DEV Community

Faizan Akhtar profile picture

Faizan Akhtar

Cyber Security Researcher & Ethical Hacker from Pakistan | Synack Red Team | Bug Bounty Hunter | Daily CVE analysis

Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

Comments
6 min read
CVE-2026-19386: ASUS Router Firmware Arbitrary Code Execution Vulnerability — Analysis & Mitigation

CVE-2026-19386: ASUS Router Firmware Arbitrary Code Execution Vulnerability — Analysis & Mitigation

Comments
7 min read
CVE-2026-85097: Bricksforge WordPress Plugin Arbitrary File Upload Vulnerability — Analysis & Mitigation

CVE-2026-85097: Bricksforge WordPress Plugin Arbitrary File Upload Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-97229: GitLab CI/CD Regex Compiler Integer Overflow Vulnerability — Analysis & Mitigation

CVE-2026-97229: GitLab CI/CD Regex Compiler Integer Overflow Vulnerability — Analysis & Mitigation

Comments
7 min read
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Authentication Bypass — Analysis & Mitigation

CVE-2026-76504: Cisco Catalyst SD-WAN Manager Authentication Bypass — Analysis & Mitigation

Comments
6 min read
CVE-2026-102255: SonicWall SMA1000 Pre-Auth SSRF Vulnerability — Analysis & Mitigation

CVE-2026-102255: SonicWall SMA1000 Pre-Auth SSRF Vulnerability — Analysis & Mitigation

Comments
5 min read
CVE-2026-21589: Atlassian Data Center Arbitrary File Access Vulnerability — Analysis & Mitigation

CVE-2026-21589: Atlassian Data Center Arbitrary File Access Vulnerability — Analysis & Mitigation

Comments
5 min read
DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis

DuckDuckGo CI/CD RCE: How a Single GitHub Workflow Could Have Backdoored Every DuckDuckGo Browser — Writeup Analysis

Comments
6 min read
CVE-2026-107406: Citrix NetScaler SAML Memory Overflow Vulnerability — Analysis & Mitigation

CVE-2026-107406: Citrix NetScaler SAML Memory Overflow Vulnerability — Analysis & Mitigation

Comments
7 min read
CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability — Analysis & Mitigation

CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability — Analysis & Mitigation

Comments 1
7 min read
CVE-2026-17609: Super Forms WordPress Plugin Arbitrary Directory Deletion Vulnerability (CVSS 9.1) — Analysis & Mitigation

CVE-2026-17609: Super Forms WordPress Plugin Arbitrary Directory Deletion Vulnerability (CVSS 9.1) — Analysis & Mitigation

Comments 1
27 min read
CVE-2026-80381: IBM Guardium Data Protection SQL Injection Vulnerability (CVSS 9.8) — Analysis & Mitigation

CVE-2026-80381: IBM Guardium Data Protection SQL Injection Vulnerability (CVSS 9.8) — Analysis & Mitigation

Comments
6 min read
CVE-2026-76482: Cisco License On-Prem Signature Verification Vulnerability (CVSS 10.0) — Analysis & Mitigation

CVE-2026-76482: Cisco License On-Prem Signature Verification Vulnerability (CVSS 10.0) — Analysis & Mitigation

Comments
7 min read
CVE-2026-96940: Microsoft Exchange Server Elevation of Privilege Vulnerability — Analysis & Mitigation

CVE-2026-96940: Microsoft Exchange Server Elevation of Privilege Vulnerability — Analysis & Mitigation

Comments
4 min read
loading...