Vulnerability Insights Archive

Understanding DNS attacks: Identifying and patching vulnerabilities

October 26, 2022

Reviewing CVE-2022-42889: The arbitrary code execution vulnerability in Apache Commons Text

October 18, 2022

Phony PyPi package imitates known developer

October 5, 2022

Command injection vulnerability in Snyk CLI released prior to September 1, 2022 (older than v1.996.0)

October 3, 2022

Avoiding SMTP Injection: A Whitebox primer

September 15, 2022

Rediscovering argument injection when using VCS tools — git and mercurial

August 23, 2022

Ruby gem installations can expose you to lockfile injection attacks

August 17, 2022

Snyk finds PyPi malware that steals Discord and Roblox credential and payment info

August 16, 2022

Controlling your server with a reverse shell attack

August 10, 2022

Buffer overflow attacks in C++: A hands-on guide

July 28, 2022

Exploring CVE-2022-33980: the Apache Commons configuration RCE vulnerability

July 8, 2022

Safer together: Snyk and CISPA collaborate for the greater good

June 6, 2022