181. LabsAI’s EDDI Project Path Traversal vulnerability | 2024-12-02 13:00 | CVE-2024-53844 | xbow.com | original ↗ | #vulnerability-research | #open-source | #path-traversal
182. SSRF & URI Validation Bypass in 2FAuth vulnerability | 2024-11-22 13:00 | CVE-2024-52598 | xbow.com | original ↗ | #cloud | #vulnerability-research | #open-source
183. Finding Bugs in Chrome with CodeQL blog | 2024-11-21 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #chrome | #static-analysis
184. How XBOW Found a Scoold Authentication Bypass vulnerability | 2024-11-14 01:00 | xbow.com | original ↗ | #arbitrary-file-read | #vulnerability-research | #open-source
185. Think Outside the Perimeter: Bug Hunting in Google Cloud's VPC Service Controls blog | 2024-11-12 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #cloud | #cloud-security
186. Certificate Error Mishandling: Misuse and Abuse of the SslErrorHandler Class blog | 2024-10-28 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #secure-coding | #android
187. Protecting Large Language Models blog | 2024-10-04 00:00 | bughunters.google.com | original ↗ | #ai-security | #cloud | #cloud-security
188. CVR: The Mines of Kakadûm blog | 2024-09-10 00:00 | bughunters.google.com | original ↗ | #cloud | #rce | #vulnerability-research
189. Wordpress Plugin Vulnerability Hunting vulnerability | 2024-08-27 05:01 | projectblack.io | original ↗ | #vulnerability-research | #wordpress | #sast
190. XBOW Battles Ninja Tables: Who’s the Real Ninja? vulnerability | 2024-08-14 12:00 | xbow.com | original ↗ | #bug-bounty | #arbitrary-file-read | #vulnerability-research
191. A New App Consent Attack: Hidden Consent Grant blog | 2024-08-13 17:41 | semperis.com | original ↗ | #cloud | #vulnerability-research | #privilege-escalation
192. UnOAuthorized: Privilege Elevation Through Microsoft Applications research | 2024-08-08 00:03 | semperis.com | original ↗ | #vulnerability-research | #privilege-escalation | #entra-id
193. Crowdfense – The challenge blog | 2024-05-09 08:56 | crowdfense.com | original ↗ | #zero-day | #vulnerability-research | #industry
194. Meet Silver SAML: Golden SAML in the Cloud blog | 2024-02-29 11:00 | semperis.com | original ↗ | #cloud | #vulnerability-research | #entra-id
195. The Reptar CPU Vulnerability vulnerability | 2023-12-06 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #google | #reptar
196. No More Speculation: Exploiting CPU Side-Channels for Real blog | 2023-08-21 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #exploitation | #side-channel
197. Badge of Shame - Breaking Into Secure Facilities with OSDP blog | 2023-08-09 00:00 | bishopfox.com | original ↗ | #vulnerability-research | #access-control | #rfid
198. Citrix ADC Gateway RCE: CVE-2023-3519 is Exploitable, and 53% of Servers Are Unpatched vulnerability | 2023-07-21 00:00 | CVE-2023-3519 | bishopfox.com | original ↗ | #rce | #vulnerability-research | #exploit
199. Call for exploits. Stop the war in Ukraine blog | 2023-06-22 00:00 | hackenproof.com | original ↗ | #vulnerability-research | #ukraine | #hackenproof
200. Finding bugs in C code with Multi-Level IR and VAST vulnerability | 2023-06-15 11:00 | blog.trailofbits.com | original ↗ | #vulnerability-research | #c | #static-analysis
201. If you want peace, prepare for cyberwar blog | 2023-05-04 00:00 | ethiack.com | original ↗ | #rce | #vulnerability-research | #opinion
202. The curl quirk that exposed Burp Suite & Google Chrome research | 2023-03-28 13:13 | portswigger.net | original ↗ | #burp-suite | #vulnerability-research | #web-security
203. Escaping misconfigured VSCode extensions vulnerability | 2023-02-21 13:00 | CVE-2022-41042 | blog.trailofbits.com | original ↗ | #vulnerability-research | #xss | #path-traversal
204. What the Vuln: Zimbra vulnerability | 2023-02-21 00:00 | bishopfox.com | original ↗ | #rce | #vulnerability-research | #path-traversal
205. Server side prototype pollution, how to detect and exploit vulnerability | 2023-02-15 16:19 | yeswehack.com | original ↗ | #bug-bounty | #vulnerability-research | #web-security
206. cURL audit: How a joke led to significant findings blog | 2023-02-14 13:00 | blog.trailofbits.com | original ↗ | #vulnerability-research | #fuzzing | #memory-corruption
207. 160K COVID-19 Records: Vulnerability in Avicena Medical Laboratory vulnerability | 2022-12-09 00:00 | bishopfox.com | original ↗ | #vulnerability-research | #access-control | #data-exposure
208. Look out! Divergent representations are everywhere! vulnerability | 2022-11-10 12:30 | blog.trailofbits.com | original ↗ | #vulnerability-research | #program-analysis | #compilers
209. Backslash Powered Scanning: hunting unknown vulnerability classes vulnerability | 2022-08-16 09:25 | portswigger.net | original ↗ | #burp-suite | #vulnerability-research | #fuzzing
210. Novel Attack Vector to Bypass CSP Via Same Origin Method Execution (Wordpress Zeroday) blog | 2022-05-29 11:00 | pwn.ai | original ↗ | #vulnerability-research | #wordpress | #xss