91. CVE-2026-23412 — Linux Kernel Netfilter BPF Hook Use-After-Free LPE research | 2026-05-18 00:00 | CVE-2026-23412 | aretiq.ai | original ↗ | #vulnerability-research | #privilege-escalation | #use-after-free
92. Hack the Elephant One Bite at a Time: JPEG-Related Memory-Safety Bugs in PHP research | 2026-05-15 09:09 | swarm.ptsecurity.com | original ↗ | #vulnerability-research | #memory-safety | #php
93. NGINX Rift: Achieving NGINX Remote Code Execution via an 18-Year-Old Vulnerability research | 2026-05-13 12:00 | CVE-2026-42945 | depthfirst.com | original ↗ | #rce | #vulnerability-research | #memory-corruption
94. Gibbon v30.0.00: Authenticated SQL Injection and RCE research | 2026-05-06 23:12 | projectblack.io | original ↗ | #rce | #vulnerability-research | #sql-injection
95. The epoll uaf blog | 2026-05-10 00:00 | guysrd.github.io | original ↗ | #vulnerability-research | #memory-safety | #use-after-free
96. Paramiko Security Audit research | 2026-05-04 22:00 | blog.quarkslab.com | original ↗ | #appsec | #vulnerability-research | #security-audit
97. Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854) vulnerability | 2026-04-28 15:30 | CVE-2026-3854 | wiz.io | original ↗ | #rce | #vulnerability-research | #github
98. The (In)security Landscape of AI-Powered GitHub Actions (Part 2/2) blog | 2026-04-30 13:21 | wiz.io | original ↗ | #ai-security | #supply-chain | #vulnerability-research
99. Unverified evaluations in Dusk’s PLONK blog | 2026-04-30 12:00 | osec.io | original ↗ | #web3 | #vulnerability-research | #vulnerability
100. API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616 vulnerability | Critical | Actively exploited | 2026-04-07 00:00 | CVE-2026-35616 | bishopfox.com | original ↗ | #vulnerability-research | #authentication-bypass | #certificate-validation
101. We beat Google’s zero-knowledge proof of quantum cryptanalysis blog | 2026-04-17 11:00 | blog.trailofbits.com | original ↗ | #web3 | #vulnerability-research | #memory-safety
102. Milking the last drop of Intego - Time for Windows to get its LPE research | 2026-04-06 22:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #windows-security
103. Claude Mythos: Preparing for a World Where AI Finds and Exploits Vulnerabilities Faster Than Ever blog | 2026-04-10 15:25 | wiz.io | original ↗ | #ai-security | #zero-day | #vulnerability-research
104. The Search for AGI through Security: Introducing the World's First AI-Based Novel Attack Vector Researcher blog | 2026-04-10 09:12 | pwn.ai | original ↗ | #ai-security | #vulnerability-research | #offensive-security
105. What we learned about TEE security from auditing WhatsApp's Private Inference blog | 2026-04-07 11:00 | blog.trailofbits.com | original ↗ | #ai-security | #appsec | #vulnerability-research
106. Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW research | 2026-04-02 04:00 | xbow.com | original ↗ | #ai-security | #cloud | #rce
107. strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication vulnerability | High | 2026-03-26 00:00 | CVE-2026-25075 | bishopfox.com | original ↗ | #vulnerability-research | #denial-of-service | #integer-underflow
108. What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119) vulnerability | High | 2026-03-23 11:05 | CVE-2026-26119 | semperis.com | original ↗ | #vulnerability-research | #privilege-escalation | #windows-security
109. ESC8s and Where to Find Them blog | 2026-03-27 00:00 | abdulmhsblog.com | original ↗ | #pentesting | #vulnerability-research | #active-directory
110. Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643 vulnerability | Critical | Actively exploited | 2026-03-09 00:00 | CVE-2026-21643 | bishopfox.com | original ↗ | #vulnerability-research | #sql-injection | #web-security
111. Intego X9: Never trust my updates research | 2026-03-19 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #macos
112. PageJack in Action: CVE-2022-0995 exploit vulnerability | High | 2026-03-10 23:00 | CVE-2022-0995 | blog.quarkslab.com | original ↗ | #public-poc | #vulnerability-research | #privilege-escalation
113. Google VRPs in Review – 2025 blog | 2026-03-11 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #vulnerability-research | #security-research
114. Six mistakes in ERC-4337 smart accounts blog | 2026-03-11 11:00 | blog.trailofbits.com | original ↗ | #web3 | #vulnerability-research | #smart-contracts
115. How JFrog’s AI-Research Bot Found OSS CI/CD Vulnerabilities to Prevent Shai Hulud 3.0 incident | 2026-03-05 21:27 | jfrog.com | original ↗ | #ai-security | #supply-chain | #vulnerability-research
116. Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV research | 2026-03-02 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #deserialization
117. 20+ vulnerabilities found in satellite receiver used by US DoD, EU's Space Agency and others blog | 2026-03-05 00:00 | CVE-2026-28769 | abdulmhsblog.com | original ↗ | #rce | #pentesting | #vulnerability-research
118. We Ran 1,060 Autonomous Attacks. Here's What the Industry Gets Wrong. blog | 2026-03-02 13:00 | xbow.com | original ↗ | #ai-security | #vulnerability-research | #ai-safety
119. Unfaithful claims: breaking 6 zkVMs blog | 2026-03-03 12:00 | osec.io | original ↗ | #web3 | #vulnerability-research | #cryptography
120. Intego X9: Why your macOS antivirus should not trust PIDs research | 2026-02-25 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #ghidra