Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability-research

Security coverage tagged vulnerability-research. (Page 5)

121.

Beerus Framework: v1.1 - KernelSU, gRPC Transport and Fixes

research | 2026-07-02 20:39 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

122.

Beerus Framework: v1.1 - KernelSU, gRPC Transport e Correções

research | 2026-07-02 20:39 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

123.

CVE-2026-54995 — Microsoft Windows Reliable Multicast Transport Driver Integer Underflow

research | 2026-07-02 00:00 | CVE-2026-54995 | aretiq.ai | Original ↗ | .md | #rce | #vulnerability-research | #windows-security

124.

My Cousin Vinyl (CVE-2026-50052)

research | 2026-07-01 00:00 | CVE-2026-50052 | calif.io | Original ↗ | .md | #vulnerability-research | #vulnerability-analysis | #madbugs

125.

CivetWeb: PUT + SSI = RCE.

research | 2026-07-01 00:00 | bugpwn.com | Original ↗ | .md | #rce | #vulnerability-research | #web-security

126.

Local AI for Penetration Testing & Research

research | 2026-06-28 04:34 | CVE-2026-12194 | projectblack.io | Original ↗ | .md | #ai-security | #agentic-ai | #vulnerability-research

127.

A Crash, Not a Shell: SolarWinds Serv-U CVE-2026-28318

vulnerability | High | Actively exploited | 2026-06-16 00:00 | CVE-2026-28318 | bishopfox.com | Original ↗ | .md | #active-exploitation | #rce | #vulnerability-research

128.

Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)

vulnerability | 2026-06-23 19:45 | CVE-2024-28184 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

129.

CargoWise WebTracker – The Keys Were in the Cargo

research | 2026-06-25 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research

130.

MCP Auto-Execution: From Git Clone to Cloud Compromise in Amazon Q VS Code Extension

blog | 2026-06-26 12:00 | CVE-2026-12957 | wiz.io | Original ↗ | .md | #cloud | #vulnerability-research | #credential-theft

131.

Old Bug, Harder Rules : Exploiting CVE-2023-36802 Without the Usual Shortcuts

research | 2026-06-24 00:00 | CVE-2023-36802 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #type-confusion | #exploit-development

132.

The Phantom Deposit: How Unvested Rewards and Empty Vaults Lead to Yield Theft in ERC4626

research | 2026-06-22 11:52 | hackenproof.com | Original ↗ | .md | #bug-bounty | #web3 | #vulnerability-research

133.

Introducing Patch the Planet

blog | 2026-06-22 16:50 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #supply-chain | #vulnerability-management

134.

Black Box Probing: a Security Analysis of Xiaomi's MJA1 Secure Chip

research | 2026-06-17 22:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #reverse-engineering

135.

Apple Internals: Swift in the Kernel

research | 2026-06-18 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #memory-safety | #apple

136.

Squidbleed (CVE-2026-47729)

research | 2026-06-18 00:00 | CVE-2026-47729 | calif.io | Original ↗ | .md | #vulnerability-research | #proxy | #squid

137.

Shynet | VERSION 0.13.1

blog | 2026-06-18 00:00 | bishopfox.com | Original ↗ | .md | #appsec | #vulnerability-research | #security-audit

138.

[CVE-2026-34182] How to format a ciphertext

research | 2026-06-17 00:00 | CVE-2026-34182 | calif.io | Original ↗ | .md | #vulnerability-research | #cryptography | #vulnerability-analysis

139.

CVE-2026-45453 — Microsoft SharePoint Server Workflow Pages DocURL Parameter Reflected Cross-Site Scripting

research | 2026-06-16 00:00 | CVE-2026-45453 | aretiq.ai | Original ↗ | .md | #appsec | #vulnerability-research | #xss

140.

Pi.Alert - Unauthenticated SQL Injection

research | 2026-06-14 07:32 | CVE-2026-44886 | projectblack.io | Original ↗ | .md | #vulnerability-research | #sql-injection | #vulnerability-disclosure

141.

Introducing the Red Agent POV Series

blog | 2026-06-17 14:33 | wiz.io | Original ↗ | .md | #ai-security | #vulnerability-research | #offensive-security

142.

CVE-2026-48558: SimpleHelp Authentication Bypass Indicators of Compromise

vulnerability | 2026-06-12 15:38 | CVE-2026-48558 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #auth-bypass

143.

Factoring "short-sleeve" RSA keys with polynomials

blog | 2026-06-12 11:00 | blog.trailofbits.com | Original ↗ | .md | #vulnerability-research | #cryptography | #rsa

144.

From Building Workflows to Breaking Them

research | 2026-06-11 08:19 | hackenproof.com | Original ↗ | .md | #web3 | #vulnerability-research | #smart-contracts

145.

Mobius Token Exploit Postmortem: How a Proxy Logic Bug Enabled a $2.15M Drain

research | 2026-06-11 08:15 | hackenproof.com | Original ↗ | .md | #web3 | #vulnerability-research | #incident-response

146.

futex: remove_waiter stack uaf

blog | 2026-06-13 00:00 | guysrd.github.io | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #use-after-free

147.

Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation

research | 2026-06-08 22:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #developer-security | #binary-analysis

148.

Hacker Q&A with Gowtham Ponnana

blog | 2026-06-11 10:33 | hackenproof.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #account-takeover

149.

How to Hack Crypto Exchange Wallets

blog | 2026-06-11 10:30 | hackenproof.com | Original ↗ | .md | #web3 | #burp-suite | #vulnerability-research

150.

Security State 2023: zkSync Ecosystem

blog | 2026-06-11 10:27 | hackenproof.com | Original ↗ | .md | #web3 | #vulnerability-research | #defi

← Previous More →