DEV Community

Michael Kantor profile picture

Michael Kantor

404 bio not found

CVE-2026-44763: Path Traversal in SAP MII Writes Files Outside Intended Directories

CVE-2026-44763: Path Traversal in SAP MII Writes Files Outside Intended Directories

Comments
3 min read
CVE-2026-12624: HashiCorp Vault LIST Authorization Bypass via Trailing Slash

CVE-2026-12624: HashiCorp Vault LIST Authorization Bypass via Trailing Slash

Comments
4 min read
CVE-2026-49819: UpSnap Initial-Superuser Takeover Chained to Root RCE

CVE-2026-49819: UpSnap Initial-Superuser Takeover Chained to Root RCE

Comments
3 min read
CVE-2026-19135: OpenNMS JEXL Measurement Sandbox Bypass

CVE-2026-19135: OpenNMS JEXL Measurement Sandbox Bypass

Comments
3 min read
CVE-2026-69112: Hugging Face Accelerate Path Traversal Lets Attackers Read Arbitrary Files

CVE-2026-69112: Hugging Face Accelerate Path Traversal Lets Attackers Read Arbitrary Files

Comments
4 min read
CVE-2026-72842: OpenWrt luci-app-lxc ACL bypass to root code execution

CVE-2026-72842: OpenWrt luci-app-lxc ACL bypass to root code execution

Comments
3 min read
CVE-2026-72880: Dokploy Certificate Path Traversal Enables Arbitrary File Write and Remote Code Execution

CVE-2026-72880: Dokploy Certificate Path Traversal Enables Arbitrary File Write and Remote Code Execution

Comments
4 min read
BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

BREAKING: CVE-2026-18500 - @fastify/jwt Key Override Authorization Bypass

Comments
2 min read
BREAKING: CVE-2026-18165 - @fastify/oauth2 Login CSRF via Plantable State Cookies

BREAKING: CVE-2026-18165 - @fastify/oauth2 Login CSRF via Plantable State Cookies

Comments
2 min read
BREAKING: CVE-2026-19598 - Pods WordPress Plugin Unauthenticated Admin Takeover

BREAKING: CVE-2026-19598 - Pods WordPress Plugin Unauthenticated Admin Takeover

Comments
3 min read
BREAKING: CVE-2026-18549 - @fastify/multipart Aborted Upload DoS

BREAKING: CVE-2026-18549 - @fastify/multipart Aborted Upload DoS

Comments
3 min read
BREAKING: CVE-2026-73046 - SiYuan Basic Auth Lockout Bypass Enables Admin Brute Force

BREAKING: CVE-2026-73046 - SiYuan Basic Auth Lockout Bypass Enables Admin Brute Force

Comments
4 min read
BREAKING: CVE-2026-73043 - SiYuan Template Calculation RCE in Desktop Client

BREAKING: CVE-2026-73043 - SiYuan Template Calculation RCE in Desktop Client

Comments
3 min read
BREAKING: CVE-2026-74764 - Pandora TAR Path Traversal Enables Arbitrary File Write

BREAKING: CVE-2026-74764 - Pandora TAR Path Traversal Enables Arbitrary File Write

Comments
4 min read
BREAKING: CVE-2026-18432 - Frontend Admin WordPress Unauthenticated Admin Takeover

BREAKING: CVE-2026-18432 - Frontend Admin WordPress Unauthenticated Admin Takeover

Comments
3 min read
BREAKING: CVE-2026-76850 - LMDeploy Pickle RCE in Disaggregated Serving

BREAKING: CVE-2026-76850 - LMDeploy Pickle RCE in Disaggregated Serving

Comments
5 min read
CVE-2026-76832: Agno PythonTools Path Traversal Escapes base_dir

CVE-2026-76832: Agno PythonTools Path Traversal Escapes base_dir

Comments
5 min read
CVE-2026-77068: n8n Member RCE via MCP Node-Schema Path Traversal

CVE-2026-77068: n8n Member RCE via MCP Node-Schema Path Traversal

Comments
5 min read
CVE-2026-19516: Grafana MCP Server SSRF Via Caller-Controlled URL Header

CVE-2026-19516: Grafana MCP Server SSRF Via Caller-Controlled URL Header

Comments
4 min read
CVE-2026-18420: OpenSearch Dashboards TSVB Prototype Pollution RCE

CVE-2026-18420: OpenSearch Dashboards TSVB Prototype Pollution RCE

Comments
4 min read
CVE-2026-75899: fast-uri SSRF via Repeated Hostname Decoding

CVE-2026-75899: fast-uri SSRF via Repeated Hostname Decoding

Comments
4 min read
CVE-2026-5006: Vault Privilege Escalation via Slash Injection in Templated Policy Paths

CVE-2026-5006: Vault Privilege Escalation via Slash Injection in Templated Policy Paths

Comments
3 min read
CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation

CVE-2026-53561: Apache Hive HiveServer2 SAML Bearer Impersonation

Comments
5 min read
CVE-2026-63072: OpenSSL CMS decrypt writes eight bytes past the unwrap buffer

CVE-2026-63072: OpenSSL CMS decrypt writes eight bytes past the unwrap buffer

Comments
6 min read
CVE-2026-80104: DB-GPT Skill Upload Path Traversal (and Sibling CVE-2026-73034)

CVE-2026-80104: DB-GPT Skill Upload Path Traversal (and Sibling CVE-2026-73034)

Comments
4 min read
BREAKING: Next.js unauthenticated RCE in image optimization and Windows servers (CVE-2026-75604)

BREAKING: Next.js unauthenticated RCE in image optimization and Windows servers (CVE-2026-75604)

