32 posts tagged with "appsec".
All postsBreakdown of CVE-2026-45321, the TanStack supply chain compromise. An attacker chained a pull_request_target misconfiguration, GitHub Action...
A critical double-free bug in Apache HTTP Server 2.4.66 lets unauthenticated attackers crash worker processes with two HTTP/2 frames, and es...
Dirty Frag chains two Linux kernel LPE vulnerabilities (CVE-2026-43284 in IPSec ESP, CVE-2026-43500 in RxRPC) to achieve instant root on vir...
A regression in ASP.NET Core Data Protection broke HMAC validation, exposing apps to forged authentication cookies and padding oracle attack...
CVE-2026-41940 is a critical (CVSS 9.8) authentication bypass in cPanel and WHM that lets unauthenticated attackers gain root-level server a...
A logic flaw in the Linux kernel's crypto subsystem, dormant since 2017, now lets any unprivileged local user write into the page cache of f...
CVE-2026-3854 turned a single git push into RCE on GitHub.com and GitHub Enterprise Server. We break down what happened for executives, then...
AppSec teams have a math problem. Code ships faster than it can be reviewed, pentests are snapshots, and scanners are loud. Here is why we b...
Connect your repositories and let AI agents handle continuous scanning, research, and triage.
Choose which categories you are happy to allow. You can change your mind at any time using the Cookie settings link in the footer.