Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability

Security coverage tagged vulnerability. (Page 3)

61.

Use mutation testing to find the bugs your tests don't catch

blog | 2025-09-18 11:00 | blog.trailofbits.com | original ↗ | #web3 | #smart-contracts | #security-audit

62.

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover

vulnerability | 2025-08-04 12:55 | CVE-2025-23319 | wiz.io | original ↗ | #ai-security | #rce | #vulnerability

63.

SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know

vulnerability | 2025-07-21 17:42 | wiz.io | original ↗ | #rce | #microsoft | #sharepoint

64.

ControlPlane Local Privilege Escalation Vulnerability on macOS

vulnerability | 2025-07-14 22:00 | blog.quarkslab.com | original ↗ | #privilege-escalation | #macos | #vulnerability

65.

Critical vulnerabilities in NetScaler ADC exploited in-the-wild: everything you need to know

blog | 2025-07-06 12:45 | wiz.io | original ↗ | #cloud-security | #exploitation | #citrix

66.

nOAuth Abuse Alert: Full Account Takeover of Entra Cross-Tenant SaaS Applications

vulnerability | 2025-06-25 13:15 | semperis.com | original ↗ | #account-takeover | #entra-id | #vulnerability

67.

Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3

blog | 2025-06-26 00:00 | bishopfox.com | original ↗ | #rce | #vulnerability | #hardcoded-credentials

68.

What you need to know about CVE-2025-0133

vulnerability | 2025-06-18 14:40 | CVE-2025-0133 | bugcrowd.com | original ↗ | #vulnerability | #vpn | #cve-2025-0133

69.

Critical signature-spoofing vulnerability in OpenPGP.js hits the headlines

vulnerability | 2025-06-11 11:34 | CVE-2025-47934 | yeswehack.com | original ↗ | #bug-bounty | #cryptography | #vulnerability

70.

FileFlows Vulnerabilities - SQL Injection by Decompiling .NET Code

research | 2025-06-11 23:03 | projectblack.io | original ↗ | #sql-injection | #vulnerability | #decompilation

71.

Ivanti EPMM RCE Vulnerability Chain Exploited in the Wild

vulnerability | 2025-05-20 18:13 | wiz.io | original ↗ | #rce | #exploitation | #vulnerability

72.

Group Policy Preferences Abuse Explained

vulnerability | 2025-05-13 20:23 | semperis.com | original ↗ | #active-directory | #vulnerability | #credential-exposure

73.

Solana: the hidden dangers of lamport transfers

blog | 2025-05-14 00:00 | osec.io | original ↗ | #web3 | #smart-contracts | #vulnerability

74.

ESC1 Attack Explained

blog | 2025-05-01 13:29 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #vulnerability

75.

SonicWall Sonicos Versions 7.1.x and 8.0.x

blog | 2025-04-24 00:00 | CVE-2025-32818 | bishopfox.com | original ↗ | #denial-of-service | #vulnerability | #firewall

76.

Auditing Moodle's core hunting for logical bugs

research | 2025-04-21 22:00 | blog.quarkslab.com | original ↗ | #php | #vulnerability | #pentest

77.

A small bug in the signature verification of AOSP OTA packages

research | 2025-04-07 22:00 | blog.quarkslab.com | original ↗ | #android | #vulnerability | #aosp

78.

Crying out Cloud: Our Favorite Stories of 2024

blog | 2025-04-09 15:33 | CVE-2024-3094 | wiz.io | original ↗ | #ai-security | #cloud | #supply-chain

79.

CCleaner Local Privilege Escalation Vulnerability on macOS

vulnerability | 2025-03-24 23:00 | blog.quarkslab.com | original ↗ | #privilege-escalation | #macos | #vulnerability

80.

IngressNightmare: CVE-2025-1974 - 9.8 Critical Unauthenticated Remote Code Execution Vulnerabilities in Ingress NGINX

vulnerability | 2025-03-24 21:45 | CVE-2025-1097 | wiz.io | original ↗ | #cloud | #rce | #cloud-security

81.

Tomcat CVE-2025-24813: What You Need to Know

vulnerability | 2025-03-18 00:00 | CVE-2025-24813 | bishopfox.com | original ↗ | #rce | #deserialization | #vulnerability

82.

Zen and the Art of Microcode Hacking

blog | 2025-03-05 00:00 | bughunters.google.com | original ↗ | #vulnerability | #amd | #zen

83.

Subverting Web2 authentication in Web3

blog | 2025-03-07 00:00 | osec.io | original ↗ | #web3 | #authentication | #vulnerability

84.

Pwn everything Bounce everywhere all at once (part 2)

research | 2025-02-25 23:00 | blog.quarkslab.com | original ↗ | #rce | #php | #sql-injection

85.

Pwn everything Bounce everywhere all at once (part 1)

research | 2025-02-24 23:00 | blog.quarkslab.com | original ↗ | #rce | #php | #red-team

86.

First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200)

vulnerability | 2025-02-13 23:00 | CVE-2025-24200 | blog.quarkslab.com | original ↗ | #reverse-engineering | #ios | #vulnerability

87.

SonicWall CVE-2024-53704: SSL VPN Session Hijacking

vulnerability | 2025-02-10 00:00 | CVE-2024-53704 | bishopfox.com | original ↗ | #reverse-engineering | #vulnerability | #session-hijacking

88.

Being Overlord on the Steam Deck with 1 Byte

research | 2025-02-10 23:00 | blog.quarkslab.com | original ↗ | #exploitation | #vulnerability | #amd

89.

LDAPNightmare Explained

vulnerability | 2025-01-13 21:04 | CVE-2024-49113 | semperis.com | original ↗ | #rce | #denial-of-service | #windows

90.

Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)

vulnerability | 2025-01-11 17:23 | CVE-2024-50603 | wiz.io | original ↗ | #cloud | #rce | #aws

← Previous More →