Comments
4 min read
CVE-2026-45018: Chainlit MCP stdio unauthenticated RCE (and sibling CVE-2026-45019)

CVE-2026-45018: Chainlit MCP stdio unauthenticated RCE (and sibling CVE-2026-45019)

Comments
3 min read
CVE-2026-19042: TeamViewer Linux Chat Link Command Injection (and Sibling CVE-2026-16444)

CVE-2026-19042: TeamViewer Linux Chat Link Command Injection (and Sibling CVE-2026-16444)

Comments
5 min read
CVE-2026-81934: Redis TLS pending-list use-after-free (public RCE PoC)

CVE-2026-81934: Redis TLS pending-list use-after-free (public RCE PoC)

Comments
3 min read
BREAKING: WatchGuard Fireware iked type-confusion on IKE_AUTH

BREAKING: WatchGuard Fireware iked type-confusion on IKE_AUTH

Comments
5 min read
BREAKING: PaperCut NG/MF unauth admin config plus class-loading

BREAKING: PaperCut NG/MF unauth admin config plus class-loading

Comments
5 min read
BREAKING: JFrog Artifactory unauth admin on default config

BREAKING: JFrog Artifactory unauth admin on default config

Comments
4 min read
Trust Before Install: Why We Built Codex Plugin Scanner

Trust Before Install: Why We Built Codex Plugin Scanner

Comments
5 min read
E2E Test Scheduled Post

E2E Test Scheduled Post

Comments
1 min read
Building End-to-End Encrypted Agent Conversations with Registry Broker

Building End-to-End Encrypted Agent Conversations with Registry Broker

Comments
5 min read
Building Always-On AI Agents: From Passive Chatbots to Autonomous Services

Building Always-On AI Agents: From Passive Chatbots to Autonomous Services

Comments
4 min read
ERC-8004: Building Trustless AI Agent Identity on the Blockchain

ERC-8004: Building Trustless AI Agent Identity on the Blockchain

Comments
5 min read
Discovering MIT NANDA Agents with Registry Broker

Discovering MIT NANDA Agents with Registry Broker

Comments
5 min read
Launch an ERC-8004 AI Agent on Registry Broker

Launch an ERC-8004 AI Agent on Registry Broker

Comments
5 min read
Discover the best Virtuals Agents with the HOL Registry Broker

Discover the best Virtuals Agents with the HOL Registry Broker

Comments
7 min read
HCS-14 Profiles and .agent's AID Resolution

HCS-14 Profiles and .agent's AID Resolution

1
Comments
2 min read
Building a Decentralized Registry in Go with HCS-2 on Hedera

Building a Decentralized Registry in Go with HCS-2 on Hedera

1
Comments
5 min read
Agent Discovery — Week 10, 2026

Agent Discovery — Week 10, 2026

1
Comments
3 min read
State of AI Agents — March 2026

State of AI Agents — March 2026

Comments 3
4 min read
Building a Decentralized Registry in Go with HCS-2 on Hedera

Building a Decentralized Registry in Go with HCS-2 on Hedera

Comments
6 min read
HCS-14 Profiles and .agent's AID Resolution

HCS-14 Profiles and .agent's AID Resolution

Comments
2 min read
Discover the best Virtuals Agents with the HOL Registry Broker

Discover the best Virtuals Agents with the HOL Registry Broker

Comments
9 min read
Launch an ERC-8004 AI Agent on Registry Broker

Launch an ERC-8004 AI Agent on Registry Broker

Comments
6 min read
Discovering MIT NANDA Agents with Registry Broker

Discovering MIT NANDA Agents with Registry Broker

Comments
6 min read
ERC-8004: Building Trustless AI Agent Identity on the Blockchain

ERC-8004: Building Trustless AI Agent Identity on the Blockchain

Comments
7 min read
Building Always-On AI Agents: From Passive Chatbots to Autonomous Services

Building Always-On AI Agents: From Passive Chatbots to Autonomous Services

Comments
6 min read
Building End-to-End Encrypted Agent Conversations with Registry Broker

Building End-to-End Encrypted Agent Conversations with Registry Broker

Comments
7 min read
How to Make Your MCP Server Discoverable with Registry Broker

How to Make Your MCP Server Discoverable with Registry Broker

Comments
6 min read
How to Register and Monetize AI Agents with x402 Payment Protocol

How to Register and Monetize AI Agents with x402 Payment Protocol

Comments
6 min read
How to Connect AgentVerse Agents to Your Application Using HCS-10

How to Connect AgentVerse Agents to Your Application Using HCS-10

1
Comments
7 min read
TrustMesh – Decentralized Trust Signaling with Scend

TrustMesh – Decentralized Trust Signaling with Scend

Comments
5 min read
November Recap: Hashnet MCP Server, ERC‑8004 expansions, HCS‑21, and Patchwork

November Recap: Hashnet MCP Server, ERC‑8004 expansions, HCS‑21, and Patchwork

Comments
5 min read
Tashi Network Joins Hashgraph Online DAO: Real-Time Mesh Meets On-Chain Infrastructure

Tashi Network Joins Hashgraph Online DAO: Real-Time Mesh Meets On-Chain Infrastructure

Comments
4 min read
AI AppNets and Decentralized Profiles arrive on Hedera / Hiero

AI AppNets and Decentralized Profiles arrive on Hedera / Hiero

Comments
5 min read
October Recap: Registry Broker is live, Tashi is joining our DAO, Africa Hackathon finale, and new HCS drafts

October Recap: Registry Broker is live, Tashi is joining our DAO, Africa Hackathon finale, and new HCS drafts

Comments
4 min read
loading...