Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability

Security coverage tagged vulnerability. (Page 7)

181.

Mautic Version <=3.2.2 Advisory

vulnerability | 2021-01-15 00:00 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

182.

blog | 2020-10-29 13:00 | hackerone.com | original ↗ | #bug-bounty | #vulnerability | #statistics

183.

h2c Smuggling: Request Smuggling Via HTTP/2 Cleartext (h2c)

blog | 2020-09-08 00:00 | bishopfox.com | original ↗ | #web-security | #request-smuggling | #vulnerability

184.

Zamzar API Advisory

vulnerability | 2020-08-27 00:00 | bishopfox.com | original ↗ | #api-security | #vulnerability | #advisory

185.

TinyMCE, Version 5.2.1 Advisory

vulnerability | 2020-08-12 00:00 | CVE-2020-12648 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

186.

LibreHealth Version 2.0.0

vulnerability | 2020-07-14 00:00 | bishopfox.com | original ↗ | #sql-injection | #vulnerability | #advisory

187.

Understanding Group Policy Privilege Escalation in CVE-2020-1317

vulnerability | 2020-07-14 18:11 | CVE-2020-1317 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #vulnerability

188.

Delivering Peace of Mind About New Citrix Emerging Threat

blog | 2020-07-08 00:00 | CVE-2020-8193 | bishopfox.com | original ↗ | #threat-intelligence | #attack-surface | #citrix

189.

SecureAuth Version 9.3

vulnerability | 2020-06-19 00:00 | CVE-2020-9437 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

190.

DigDash Enterprise: Versions 2018R2-2020R1

vulnerability | 2020-06-15 00:00 | CVE-2020-13650 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

191.

Ansible Security Assessment

research | 2020-05-27 22:00 | blog.quarkslab.com | original ↗ | #devops | #vulnerability | #cve

192.

$100 Million Paid - One Billion in Sight for Hackers

blog | 2020-05-27 13:00 | hackerone.com | original ↗ | #cloud | #vulnerability | #hackerone

193.

ConnectWise Control 19.3.25270.7185 - Eight Vulnerabilities, Including Critical

blog | 2020-01-22 00:00 | bishopfox.com | original ↗ | #rce | #vulnerability | #advisory

194.

CM Browser: HTTPS URL Leak

research | 2019-11-13 23:00 | blog.quarkslab.com | original ↗ | #android | #privacy | #vulnerability

195.

Analysis of CVE-2019-14994 - Jira Service Desk Path Traversal leads to Massive Information Disclosure

vulnerability | 2019-09-26 00:00 | CVE-2019-14994 | samcurry.net | original ↗ | #path-traversal | #information-disclosure | #vulnerability

196.

CVE-2018-6924: FreeBSD ELF Header Parsing Kernel Memory Disclosure

advisory | 2019-07-14 22:00 | CVE-2018-6924 | blog.quarkslab.com | original ↗ | #exploitation | #vulnerability | #kernel

197.

Android Application Diffing: CVE-2019-10875 Inspection

vulnerability | 2019-05-01 22:00 | CVE-2019-10875 | blog.quarkslab.com | original ↗ | #android | #phishing | #vulnerability

198.

Reverse-engineering Broadcom wireless chipsets

research | 2019-04-15 22:00 | blog.quarkslab.com | original ↗ | #fuzzing | #reverse-engineering | #firmware

199.

The iOS FaceTime vulnerability: What it means and what you can do to protect yourself

vulnerability | 2019-01-29 00:00 | bugcrowd.com | original ↗ | #privacy | #ios | #vulnerability

200.

Silverpeas 5.15 To 6.0.2: Path Traversal

vulnerability | 2019-01-15 00:00 | CVE-2018-19586 | bishopfox.com | original ↗ | #rce | #path-traversal | #vulnerability

201.

PhpSpreadsheet Versions<=1.5.0 - XXE injection

vulnerability | 2018-11-30 00:00 | CVE-2018-19277 | bishopfox.com | original ↗ | #php | #vulnerability | #xxe

202.

YunoHost 2.7.2 to 2.7.14 - Multiple Vulnerabilities

blog | 2018-10-30 00:00 | bishopfox.com | original ↗ | #vulnerability | #session-hijacking | #stored-xss

203.

Subsonic 6.1.1 - Multiple Vulnerabilities

blog | 2018-09-17 00:00 | CVE-2018-9282 | bishopfox.com | original ↗ | #xss | #vulnerability | #session-hijacking

204.

Wallabag 2.2.3 to 2.3.2 - Stored Cross-Site Scripting

blog | 2018-09-17 00:00 | CVE-2018-11352 | bishopfox.com | original ↗ | #open-source | #vulnerability | #session-hijacking

205.

CremeCRM 1.6.12 - Multiple Vulnerabilities

vulnerability | 2018-08-30 00:00 | CVE-2018-9283 | bishopfox.com | original ↗ | #vulnerability | #stored-xss | #cremecrm

206.

Threat Report: Apache Struts CVE-2018-11776

vulnerability | 2018-08-23 00:00 | bugcrowd.com | original ↗ | #rce | #vulnerability | #patching

207.

A Guide To Subdomain Takeovers

blog | 2018-08-15 13:00 | hackerone.com | original ↗ | #bug-bounty | #reconnaissance | #vulnerability

208.

A Story About Three Bluetooth Vulnerabilities in Android

research | 2018-07-24 22:00 | blog.quarkslab.com | original ↗ | #rce | #android | #mobile-security

209.

Jirafeau Version 3.3.0 – Multiple Vulnerabilities

blog | 2018-06-06 00:00 | bishopfox.com | original ↗ | #xss | #vulnerability | #csrf

210.

Android Bluetooth Vulnerabilities in the March 2018 Security Bulletin

advisory | 2018-03-21 23:00 | blog.quarkslab.com | original ↗ | #android | #vulnerability | #poc

← Previous More →