Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-research

Security coverage tagged vulnerability-research. (Page 22)

631.

SharpTongue Deploys Clever Mail-Stealing Browser Extension “SHARPEXT”

research | 2022-07-28 09:39 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

632.

eShard takes a step into Reverse Engineering by acquiring Tetrane

research | 2022-07-26 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #acquisition

633.

Expanding evaluation capability for microelectronics in Singapore

research | 2022-07-06 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #fault-injection

634.

CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus

vulnerability | 2022-06-29 13:13 | CVE-2022-28219 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #active-directory

635.

CVE-2021-43908: Remote code execution in VSCode restricted mode

vulnerability | 2022-06-29 00:00 | CVE-2021-43908 | hacktron.ai | Original ↗ | .md | #rce | #vulnerability-research | #webview

636.

Advisory: Server Side Request Forgery in Jira Server (CVE-2022-26135)

research | 2022-06-26 00:00 | CVE-2022-26135 | slcyber.io | Original ↗ | .md | #vulnerability-research | #advisory | #jira

637.

DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach

vulnerability | 2022-06-15 11:48 | CVE-2022-1040 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

638.

Fine-tuned Windows scenarios: debugger-assisted recording with WinDbg

research | 2022-06-16 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #reverse-engineering

639.

“La fonte des hashs”: 404CTF write-up

research | 2022-06-09 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ctf | #hardware-security

640.

“Un point c’est tout”: 404CTF write-up

research | 2022-06-09 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ctf | #hardware-security

641.

Advisory: Multiple Vulnerabilities in Progress Ipswitch WhatsUp Gold

research | 2022-06-09 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

642.

Chaining vulnerabilities to criticality in Progress WhatsUp Gold

research | 2022-06-09 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation-chain

643.

Zero-Day Exploitation of Atlassian Confluence

vulnerability | 2022-06-02 16:05 | CVE-2022-26134 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence

644.

VMware Authentication Bypass Vulnerability (CVE-2022-22972) Technical Deep Dive

vulnerability | 2022-05-26 13:37 | CVE-2022-22972 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #vmware | #auth-bypass

645.

Novel Attack Vector to Bypass CSP Via Same Origin Method Execution (Wordpress Zeroday)

blog | 2022-05-29 11:00 | pwn.ai | Original ↗ | .md | #vulnerability-research | #wordpress | #xss

646.

[CVE-2022-1388] F5 iControl REST Endpoint Authentication Bypass Technical Deep Dive

vulnerability | 2022-05-09 20:43 | CVE-2022-1388 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #exploit | #cve-2022-1388

647.

Cloudflare Pages, part 3: The return of the secrets

research | 2022-05-06 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #exploitation | #cross-tenant

648.

Cloudflare Pages, part 2: The two privescs

research | 2022-05-06 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #sandbox-escape | #slcyber

649.

Cloudflare Pages, part 1: The fellowship of the secret

research | 2022-05-06 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #secrets | #info-leak

650.

Lattice Wars - Episode II

research | 2022-05-04 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #cryptography

651.

Advisory: DotCMS Remote Code Execution (CVE-2022-26352)

research | 2022-05-03 00:00 | CVE-2022-26352 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

652.

Hacking a Bank by Finding a 0day in DotCMS

research | 2022-05-03 00:00 | slcyber.io | Original ↗ | .md | #bug-bounty | #rce | #zero-day

653.

Advisory: VMWare Workspace One UEM SSRF - CVE-2021-22054

research | 2022-04-27 00:00 | CVE-2021-22054 | slcyber.io | Original ↗ | .md | #cloud | #vulnerability-research | #vmware

654.

Diving Deeper into WatchGuard Pre-Auth RCE - CVE-2022-26318

research | 2022-04-13 00:00 | CVE-2022-26318 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #pre-auth

655.

Benchmarking side-channel solutions... Why? How?

research | 2022-04-08 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #benchmark | #hardware-security

656.

ALPhANOV and eShard's Laser Fault Injection Lab

research | 2022-04-05 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #fault-injection

657.

Side-channel attacks: Why performance matters?

research | 2022-04-04 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #performance

658.

Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS

research | 2022-03-22 12:12 | volexity.com | Original ↗ | .md | #cloud | #vulnerability-research | #threat-intelligence

659.

A tour of the Rust and C++ interoperability ecosystem

research | 2022-03-22 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #rust | #software-security

660.

Automatic post-fuzzing triage and automation using esReven

research | 2022-03-08 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #fuzzing

← Previous More →