Vulnerability

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Cover image for Your Server's Public Key Is All I Need to Become Admin, CVE-2026-29000

Amartya Jha

Mar 5

Your Server's Public Key Is All I Need to Become Admin, CVE-2026-29000

#security #java #jwt #vulnerability

5 min read

Dar Fazulyanov

Mar 5

Breaking: New "PleaseFix" Vulnerabilities Turn AI Agents Against Their Users

#ai #security #cybersecurity #vulnerability

3 min read

Ksenia Rudneva

Mar 5

Pac4j-JWT Authentication Bypass Vulnerability Undetected for Six Years Despite Advanced Security Tools

#security #vulnerability #ai #auditing

9 min read

DeepSeaX

Mar 1

ClawJacked: How Malicious Websites Hijack Local AI Agents via WebSocket

#aisecurity #websocket #openclaw #vulnerability

3 min read

ecap0

Feb 16

Context Pivoting: A New Attack Vector in Multi-Server MCP Deployments

#security #mcp #ai #vulnerability

4 min read

Amit Ambekar

Feb 3

🔄 January: Patch & Vulnerability Management — Fix the Gaps Before Attackers Exploit Them

#cybersecurity #vulnerability #exploit #cyber

2 min read

Cover image for The Repository That Steals Your API Key: A Story About Environment Overrides in Claude Code

Jonathan Santilli

Jan 30

The Repository That Steals Your API Key: A Story About Environment Overrides in Claude Code

#claudecode #ai #vulnerability #devsec

7 min read

Mark0

Jan 30

CVE-2025-12758: Unicode Variation Selectors Bypass in 'validator' library (isLength)

#cybersecurity #infosec #javascript #vulnerability

1 min read

Cover image for Deep Dive into Zero-Day Exploits: Part 1

Emanuele Balsamo for CyberPath

Jan 2

Deep Dive into Zero-Day Exploits: Part 1

#zeroday #exploit #development #vulnerability

9 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Forem

# vulnerability

Your Server's Public Key Is All I Need to Become Admin, CVE-2026-29000

Breaking: New "PleaseFix" Vulnerabilities Turn AI Agents Against Their Users

Pac4j-JWT Authentication Bypass Vulnerability Undetected for Six Years Despite Advanced Security Tools

ClawJacked: How Malicious Websites Hijack Local AI Agents via WebSocket

Context Pivoting: A New Attack Vector in Multi-Server MCP Deployments

🔄 January: Patch & Vulnerability Management — Fix the Gaps Before Attackers Exploit Them

The Repository That Steals Your API Key: A Story About Environment Overrides in Claude Code

CVE-2025-12758: Unicode Variation Selectors Bypass in 'validator' library (isLength)

Deep Dive into Zero-Day Exploits: Part 1