Curated security research, vulnerabilities, advisories and tools for practitioners.

#exploitation

Security coverage tagged exploitation.

1.

Inside a Russian-Speaking Operator's Ukrainian IP Camera Toolkit

research | 2026-08-10 00:00 | hunt.io | original ↗ | #threat-intelligence | #exploitation | #ip-camera

2.

Critical SQL Injection in Metabase via Password Reset: CVE-2026-72898

vulnerability | 2026-08-06 00:00 | CVE-2026-72898 | bishopfox.com | original ↗ | #sql-injection | #exploitation | #vulnerability

3.

GLM-5.2 Is the Most Cost-Efficient Cyber Model We've Tested. It's Also Not #1.

blog | 2026-07-03 00:00 | tenzai.com | original ↗ | #ai-security | #benchmark | #exploitation

4.

CVE-2026-11645: Out-of-Bounds Read/Write in V8.

vulnerability | High | Actively exploited | 2026-06-08 00:00 | CVE-2026-11645 | bugpwn.com | original ↗ | #active-exploitation | #rce | #zero-day

5.

Counterfeit Object-Oriented Programming

blog | 2026-06-05 00:00 | bugpwn.com | original ↗ | #vulnerability-research | #exploitation | #binary-exploitation

6.

Control Flow Integrity: Theory, Mechanisms and Exploitation.

blog | 2026-05-27 00:00 | bugpwn.com | original ↗ | #vulnerability-research | #memory-safety | #exploitation

7.

AI benchmarking report: Measuring the exploitation ladder for AI models

blog | 2026-05-19 16:22 | bugcrowd.com | original ↗ | #ai-security | #benchmark | #exploitation

8.

What we know about Copy Fail (CVE-2026-31431)

vulnerability | High | Actively exploited | 2026-04-29 22:26 | CVE-2026-31431 | bugcrowd.com | original ↗ | #active-exploitation | #ai-security | #zero-day

9.

AI-Assisted Attack Path Analysis and Exploitation Planning

blog | 2026-04-07 12:00 | xbow.com | original ↗ | #ai-security | #exploitation | #offensive-security

10.

Core Components of an AI Pentesting Framework

blog | 2026-03-18 12:00 | xbow.com | original ↗ | #ai-security | #exploitation | #reporting

11.

Your code has vibes, my exploits have receipts

blog | 2026-01-13 13:44 | bugcrowd.com | original ↗ | #ai-security | #bug-bounty | #appsec

12.

Oops! It's a kernel stack use-after-free: Exploiting NVIDIA's GPU Linux drivers

research | 2025-10-13 22:00 | blog.quarkslab.com | original ↗ | #use-after-free | #exploitation | #linux-kernel

13.

How to find RCE: A list of pathways and detection methods

blog | 2025-10-03 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #exploitation

14.

A Fuzzy Escape - A tale of vulnerability research on hypervisors

research | 2025-08-18 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #fuzzing | #exploitation

15.

Exploiting Retbleed in the real world

blog | 2025-08-07 00:00 | bughunters.google.com | original ↗ | #exploitation | #side-channel | #google

16.

What Is AI Penetration Testing? A Guide to Autonomous Security Testing

blog | 2025-07-25 00:00 | aikido.dev | original ↗ | #ai-security | #cloud | #agentic-ai

17.

Critical vulnerabilities in NetScaler ADC exploited in-the-wild: everything you need to know

blog | 2025-07-06 12:45 | wiz.io | original ↗ | #cloud-security | #exploitation | #citrix

18.

Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild

vulnerability | 2025-05-20 18:13 | wiz.io | original ↗ | #rce | #exploitation | #vulnerability

19.

Beyond ‘../../’ - a practical guide to path traversal and arbitrary file read attacks

blog | 2025-05-15 12:51 | yeswehack.com | original ↗ | #bug-bounty | #arbitrary-file-read | #web-security

20.

KeyPlug Server Exposes Fortinet Exploits & Webshell Activity Targeting a Major Japanese Company

blog | 2025-04-17 00:00 | hunt.io | original ↗ | #exploitation | #apt41 | #fortinet

21.

Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere

blog | 2025-03-24 09:06 | yeswehack.com | original ↗ | #rce | #exploitation | #template-injection

22.

Being Overlord on the Steam Deck with 1 Byte

research | 2025-02-10 23:00 | blog.quarkslab.com | original ↗ | #exploitation | #vulnerability | #amd

23.

XSS attacks and exploitation: The ultimate guide to cross-site scripting

blog | 2025-02-11 12:57 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

24.

Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)

vulnerability | 2025-01-11 17:23 | CVE-2024-50603 | wiz.io | original ↗ | #cloud | #rce | #aws

25.

Wiz observes exploitation in the wild of PAN-OS vulnerabilities

blog | 2024-11-22 13:50 | wiz.io | original ↗ | #cloud | #rce | #exploitation

26.

Attacking the Samsung Galaxy A* Boot Chain

research | 2024-10-14 22:00 | blog.quarkslab.com | original ↗ | #android | #exploitation | #vulnerability

27.

Racing against time: An introduction to race conditions

blog | 2024-08-21 15:00 | bugcrowd.com | original ↗ | #bug-bounty | #appsec | #web-security

28.

Making desync attacks easy with TRACE

research | 2024-06-19 13:58 | portswigger.net | original ↗ | #bug-bounty | #request-smuggling | #exploitation

29.

Security Flash: CISA Order to Disconnect Ivanti Products

blog | 2024-02-02 07:25 | bugcrowd.com | original ↗ | #zero-day | #cisa | #exploitation

30.

No More Speculation: Exploiting CPU Side-Channels for Real

blog | 2023-08-21 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #exploitation | #side-channel