Tag feed

#vulnerability

2,340 posts31 followers

Explore Hashnode

Alternatives

Trending tags this week

4F404 Founders404-founders.com19h ago · 3 min read

Pixel Modem CVE-2026-58704: Zero-Click Flaw Exploited

Google has patched CVE-2026-58704, a high-severity privilege-escalation flaw in the Pixel cellular modem. The CVE describes remote proximal/adjacent exploitation with no user interaction; the publishe

0

4F404 Founders404-founders.com1d ago · 3 min read

Cisco ISE CVE-2026-76460: CVSS 10.0 Auth Bypass Exploited

Cisco Identity Services Engine (ISE) has a CVSS 10.0 authentication-bypass vulnerability under active exploitation. An unauthenticated remote attacker can send a crafted request to an affected API end

0

Oodufuwababajide77kay-security-labs.hashnode.dev3d ago · 4 min read

Why CVSS Isn't a Measure of Risk

When a new critical CVE drops, security teams often rush to patch any system with a 9.0+ CVSS score. However, prioritizing vulnerability remediation strictly by its Common Vulnerability Scoring System

0

4F404 Founders404-founders.com4d ago · 7 min read

JFrog Artifactory CVE-2026-42018 + CVE-2026-42016: Admin Chain

Attackers chained two JFrog Artifactory bugs - CVE-2026-42018 and CVE-2026-42016 - to forge administrator tokens without credentials, then planted Groovy plugins and Rust backdoors inside software bui

0

Aaivr-blogaivr.hashnode.dev5d ago · 12 min read

Finding 0days with AI: Part II

In the first blog post, we covered the process from start to finish, focusing mostly on writing good prompts, tooling and techniques. It's recommended you read it first before continuing with this one

0

4F404 Founders404-founders.com5d ago · 14 min read

GitSpawn: How .git/config Hijacks AI Coding Agents

A repository's .git/config file has a field called core.fsmonitor. When set, it names an external program that Git runs during index refresh to find out which files changed recently. The program retur

0

FHFaiz Hussaincybersecurity-insights.hashnode.dev6d ago · 4 min read

How Hackers Find Information About a Website — An Introduction to Reconnaissance

A web application rarely exposes its entire attack surface through its homepage. Behind a single domain may exist APIs, subdomains, cloud services, authentication portals, development environments, th

1

J

4F404 Founders404-founders.com5d ago · 5 min read

GitLab CVE-2026-85706: CVSS 10.0 File Read Exploited

GitLab CVE-2026-85706: CVSS 10.0 File Read Exploited GitLab has patched CVE-2026-85706, a CVSS 10.0 path-traversal and authentication-control flaw in the repository commits API that, under affected co

0

4F404 Founders404-founders.comSep 12 · 5 min read

ScreenConnect CVE-2026-84869: File Exec via Live Session

ConnectWise ScreenConnect's remote-support client has an actively exploited missing-authorization flaw that lets attackers transfer and execute arbitrary files during live sessions, without the host m

0

4F404 Founders404-founders.comSep 11 · 5 min read

cPanel CVE-2026-67401: EmailTrack SQL Injection to Root

cPanel's EmailTrack module has an SQL injection flaw (CVE-2026-67401, CVSS 9.9) that turns a low-privilege mail account into root-level code execution. Every supported cPanel/WHM version was affected;

0

#vulnerability

Search Hashnode

#vulnerability

Explore Hashnode

Trending tags this week

Pixel Modem CVE-2026-58704: Zero-Click Flaw Exploited

Cisco ISE CVE-2026-76460: CVSS 10.0 Auth Bypass Exploited

Why CVSS Isn't a Measure of Risk

JFrog Artifactory CVE-2026-42018 + CVE-2026-42016: Admin Chain

Finding 0days with AI: Part II

GitSpawn: How .git/config Hijacks AI Coding Agents

How Hackers Find Information About a Website — An Introduction to Reconnaissance

GitLab CVE-2026-85706: CVSS 10.0 File Read Exploited

ScreenConnect CVE-2026-84869: File Exec via Live Session

cPanel CVE-2026-67401: EmailTrack SQL Injection to Root