Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-research

Security coverage tagged vulnerability-research. (Page 16)

451.

CVE-2024-8190: Investigating CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability

vulnerability | 2024-09-16 15:26 | CVE-2024-8190 | horizon3.ai | Original ↗ | .md | #cloud | #vulnerability-research | #command-injection

452.

CVE-2023-28324 Deep Dive: Ivanti Endpoint Manager AgentPortal Improper Input Validation

vulnerability | 2024-09-13 14:34 | CVE-2023-28324 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #ivanti

453.

CVR: The Mines of Kakadûm

blog | 2024-09-10 00:00 | bughunters.google.com | Original ↗ | .md | #cloud | #rce | #vulnerability-research

454.

Enhancing Semiconductor Security with Pre-Silicon Testing

research | 2024-09-08 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #side-channel

455.

Plaintext Deep-Learning Attack | Expert Review #5

research | 2024-09-06 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #side-channel

456.

Wordpress Plugin Vulnerability Hunting

vulnerability | 2024-08-27 05:01 | projectblack.io | Original ↗ | .md | #vulnerability-research | #wordpress | #sast

457.

Optimized White-Box Tracing for Efficient Side-Channel Attacks

research | 2024-08-29 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #cryptography | #reverse-engineering

458.

AES-256 Climbing: Mastering Side-Channel Attacks on FPGAs

research | 2024-08-29 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #cryptography

459.

NTLM Credential Theft in Python Windows Applications

vulnerability | 2024-08-23 13:23 | CVE-2024-35178 | horizon3.ai | Original ↗ | .md | #vulnerability-research

460.

Traccar 5 Remote Code Execution Vulnerabilities

vulnerability | 2024-08-23 13:20 | CVE-2024-31214 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #path-traversal

461.

Uncovering Critical Vulnerabilities in Magento: A Deep Dive

research | 2024-08-21 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #magento

462.

XBOW Battles Ninja Tables: Who’s the Real Ninja?

vulnerability | 2024-08-14 12:00 | xbow.com | Original ↗ | .md | #bug-bounty | #arbitrary-file-read | #vulnerability-research

463.

Malware that detects Wine and infects both Windows and Linux?

research | 2024-08-16 19:53 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #research

464.

Wormable Substack XSS

research | 2024-08-12 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #web-security | #xss

465.

A New App Consent Attack: Hidden Consent Grant

blog | 2024-08-13 17:41 | semperis.com | Original ↗ | .md | #cloud | #vulnerability-research | #privilege-escalation

466.

UnOAuthorized: Privilege Elevation Through Microsoft Applications

research | 2024-08-08 00:03 | semperis.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #entra-id

467.

[CVE-2024-4879] A Deep Dive into Three ServiceNow Vulnerabilities

research | 2024-08-08 00:00 | CVE-2024-4879 | slcyber.io | Original ↗ | .md | #vulnerability-research | #servicenow | #exploitation-chain

468.

Malwares que detectam o Wine e infectam o Windows E o Linux?

research | 2024-08-07 12:00 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research | #dos

469.

StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

research | 2024-08-02 12:05 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #malware

470.

What is Taint Analysis?

research | 2024-07-31 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #software-security

471.

Who corrupted the data? — a Taint Analysis overview

research | 2024-07-29 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #memory-corruption

472.

Incidente do CrowdStrike: Uma rápida análise do Pré-Apocalipse

research | 2024-07-19 23:47 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

473.

What is Time Travel Debugging?

research | 2024-07-19 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #software-security | #time-travel-debugging

474.

[CVE-2024-40626] Type confusion attacks in ProseMirror editors

vulnerability | 2024-07-16 00:00 | CVE-2024-40626 | calif.io | Original ↗ | .md | #supply-chain | #vulnerability-research | #xss

475.

Avoiding unrestricted file upload - straight to the source

research | 2024-07-12 13:00 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #file-upload | #insights

476.

Chaining Three Bugs to Access All Your ServiceNow Data

research | 2024-07-11 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #servicenow | #exploitation-chain

477.

The Side Channel Chronicles #2: Getting started

research | 2024-07-09 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #side-channel

478.

Hey Kyber, Give me a Sign! | Expert Review #4

research | 2024-07-02 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

479.

Why nested deserialization is harmful: Magento XXE (CVE-2024-34102)

research | 2024-06-26 00:00 | CVE-2024-34102 | slcyber.io | Original ↗ | .md | #vulnerability-research | #deserialization | #magento

480.

esReverse featured on NIST Binary Code Scanners list

research | 2024-06-25 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #corporate

← Previous More →