Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability

Security coverage tagged vulnerability. (Page 5)

121.

Phân tích CVE-2024-6748

vulnerability | 2024-11-12 11:52 | CVE-2024-6748 | blog.viettelcybersecurity.com | Original ↗ | .md | #manageengine | #sql-injection | #vulnerability

122.

How an Improper Access Control Vulnerability Led to Account Theft in One Click

vulnerability | 2024-11-06 17:21 | hackerone.com | Original ↗ | .md | #bug-bounty | #access-control | #account-takeover

123.

How an Information Disclosure Vulnerability Led to Critical Data Exposure

vulnerability | 2024-11-05 17:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #data-exposure | #information-disclosure

124.

How a Cross-Site Scripting Vulnerability Led to Account Takeover

vulnerability | 2024-11-04 17:50 | hackerone.com | Original ↗ | .md | #bug-bounty | #account-takeover | #web-security

125.

A Brief Look at FortiJump (FortiManager CVE-2024-47575)

vulnerability | 2024-11-01 00:00 | CVE-2024-47575 | bishopfox.com | Original ↗ | .md | #exploit | #vulnerability | #fortimanager

126.

How a Business Logic Vulnerability Led to Unlimited Discount Redemption

vulnerability | 2024-11-01 16:57 | hackerone.com | Original ↗ | .md | #bug-bounty | #vulnerability | #hackerone

127.

Bluetooth Low Energy GATT Fuzzing

research | 2024-10-24 22:00 | blog.quarkslab.com | Original ↗ | .md | #fuzzing | #vulnerability | #embedded

128.

Attacking the Samsung Galaxy A* Boot Chain

research | 2024-10-14 22:00 | blog.quarkslab.com | Original ↗ | .md | #android | #exploitation | #vulnerability

129.

Bypass Apache Superset restrictions to perform SQL injections

research | 2024-10-09 22:00 | blog.quarkslab.com | Original ↗ | .md | #sql-injection | #postgresql | #vulnerability

130.

Exploiting Microsoft Teams on macOS during a Purple Team engagement

research | 2024-10-07 22:00 | blog.quarkslab.com | Original ↗ | .md | #macos | #vulnerability | #pentest

131.

Critical vulnerabilities in Palo Alto Expedition: everything you need to know

blog | 2024-10-10 17:45 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #patching

132.

Differential fuzzing for cryptography

research | 2024-10-02 22:00 | blog.quarkslab.com | Original ↗ | .md | #fuzzing | #cryptography | #vulnerability

133.

CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know

vulnerability | 2024-09-29 17:00 | wiz.io | Original ↗ | .md | #cloud | #rce | #linux

134.

Exploiting Chamilo during a Red Team engagement

research | 2024-09-16 22:00 | blog.quarkslab.com | Original ↗ | .md | #rce | #php | #red-team

135.

Audit of Operator Fabric

research | 2024-09-03 22:00 | blog.quarkslab.com | Original ↗ | .md | #rce | #vulnerability | #docker

136.

Unveiling TE.0 HTTP Request Smuggling: Discovering a Critical Vulnerability in Thousands of Google Cloud Websites

vulnerability | 2024-07-17 15:00 | bugcrowd.com | Original ↗ | .md | #cloud | #web-security | #vulnerability

137.

Audit of Cloud Native Buildpacks

research | 2024-07-15 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #container-security | #vulnerability

138.

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts

blog | 2024-07-17 17:45 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #cloud-security

139.

RCE vulnerability in OpenSSH: everything you need to know

vulnerability | 2024-07-01 13:49 | CVE-2024-6387 | wiz.io | Original ↗ | .md | #rce | #linux | #vulnerability

140.

Probllama: Ollama Remote Code Execution Vulnerability (CVE-2024-37032) – Overview and Mitigations

vulnerability | 2024-06-24 13:09 | CVE-2024-37032 | wiz.io | Original ↗ | .md | #ai-security | #rce | #open-source

141.

Critical RCE vulnerability in PHP CGI: everything you need to know

vulnerability | 2024-06-10 17:08 | CVE-2024-4577 | wiz.io | Original ↗ | .md | #rce | #php | #ransomware

142.

The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate

blog | 2024-05-23 13:58 | wiz.io | Original ↗ | .md | #ai-security | #cloud-security | #vulnerability

143.

Is Assessing Your SaaS Providers Worth It? Uncovering an OS Command Injection in a Popular SaaS Platform

research | 2024-04-30 06:07 | projectblack.io | Original ↗ | .md | #web-security | #vulnerability | #penetration-testing

144.

CVE-2024-4040 exploited in the wild: everything you need to know

vulnerability | 2024-04-24 16:15 | CVE-2024-4040 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #patching

145.

AI vulnerability deep dive: Prompt injection

vulnerability | 2024-04-23 12:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #prompt-injection | #vulnerability

146.

The Windows Registry Adventure #1: Introduction and research results

blog | 2024-04-18 00:00 | projectzero.google | Original ↗ | .md | #attack-surface | #fuzzing | #windows

147.

How a Race Condition Vulnerability Could Cast Multiple Votes

vulnerability | 2024-04-11 16:07 | hackerone.com | Original ↗ | .md | #web-security | #vulnerability | #research

148.

Authentication bypass vulnerabilities in TeamCity: everything you need to know

vulnerability | 2024-03-06 16:49 | wiz.io | Original ↗ | .md | #cloud | #authentication-bypass | #jetbrains

149.

PHP deserialization attacks and a new gadget chain in Laravel

research | 2024-02-12 23:00 | blog.quarkslab.com | Original ↗ | .md | #php | #deserialization | #vulnerability

150.

February Fortinet Advisory: everything you need to know

blog | 2024-02-12 13:53 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #fortinet

← Previous More →