Curated security research, vulnerabilities, advisories and tools for practitioners.

#research

Security coverage tagged research.

1.

Client-Side Path Traversal na Prática: De Stored XSS à Exclusão de Conta

research | 2026-10-15 20:10 | yokai.hakaisecurity.io | Original ↗ | .md | #bug-bounty | #vulnerability-research | #account-takeover

2.

Client-Side Path Traversal in the Wild: From Stored XSS to Account Deletion

research | 2026-10-15 20:09 | yokai.hakaisecurity.io | Original ↗ | .md | #bug-bounty | #vulnerability-research | #account-takeover

3.

[Pt-Br] Por Trás do Espelho: Investigando Vulnerabilidades no MagicMirror² (CVE-2026-63642, CVE-2026-63643)

vulnerability | 2026-10-01 19:57 | CVE-2026-63642 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research | #ssrf

4.

[PT-BR] CVE-2026-16764: Uma validação faltando, acesso total

vulnerability | 2026-09-25 20:03 | CVE-2026-16764 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #web-security | #research

5.

PT-BR - Beerus Framework: iOS - O canivete suíço para iOS

research | 2026-09-18 13:49 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

6.

EN - Beerus Framework: iOS - The Swiss Army Knife for iOS

research | 2026-09-18 13:49 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

7.

Modern Adventures in Azure Privilege Escalation

vulnerability | 2026-09-03 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #privilege-escalation

8.

Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu

research | 2026-09-01 00:00 | nebusec.ai | Original ↗ | .md | #ai-security | #codex | #benchmark

9.

[PT-BR] CVE-2026-40083: SQL Injection no Cacti

vulnerability | 2026-08-27 20:01 | CVE-2026-40083 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #sql-injection | #research

10.

CVE-2026-42931: DoS por leitura ilimitada do corpo da requisição no endpoint npm do Gitea

vulnerability | 2026-08-14 20:44 | CVE-2026-42931 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research | #dos

11.

How GitLab tracks vulnerabilities through refactors and reformatting

blog | 2026-08-12 00:00 | about.gitlab.com | Original ↗ | .md | #gitlab | #devsecops | #vulnerability

12.

Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE

research | 2026-08-07 00:00 | ethiack.com | Original ↗ | .md | #rce | #vulnerability-research | #attack-chains

13.

CosmosEscape: Taking Over Every Database in Azure Cosmos DB

blog | 2026-07-30 12:00 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #vulnerability

14.

[EN] Build Your Nightmare - Dissecting CVE-2026-12191

vulnerability | 2026-07-20 19:51 | CVE-2026-12191 | yokai.hakaisecurity.io | Original ↗ | .md | #ai-security | #vulnerability-research | #deserialization

15.

Beerus Framework: v1.1 - KernelSU, gRPC Transport and Fixes

research | 2026-07-02 20:39 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

16.

Beerus Framework: v1.1 - KernelSU, gRPC Transport e Correções

research | 2026-07-02 20:39 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

17.

Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)

vulnerability | 2026-06-23 19:45 | CVE-2024-28184 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

18.

Experience vs methodology: How hackers make decisions

blog | 2026-06-22 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #pentesting | #red-team

19.

[EN] CVE-2026-44706: SQL Injection in Chatwoot FilterService

vulnerability | 2026-06-05 19:18 | CVE-2026-44706 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #sql-injection | #research

20.

Reverse Engineering SmartLoader: Where Commodity Malware and Operational Tooling Diverge

research | 2026-05-18 19:54 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #reverse-engineering

21.

Abusing Redirect Discrepancies to leak secrets in URLs

research | 2026-05-18 00:00 | ethiack.com | Original ↗ | .md | #secrets | #web-security | #research

22.

[EN] CVE-2026-4802: Command execution on Cockpit

vulnerability | 2026-05-13 19:45 | CVE-2026-4802 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #research

23.

[EN] CVE-2026-33725: Technical Analysis and Proof of Concept

vulnerability | 2026-05-05 19:51 | CVE-2026-33725 | yokai.hakaisecurity.io | Original ↗ | .md | #ai-security | #rce | #vulnerability-research

24.

In-Depth Research on the Telegram Escrow Market: Platform Evolution, Ecosystem Structure, and Regulatory Challenges

research | 2026-04-29 13:00 | certik.com | Original ↗ | .md | #web3 | #research | #blockchain-security

25.

Chupabase: Extracting Data from Misconfigured Lovable Applications

vulnerability | 2026-04-01 12:54 | CVE-2025-48757 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

26.

Um caractere para o Account Takeover

research | 2026-03-20 20:08 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #account-takeover | #research

27.

CVE-2026-25769: RCE via insecure deserialization in wazuh cluster - remote command execution through cluster protocol

vulnerability | 2026-03-17 16:51 | CVE-2026-25769 | yokai.hakaisecurity.io | Original ↗ | .md | #rce | #vulnerability-research | #deserialization

28.

[PT-BR] Deep Looking into Centreon

vulnerability | 2026-03-06 20:49 | CVE-2026-2749 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #sql-injection | #path-traversal

29.

[EN] DNS Query Detection via Direct Packet Inspection

research | 2026-02-27 20:42 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #kernel | #research

30.

[PT-BR] DNS Query Detection via Direct Packet Inspection

research | 2026-02-27 20:41 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #kernel | #research