Dev.to Security

Security Audit Report: Reentrancy & Access Control Review: Grove Finance

Security Audit Report: Reentrancy & Access Control Review: Grove Finance Target Protocol: Grove Fi…

GHSA-WMMP-3585-3RMP: GHSA-WMMP-3585-3RMP: IDN/Punycode Domain Allow-list Bypass in Nodemailer

GHSA-WMMP-3585-3RMP: IDN/Punycode Domain Allow-list Bypass in Nodemailer Vulnerability ID: GHSA-W…

N-able N-central CVE-2026-86218: Emergency Hotfix for Unauthenticated RCE Zero-Day

1. Basic Information Source Article: Critical N-able N-central Vulnerability and Active Exploita…

StyleSmuggler: Unauthenticated RCE via Adobe Commerce Failed Payment Email Rendering

1. Basic Information Article Title: StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-202…

Automated Reinfection and Worm-Like Lateral Movement via Modified ScreenConnect Clients

1. Basic Information Original Article Title: Rogue ScreenConnect Installations Across Unrelated …

embedwatch v0.1: mide si filtrar tus embeddings equivale a filtrar tus documentos

Tus vectores de embeddings no son "solo números". Un paper de 2025 demuestra que se pueden traducir …

MikroTrick: Active Exploitation of MikroTik RouterOS SSH Authentication Bypass and Privilege Escalation

1. Basic Information Title: Vulnerabilities in MikroTik RouterOS actively exploited Source: CER…

ted and curlRAT: North Korean Linux Surveillance Toolkit Hiding Inside HAProxy

1. Basic Information Article Title: DPRK APTs deploy ted backdoor and curlRAT against South Kore…

BigBear 2.0: Microsoft 365 AiTM Phishing and Session Theft

1. Basic Information Report Title: Tracking BigBear 2.0 Evilginx2 phishing campaign Source: Clo…

HTB - Funnel

OS: Linux Difficulty: Very Easy After doing nmap enumeration: PORT STATE SERVICE VERSION 21/tc…

HTB - Synced

OS: Linux Difficulty: Very Easy After nmap enumeration, we will find: PORT STATE SERVICE VERS…

HTB - Responder

OS: Windows Difficulty: Very Easy As usual, I started by enumerating the target’s open ports and se…