Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-research

Security coverage tagged vulnerability-research. (Page 15)

421.

Group Managed Service Accounts: A Solution Against Kerberoasting or an Incentive for Golden GMSA Attacks?

research | 2025-01-24 12:00 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

422.

Critical Vulnerabilities in SimpleHelp Remote Support Software

vulnerability | 2025-01-13 20:04 | CVE-2024-1708 | horizon3.ai | Original ↗ | .md | #vulnerability-research

423.

Time Travel Debugging vs. Traditional Debuggers

vulnerability | 2025-01-10 00:00 | CVE-2020-15999 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

424.

How an obscure PHP footgun led to RCE in Craft CMS

vulnerability | 2024-12-19 00:00 | CVE-2024-56145 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research

425.

The Nightmare Before Christmas: An Arbitrary File Download on Zoo-Project

blog | 2024-12-20 13:00 | CVE-2024-53982 | xbow.com | Original ↗ | .md | #vulnerability-research | #open-source | #geospatial

426.

CVE-2024-10382: Arbitrary code execution in Android Auto and various apps

vulnerability | 2024-12-18 00:00 | CVE-2024-10382 | calif.io | Original ↗ | .md | #vulnerability-research | #android | #automotive

427.

Stored Cross-Site Scripting (XSS) in 2FAuth

vulnerability | 2024-12-13 13:00 | CVE-2024-52597 | xbow.com | Original ↗ | .md | #vulnerability-research | #open-source | #xss

428.

Citrix Denial of Service: Analysis of CVE-2024-8534

vulnerability | 2024-12-13 00:00 | CVE-2024-8534 | slcyber.io | Original ↗ | .md | #vulnerability-research

429.

Current State of SonicWall Exposure: Firmware Decryption Unlocks New Insights

blog | 2024-12-13 00:00 | bishopfox.com | Original ↗ | .md | #vulnerability-research | #attack-surface | #exposure-management

430.

LabsAI’s EDDI Project Path Traversal

vulnerability | 2024-12-02 13:00 | CVE-2024-53844 | xbow.com | Original ↗ | .md | #vulnerability-research | #open-source | #path-traversal

431.

O lado obscuro do JWT: Explorando vulnerabilidades em Tokens.

research | 2024-11-29 15:23 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #jwt | #research

432.

The Dark Side of JWT: Exploiting Token Vulnerabilities

research | 2024-11-29 15:21 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #jwt | #research

433.

Exploiting a router vulnerability: Tenda AC15 | Part II

vulnerability | 2024-11-25 00:00 | CVE-2024-2815 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #firmware

434.

SSRF & URI Validation Bypass in 2FAuth

vulnerability | 2024-11-22 13:00 | CVE-2024-52598 | xbow.com | Original ↗ | .md | #cloud | #vulnerability-research | #open-source

435.

[CVE-2022-38028] The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access

vulnerability | 2024-11-22 06:55 | CVE-2022-38028 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

436.

Leveraging An Order of Operations Bug to Achieve RCE in Sitecore 8.x - 10.x

vulnerability | 2024-11-22 00:00 | CVE-2024-46938 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research

437.

Economize dinheiro escovando os dentes - desvendando a Modelagem de Ameaças - parte 1 de 3.

research | 2024-11-22 17:14 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

438.

Save money brushing your teeth - unveiling the Threat Modeling - part 1 of 3

research | 2024-11-22 17:14 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

439.

Finding Bugs in Chrome with CodeQL

blog | 2024-11-21 00:00 | bughunters.google.com | Original ↗ | .md | #vulnerability-research | #chrome | #static-analysis

440.

How XBOW Found a Scoold Authentication Bypass

vulnerability | 2024-11-14 01:00 | xbow.com | Original ↗ | .md | #arbitrary-file-read | #vulnerability-research | #open-source

441.

BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA

research | 2024-11-15 14:50 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

442.

Think Outside the Perimeter: Bug Hunting in Google Cloud's VPC Service Controls

blog | 2024-11-12 00:00 | bughunters.google.com | Original ↗ | .md | #bug-bounty | #cloud | #cloud-security

443.

Certificate Error Mishandling: Misuse and Abuse of the SslErrorHandler Class

blog | 2024-10-28 00:00 | bughunters.google.com | Original ↗ | .md | #vulnerability-research | #secure-coding | #android

444.

Stealer Logs: An in-depth analysis of over half a billion stolen credentials

research | 2024-10-25 18:15 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #research

445.

Stealer Logs: Uma análise aprofundada de mais de meio bilhão de credenciais roubadas

research | 2024-10-25 18:15 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #research

446.

Afinal, o que é Ransomware? Saiba como ele opera e como se proteger!

research | 2024-10-23 00:20 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #white-paper

447.

Palo Alto Expedition: From N-Day to Full Compromise

vulnerability | 2024-10-09 16:09 | CVE-2024-5910 | horizon3.ai | Original ↗ | .md | #vulnerability-research

448.

Protecting Large Language Models

blog | 2024-10-04 00:00 | bughunters.google.com | Original ↗ | .md | #ai-security | #cloud | #cloud-security

449.

CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability Deep-Dive

vulnerability | 2024-09-25 10:18 | CVE-2024-28987 | horizon3.ai | Original ↗ | .md | #vulnerability-research

450.

Insecurity through Censorship: Vulnerabilities Caused by The Great Firewall

research | 2024-09-27 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research

← Previous More →