vulnerability on Hacker News

101 titles from 95 authors in the last 30 days, with 90 distinct links and 4 Show HN.

Counts titles, it does not confirm facts. Open the source before concluding anything.

Projects on this term

The score comes from our model.

• Show HN: NoVul – Open-source Mac app to Find and fix vulnerabilities on your Mac · score 6.3

  NoVul is a macOS menu bar app that aggregates vulnerability and exposed-secret findings across local projects, Homebrew packages, global tools, runtimes, and AI coding tools, ranking issues using OSV, CISA KEV, EPSS, and end-of-life data. It offers a fix plan, private local scanning mode, and MCP/CLI integration so coding agents can read and remediate findings. The combination of desktop vulnerability triage with agent-driven fixes is a practical, well-scoped use of existing data sources.

• Show HN: Free CVE feed for agents to lookup vulnerabilities · score 5.0

  Casco provides a free, API-key-less CVE feed and vulnerability checker designed for AI agents and developers. It offers RSS/JSON feeds, incremental updates, and a batch endpoint to check installed dependencies or SBOMs against OSV data, with careful handling of unknown states and caching. The project is useful but not highly novel, as it wraps existing CVE and OSV sources into an agent-friendly interface.

• Show HN: Self-diagnosis of vulnerabilities such as PHP2Shell via IP/Domain · score 4.0

  A free external security self-check service that scans a domain or IP for open ports, known CVEs, and web vulnerabilities via public information and passive fingerprinting. It is a SaaS-style web tool with emphasis on non-intrusive scanning, but lacks open-source code, documentation, or novel methodology.

Recent titles

1. TeamViewer RCE Vulnerability (CVE-2026-111585)
   2026-11-01 · remedio.io · HN discussion
2. SBoM creator and Vulnerability scanner (Threatclaw.ai)
   2026-10-31 · threatclaw.ai · HN discussion
3. Bitcoin Core discloses TCP out-of-memory vulnerability
   2026-10-31 · bitcoincore.org · HN discussion
4. Unauthenticated RCE vulnerability against ClickHouse Server
   2026-10-30 · cve.now · HN discussion
5. Show HN: Free CVE feed for agents to lookup vulnerabilities
   2026-10-29 · casco.com · HN discussion
6. Undisclosed Patch Vulnerability Caused HTTP2Shell via If-Statement
   2026-10-29 · bugsink.com · HN discussion
7. Two unpatched zero-day vulnerabilities in NTE allow for full account takeover
   2026-10-29 · hunio.org · HN discussion
8. Discovering and exploiting vulnerabilities in critical software with Claude
   2026-10-29 · anthropic.com · HN discussion
9. Show HN: Self-diagnosis of vulnerabilities such as PHP2Shell via IP/Domain
   2026-10-28 · aipentest.jclab.kr · HN discussion
10. Show HN: NoVul – Open-source Mac app to Find and fix vulnerabilities on your Mac
    2026-10-28 · github.com · HN discussion
11. Show HN: NoVul – Find and Fix Vulnerabilities On
    2026-10-28 · HN discussion
12. What an External Vulnerability Scan Checks
    2026-10-27 · HN discussion
13. Mapping the landscape of software vulnerabilities in connected vehicles
    2026-10-27 · link.springer.com · HN discussion
14. What WordPress Calendar Vulnerabilities Reveal About Trusting User Content
    2026-10-26 · cybersecurity-insiders.com · HN discussion
15. Vulnocalypse: Live tracker of new security vulnerabilities
    2026-10-26 · vulnocalypse.com · HN discussion
16. The Vulnerability Apocalypse and Why We Should Fund Open Source
    2026-10-24 · eff.org · HN discussion
17. Node.js Vulnerability Blog
    2026-10-24 · nodejs.org · HN discussion
18. Rings of Risk: Consequence and Reachability in Vulnerability Chains [pdf]
    2026-10-24 · kolega.ai · HN discussion
19. AWS Continuum for code vulnerabilities is now generally available
    2026-10-24 · aws.amazon.com · HN discussion
20. Brotli Decoder Vulnerability
    2026-10-24 · patchtheplanet.org · HN discussion
21. Brotli vulnerability affects curl and Git
    2026-10-23 · github.com · HN discussion
22. Project Copacetic: Directly patch container image vulnerabilities
    2026-10-23 · project-copacetic.github.io · HN discussion
23. A tale of two PHP remote vulnerabilities
    2026-10-23 · calif.io · HN discussion
24. Node2Shell: Node.js Brotli vulnerability allows remote code execution
    2026-10-23 · aikido.dev · HN discussion
25. Coordinated Vulnerability Disclosure: How to do it and why it matters
    2026-10-22 · coordinated-vulnerability-disclosure.github.io · HN discussion
26. Ask HN: Have the PHP vulnerabilities been exploited?
    2026-10-22 · HN discussion
27. Critical Qdrant vulnerability allows unauthenticated access to clusters
    2026-10-22 · github.com · HN discussion
28. Vulnerability Discovery and Exploitation Trends in the AI Era
    2026-10-22 · cloud.google.com · HN discussion
29. Using OpenEngine to continuously discover security vulnerabilities
    2026-10-22 · openengine.cc · HN discussion
30. Ask HN: Can a PHP RCE vulnerability auto-patch vulnerable servers?
    2026-10-22 · HN discussion

All trends