Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-research

Security coverage tagged vulnerability-research. (Page 14)

391.

Cisco IOS XE WLC Arbitrary File Upload Vulnerability (CVE-2025-20188) Analysis

vulnerability | 2025-05-29 14:50 | CVE-2025-20188 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #cisco

392.

CVE-2025-32756: Low-Rise Jeans are Back and so are Buffer Overflows

vulnerability | 2025-05-22 16:35 | CVE-2025-32756 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #fortinet

393.

Defenda sua casa: modelagem de ameaças no mundo real – parte 2 de 3

research | 2025-05-19 15:33 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

394.

Defend your home: Real-world Threat Modeling – Part 2 of 3

research | 2025-05-19 14:44 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

395.

WinDBG TTD Limitations: Scaling Up to Full-System Time Travel Analysis

research | 2025-05-19 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

396.

Hacktron finds another pre-auth RCE variant in Ivanti EPMM

vulnerability | 2025-05-16 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #rce | #vulnerability-research

397.

Middleware mayhem, Zoolander banter PoC, Malta to pardon hackers over ‘unfair’ charges – ethical hacker news roundup

blog | 2025-04-30 13:20 | CVE-2025-29927 | yeswehack.com | Original ↗ | .md | #ai-security | #bug-bounty | #vulnerability-research

398.

Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

research | 2025-04-22 12:31 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

399.

How can we make AI hack like a human?

blog | 2025-04-21 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #vulnerability-research | #automation

400.

Unsafe at Any Speed: Abusing Python Exec for Unauth RCE in Langflow AI

vulnerability | 2025-04-09 17:44 | CVE-2025-3248 | horizon3.ai | Original ↗ | .md | #ai-security | #rce | #vulnerability-research

401.

Malicious MSI – Tornando o MSI em uma arma

research | 2025-04-11 16:08 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #research

402.

A look back at Insomni’hack 2025

research | 2025-04-09 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #android

403.

Emulating an iPhone in QEMU - Part I

research | 2025-04-04 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ios | #software-security

404.

Loose Types Sink Ships: Pre-Authentication SQL Injection in Halo ITSM

research | 2025-04-02 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #sql-injection

405.

GoResolver: Using Control-flow Graph Similarity to Deobfuscate Golang Binaries, Automatically

research | 2025-04-01 09:37 | volexity.com | Original ↗ | .md | #vulnerability-research | #open-source | #threat-intelligence

406.

CrushFTP Authentication Bypass: Indicators of Compromise

vulnerability | 2025-03-27 19:05 | CVE-2025-2825 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #auth-bypass

407.

Back to the crash: Time Travel Analysis for Fuzzing Crash Analysis

vulnerability | 2025-03-26 00:00 | CVE-2023-4041 | eshard.com | Original ↗ | .md | #vulnerability-research | #fuzzing | #software-security

408.

Critical or Clickbait: GitHub Actions and Apache Tomcat RCE Vulnerabilities 2025

vulnerability | 2025-03-21 20:09 | CVE-2025-30066 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #apache

409.

Lightweight Time Travel Analysis with Frida: faster Android emulation

research | 2025-03-21 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #android | #reverse-engineering

410.

Recording Android App Execution Traces with Time Travel Analysis

research | 2025-03-13 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #android | #mobile-security

411.

Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218)

vulnerability | 2025-03-06 00:00 | CVE-2025-27218 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research

412.

AI and Voice Deepfakes: How Did We Created One?

research | 2025-03-06 17:11 | yokai.hakaisecurity.io | Original ↗ | .md | #ai-security | #vulnerability-research | #deepfake

413.

IA e Deepfakes de Voz: Como Criamos Um?

research | 2025-03-06 17:10 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #deepfake | #insights

414.

Analyzing and Patching Vulnerabilities with esReverse and 0patch

research | 2025-02-25 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

415.

Ivanti Endpoint Manager – Multiple Credential Coercion Vulnerabilities

vulnerability | 2025-02-19 10:00 | CVE-2024-10811 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #ivanti

416.

LiquidFiles Vulnerabilities: From Discovery to Disclosure

research | 2025-02-12 21:00 | projectblack.io | Original ↗ | .md | #vulnerability-research | #ruby | #semgrep

417.

Nginx/Apache Path Confusion to Auth Bypass in PAN-OS (CVE-2025-0108)

vulnerability | 2025-02-12 00:00 | CVE-2025-0108 | slcyber.io | Original ↗ | .md | #zero-day | #vulnerability-research | #auth-bypass

418.

Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

research | 2025-02-13 17:32 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #microsoft

419.

How to use Time Travel Analysis to reverse engineer a malware

research | 2025-01-31 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

420.

Contas de Serviço Gerenciadas por Grupo: solução contra Kerberoasting ou incentivo ao ataque Golden GMSA?

research | 2025-01-24 16:32 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

← Previous More →