Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability

Security coverage tagged vulnerability. (Page 3)

61.

Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild

vulnerability | 2026-05-06 12:33 | CVE-2026-0300 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #palo-alto-networks

62.

Copy Fail: Universal Linux Local Privilege Escalation Vulnerability

vulnerability | 2026-05-01 12:38 | CVE-2026-31431 | wiz.io | Original ↗ | .md | #privilege-escalation | #linux-kernel | #vulnerability

63.

Unverified evaluations in Dusk’s PLONK

blog | 2026-04-30 12:00 | osec.io | Original ↗ | .md | #web3 | #vulnerability-research | #vulnerability

64.

Milking the last drop of Intego - Time for Windows to get its LPE

research | 2026-04-06 22:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #windows-security

65.

Intego X9: Never trust my updates

research | 2026-03-19 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #macos

66.

Unfaithful claims: breaking 6 zkVMs

blog | 2026-03-03 12:00 | osec.io | Original ↗ | .md | #web3 | #vulnerability-research | #cryptography

67.

February 2026 vulnerability: What happened?

blog | 2026-03-02 12:10 | metabase.com | Original ↗ | .md | #vulnerability | #metabase | #postmortem

68.

Security update available for Metabase - Please upgrade now

blog | 2026-02-19 12:10 | metabase.com | Original ↗ | .md | #ai-security | #cloud | #information-disclosure

69.

Intego X9: When your macOS antivirus becomes your enemy

research | 2026-02-09 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #privilege-escalation | #macos

70.

Hunting OpenClaw Exposures: CVE-2026-25253 in Internet-Facing AI Agent Gateways

vulnerability | High | 2026-02-03 00:00 | CVE-2026-25253 | hunt.io | Original ↗ | .md | #ai-security | #vulnerability | #ai-agents

71.

EVerest security audit

research | 2026-01-19 23:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #vulnerability-research | #vulnerability

72.

CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

blog | 2026-01-15 15:00 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #aws

73.

IDOR Vulnerabilities Explained: Why They Persist in Modern Applications

blog | 2026-01-02 00:00 | aikido.dev | Original ↗ | .md | #appsec | #access-control | #web-security

74.

MongoBleed (CVE-2025-14847) exploited in the wild: everything you need to know

vulnerability | 2025-12-28 09:24 | CVE-2025-14847 | wiz.io | Original ↗ | .md | #cloud | #memory-safety | #information-disclosure

75.

React2Shell (CVE-2025-55182): Node.js RCE Against a Production Next.js App

vulnerability | Critical | Actively exploited | 2025-12-10 00:00 | CVE-2025-55182 | hunt.io | Original ↗ | .md | #rce | #vulnerability | #nextjs

76.

[CVE-2017-3558] Thinking Outside The Box [dusted off draft from 2017]

vulnerability | 2025-12-16 00:00 | CVE-2017-3558 | projectzero.google | Original ↗ | .md | #exploit | #vulnerability | #draft

77.

Gogs 0-Day Exploited in the Wild

vulnerability | 2025-12-10 15:00 | CVE-2025-8110 | wiz.io | Original ↗ | .md | #rce | #zero-day | #vulnerability

78.

CVE-2025-55182 and CVE-2025-66478 (“React2Shell”): All you need to know – UPDATED

vulnerability | 2025-12-09 14:15 | jfrog.com | Original ↗ | .md | #rce | #vulnerability | #cve

79.

Orthanc 1.12.9 User Impersonation

research | 2025-12-09 00:53 | CVE-2025-15581 | projectblack.io | Original ↗ | .md | #appsec | #vulnerability-research | #vulnerability

80.

Kubevirt security audit

research | 2025-11-06 23:00 | blog.quarkslab.com | Original ↗ | .md | #kubernetes | #virtualization | #vulnerability

81.

How we broke exchanges: a deep dive into authentication and client-side bugs

research | 2025-10-16 12:00 | osec.io | Original ↗ | .md | #web3 | #account-takeover | #authentication

82.

RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score

vulnerability | 2025-10-06 21:00 | CVE-2025-49844 | wiz.io | Original ↗ | .md | #rce | #cloud-security | #vulnerability

83.

Use mutation testing to find the bugs your tests don't catch

blog | 2025-09-18 11:00 | blog.trailofbits.com | Original ↗ | .md | #web3 | #smart-contracts | #security-audit

84.

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover

vulnerability | 2025-08-04 12:55 | CVE-2025-23319 | wiz.io | Original ↗ | .md | #ai-security | #rce | #vulnerability

85.

SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know

vulnerability | 2025-07-21 17:42 | wiz.io | Original ↗ | .md | #rce | #microsoft | #sharepoint

86.

ControlPlane Local Privilege Escalation Vulnerability on macOS

vulnerability | 2025-07-14 22:00 | blog.quarkslab.com | Original ↗ | .md | #privilege-escalation | #macos | #vulnerability

87.

CVE-2025-4660: Forescout SecureConnector RCE

vulnerability | 2025-07-16 00:00 | CVE-2025-4660 | netspi.com | Original ↗ | .md | #rce | #red-team | #c2

88.

Critical vulnerabilities in NetScaler ADC exploited in-the-wild: everything you need to know

blog | 2025-07-06 12:45 | wiz.io | Original ↗ | .md | #cloud-security | #exploitation | #citrix

89.

nOAuth Abuse Alert: Full Account Takeover of Entra Cross-Tenant SaaS Applications

vulnerability | 2025-06-25 13:15 | semperis.com | Original ↗ | .md | #account-takeover | #entra-id | #vulnerability

90.

Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3

blog | 2025-06-26 00:00 | bishopfox.com | Original ↗ | .md | #rce | #vulnerability | #hardcoded-credentials

← Previous More →