, and responsible security learning through the TryHackMe Vulnerabilities 101 room. 14 min read · [cybersecurity-learning.hashnode.dev](https://cybersecurity-learning.hashnode.dev/tryhackme-vulnerabilities-101-beginner-friendly-learning-guide?utm_source=hashnode&utm_medium=feed) [rathsara](https://hashnode.com/@rathsara) · [May 19](https://hashnode.com/posts/building-the-technical-foundation-for-continuous-vulnerability-visibility/6a0c898d88372774116c0373) ### [Building The Technical Foundation For Continuous Vulnerability Visibility](https://rr-cyber.hashnode.dev/building-the-technical-foundation-for-continuous-vulnerability-visibility?utm_source=hashnode&utm_medium=feed) How the hybrid scanning architecture, scanner placement, and a configuration problem we didn't anticipate shaped what the deployment actually looked like. 11 min read · [rr-cyber.hashnode.dev](https://rr-cyber.hashnode.dev/building-the-technical-foundation-for-continuous-vulnerability-visibility?utm_source=hashnode&utm_medium=feed) [Satyam Rastogi](https://hashnode.com/@satyamrastogi) · [Apr 29](https://hashnode.com/posts/openemr-38-vulnerability-chain-patient-data-exfil-tampering/69f21ed733f57ae5fea1a6e0) ### [OpenEMR 38-Vulnerability Chain: Patient Data Exfil & Tampering](https://satyamrastogi.hashnode.dev/openemr-38-vulnerability-chain-patient-data-exfil-tampering?utm_source=hashnode&utm_medium=feed) Originally published on satyamrastogi.com 38 vulnerabilities discovered in OpenEMR medical software enable attackers to access, modify, and exfiltrate sensitive patient health information (PHI). Analysis of exploitation techniques, affected healthca... 6 min read · [satyamrastogi.hashnode.dev](https://satyamrastogi.hashnode.dev/openemr-38-vulnerability-chain-patient-data-exfil-tampering?utm_source=hashnode&utm_medium=feed) [Justin Walters](https://hashnode.com/@JustinWalters) · [Apr 11](https://hashnode.com/posts/sneak-peek-unpacking-the-security-architecture-of-exegy-appliances/69dab7bec8e5007ddbea5084) ### [Sneak Peek: Unpacking the Security Architecture of Exegy Appliances](https://exegy.today/sneak-peek-unpacking-the-security-architecture-of-exegy-appliances?utm_source=hashnode&utm_medium=feed) An inside look at the security architecture of Exegy Appliances. 2 min read · [exegy.today](https://exegy.today/sneak-peek-unpacking-the-security-architecture-of-exegy-appliances?utm_source=hashnode&utm_medium=feed) [Justin Walters](https://hashnode.com/@JustinWalters) · [Apr 8](https://hashnode.com/posts/security-risks-and-remediation-managing-wireless-network-authentication/69d6c72a707c1ce768854e73) ### [Security Risks and Remediation: Managing Wireless Network Authentication](https://exegy.today/security-risks-and-remediation-managing-wireless-network-authentication?utm_source=hashnode&utm_medium=feed) Sneek Peek 3 min read · [exegy.today](https://exegy.today/security-risks-and-remediation-managing-wireless-network-authentication?utm_source=hashnode&utm_medium=feed) [Taha Benahmadi](https://hashnode.com/@tahaben) · [Mar 10](https://hashnode.com/posts/oauth-20-vulnerabilities-1-1/69b031bbf24d696930b4b14a) ### [OAuth 2.0 vulnerabilities](https://tahaben.hashnode.dev/oauth-20-vulnerabilities-1-1?utm_source=hashnode&utm_medium=feed) OAuth 2.0 vulnerabilities Terminology (OAuth vs OIDC) OAuth 2.0 is an authorization framework. It delegates access to an app without sharing a password. Many products use OAuth to “log in”. That’s usu 6 min read · [tahaben.hashnode.dev](https://tahaben.hashnode.dev/oauth-20-vulnerabilities-1-1?utm_source=hashnode&utm_medium=feed) [Taha Benahmadi](https://hashnode.com/@tahaben) · [Mar 10](https://hashnode.com/posts/xxe-article/69b034a51963a070749a3d4c) ### [XXE Article](https://tahaben.hashnode.dev/xxe-article?utm_source=hashnode&utm_medium=feed) XXE Definition XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server fi... 3 min read · [tahaben.hashnode.dev](https://tahaben.hashnode.dev/xxe-article?utm_source=hashnode&utm_medium=feed) [Taha Benahmadi](https://hashnode.com/@tahaben) · [Mar 10](https://hashnode.com/posts/path-traversal-1-1/69b031bead3ff10cbdd4c656) ### [Path traversal](https://tahaben.hashnode.dev/path-traversal-1-1?utm_source=hashnode&utm_medium=feed) Path traversal What is path traversal? Path traversal is also known as directory traversal. These vulnerabilities enable an attacker to read arbitrary files on the server that is running an applicatio 7 min read · [tahaben.hashnode.dev](https://tahaben.hashnode.dev/path-traversal-1-1?utm_source=hashnode&utm_medium=feed)