Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-research

Security coverage tagged vulnerability-research. (Page 26)

751.

Searching statically-linked vulnerable library functions in executable code

blog | 2018-12-18 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #project-zero | #static-linking

752.

Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)

vulnerability | 2018-11-08 13:01 | CVE-2018-15961 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

753.

What To Do When You're Stuck Hacking

vulnerability | 2018-11-01 15:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #idor

754.

365 Days Later: Finding and Exploiting Safari Bugs using Publicly Available Tools

blog | 2018-10-04 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #browser | #project-zero

755.

Magecart Strikes Again: Newegg in the Crosshairs

research | 2018-09-19 09:00 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #crimeware

756.

Active Exploitation of New Apache Struts Vulnerability CVE-2018-11776 Deploys Cryptocurrency Miner

vulnerability | 2018-08-27 17:11 | CVE-2018-11776 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apache-struts

757.

Drawing Outside the Box: Precision Issues in Graphic Libraries

blog | 2018-07-26 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #precision | #project-zero

758.

JS Sniffer: E-commerce Data Theft Made Easy

research | 2018-07-19 14:12 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #vulnerability

759.

Surge Collect Provides Reliable Memory Acquisition Across Windows, Linux, and macOS

research | 2018-06-12 15:26 | volexity.com | Original ↗ | .md | #vulnerability-research | #memory-forensics | #surge-collect

760.

Patchwork APT Group Targets US Think Tanks

vulnerability | 2018-06-07 14:23 | CVE-2017-8570 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

761.

Drupalgeddon 2: Profiting from Mass Exploitation

vulnerability | 2018-04-16 13:54 | CVE-2018-7600 | volexity.com | Original ↗ | .md | #rce | #vulnerability-research | #threat-intelligence

762.

Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege

blog | 2018-04-18 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #arbitrary-file-write

763.

Vulnerability Modeling with Binary Ninja

vulnerability | 2018-04-04 10:50 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #binary-analysis | #openssl

764.

OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society

research | 2017-11-06 07:56 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

765.

Reversing DirtyC0W

research | 2017-09-10 00:00 | CVE-2016-5195 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #kernel

766.

Microsoft didn’t sandbox Windows Defender, so I did

blog | 2017-08-02 10:50 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #rust | #sandboxing

767.

Real News, Fake Flash: Mac OS X Users Targeted

research | 2017-07-24 15:57 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

768.

Notes on Windows Uniscribe Fuzzing

blog | 2017-04-10 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #fuzzing | #microsoft

769.

Have you been haunted by the Gh0st RAT today?

research | 2017-03-23 16:23 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #scanning

770.

PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs

research | 2016-11-09 23:55 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

771.

Unfolding obfuscated code with esReverse - Part I (full write-up)

research | 2016-11-01 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ctf | #cryptography

772.

Announcing the Project Zero Prize

blog | 2016-09-13 00:00 | projectzero.google | Original ↗ | .md | #bug-bounty | #vulnerability-research | #google

773.

A year of Windows kernel font fuzzing #2: the techniques

blog | 2016-07-01 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #fuzzing | #windows

774.

Binmap: a system scanner

tool | 2016-03-08 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #open-source | #tooling

775.

The Definitive Guide on Win32 to NT Path Conversion

blog | 2016-02-29 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #windows | #win32

776.

Hacking for Charity: Automated Bug-finding in LibOTR

blog | 2016-01-13 12:50 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #open-source | #fuzzing

777.

Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge

blog | 2015-11-02 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #android | #mobile-security

778.

Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence

vulnerability | 2015-10-07 18:31 | CVE-2014-3393 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

779.

Revisiting Apple IPC: (1) Distributed Objects

blog | 2015-09-28 00:00 | projectzero.google | Original ↗ | .md | #vulnerability-research | #ios | #apple

780.

Summer @ Trail of Bits

blog | 2015-09-10 11:50 | CVE-2015-5949 | blog.trailofbits.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #fuzzing

← Previous More →