Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-research

Security coverage tagged vulnerability-research. (Page 3)

61.

Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586

vulnerability | 2026-09-01 10:01 | CVE-2026-9586 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #sql-injection

62.

How to use Codex for Bug Bounty research: explore broadly, validate rigorously

blog | 2026-09-03 07:04 | yeswehack.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #codex

63.

2-Day Training: Can your PQC implementation be challenged?

research | 2026-09-01 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

64.

Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase

blog | 2026-09-01 14:53 | hackerone.com | Original ↗ | .md | #ai-security | #rce | #vulnerability-research

65.

OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to root

research | 2026-08-31 00:00 | calif.io | Original ↗ | .md | #supply-chain | #vulnerability-research | #android

66.

[PT-BR] CVE-2026-40083: SQL Injection no Cacti

vulnerability | 2026-08-27 20:01 | CVE-2026-40083 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #sql-injection | #research

67.

Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust

blog | 2026-08-24 00:00 | bughunters.google.com | Original ↗ | .md | #ai-security | #bug-bounty | #vulnerability-research

68.

Defeating AI-Assisted Reverse Engineering (or at Least Trying To)

research | 2026-08-19 22:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #vulnerability-research | #reverse-engineering

69.

Inside CertiK's Independent Security Research on Besu

research | 2026-08-21 12:00 | certik.com | Original ↗ | .md | #web3 | #vulnerability-research | #security-research

70.

Using Genius AI Models for Important Things: Cheating at NetHack

blog | 2026-08-20 04:00 | josephthacker.com | Original ↗ | .md | #ai-security | #vulnerability-research | #llm

71.

CVE-2026-42931: DoS por leitura ilimitada do corpo da requisição no endpoint npm do Gitea

vulnerability | 2026-08-14 20:44 | CVE-2026-42931 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research | #dos

72.

Blackhat 2026: Hacking the Past. Hacking the Future.

blog | 2026-08-14 12:00 | xbow.com | Original ↗ | .md | #ai-security | #zero-day | #vulnerability-research

73.

Stealing the Artifact – JFrog Artifactory Vulnerability

blog | 2026-08-14 00:00 | netspi.com | Original ↗ | .md | #supply-chain | #vulnerability-research | #jfrog

74.

More Cryptanalysis Makes Us All Safer

blog | 2026-08-10 00:00 | bughunters.google.com | Original ↗ | .md | #ai-security | #bug-bounty | #vulnerability-research

75.

[CVE-2026-65400] Password Fiction

research | 2026-08-10 00:00 | CVE-2026-65400 | calif.io | Original ↗ | .md | #vulnerability-research | #apple | #auth-bypass

76.

Introducing dfs-large1: A New Frontier for Cybersecurity

research | 2026-07-30 12:00 | depthfirst.com | Original ↗ | .md | #ai-security | #featured | #agentic-ai

77.

Can AI do novel security research? Meet the HTTP Terminator

research | 2026-08-06 14:59 | portswigger.net | Original ↗ | .md | #ai-security | #agentic-ai | #vulnerability-research

78.

CRLF-Powered Desync Attacks: Beheading HTTP Streams

research | 2026-08-05 23:30 | portswigger.net | Original ↗ | .md | #vulnerability-research | #attack-chains | #web-security

79.

Write Once, Shell Everywhere: Turning Arbitrary File Writes into RCE

research | 2026-08-07 00:00 | ethiack.com | Original ↗ | .md | #rce | #vulnerability-research | #attack-chains

80.

The Taking of FreeBSD One Two Three

research | 2026-08-06 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #ctf | #exploitation

81.

How we use /goal to find bugs in Patch the Planet

blog | 2026-07-28 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #featured | #agentic-ai

82.

[CVE-2009-2854] The WordPress Chain Massacre

research | 2026-08-05 00:00 | CVE-2009-2854 | calif.io | Original ↗ | .md | #vulnerability-research | #linux | #web-security

83.

A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit

vulnerability | Critical | 2026-07-21 00:00 | CVE-2026-11374 | bishopfox.com | Original ↗ | .md | #featured | #vulnerability-research | #account-takeover

84.

Going depthfirst: Achieving GitLab RCE via Two Ruby Memory Corruption Vulnerabilities

research | 2026-07-24 12:00 | depthfirst.com | Original ↗ | .md | #rce | #featured | #vulnerability-research

85.

A Shell Is Worth a Thousand Images: Bing Images RCEs

research | 2026-07-23 12:00 | xbow.com | Original ↗ | .md | #ai-security | #rce | #featured

86.

AI Security Must Go Beyond the Model: CertiK Identifies Google EdgeTPU Vulnerabilities, Highlighting New Risks in AI Infrastructure

advisory | 2026-07-29 13:00 | certik.com | Original ↗ | .md | #ai-security | #web3 | #vulnerability-research

87.

Finding eight high-severity vulnerabilities in NodeBB in six hours

research | 2026-07-22 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #featured | #vulnerability-research

88.

Unauthenticated RCE in WordPress core (wp2shell), via SQL injection

vulnerability | Critical | 2026-07-17 00:00 | CVE-2026-63030 | aikido.dev | Original ↗ | .md | #rce | #featured | #vulnerability-research

89.

DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities

research | 2026-07-27 04:00 | vercel.com | Original ↗ | .md | #ai-security | #cloud-security | #vulnerability-research

90.

[CVE-2026-64704] Apple MIE Exploitation Challenge

research | 2026-07-27 00:00 | CVE-2026-64704 | calif.io | Original ↗ | .md | #vulnerability-research | #exploitation | #apple

← Previous More →