Curated security research, vulnerabilities, advisories and tools for practitioners.

#vulnerability

Security coverage tagged vulnerability. (Page 6)

151.

Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know

blog | 2024-02-06 16:06 | wiz.io | Original ↗ | .md | #cisa | #vulnerability | #vpn

152.

Security Flash: CISA Order to Disconnect Ivanti Products

blog | 2024-02-02 07:25 | bugcrowd.com | Original ↗ | .md | #zero-day | #cisa | #exploitation

153.

PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack.

research | 2024-01-15 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability | #ipv6 | #uefi

154.

Rounding bugs: an analysis

blog | 2024-01-18 00:00 | osec.io | Original ↗ | .md | #smart-contracts | #defi | #vulnerability

155.

Crying out Cloud – Our Favorite Stories of 2023

blog | 2024-01-16 17:21 | wiz.io | Original ↗ | .md | #ai-security | #cloud | #zero-day

156.

Assessing the security posture of a widely used vision model: YOLOv7

vulnerability | 2023-11-15 15:15 | blog.trailofbits.com | Original ↗ | .md | #rce | #open-source | #denial-of-service

157.

Our Pwn2Own journey against time and randomness (part 2)

research | 2023-11-06 23:00 | blog.quarkslab.com | Original ↗ | .md | #firmware | #vulnerability | #netgear

158.

MetaMask Snaps: playing in the sand

vulnerability | 2023-11-01 00:00 | osec.io | Original ↗ | .md | #vulnerability | #javascript | #browser-extension

159.

CVE-2023-38545 high severity vulnerability in cURL: everything you need to know

vulnerability | 2023-10-11 16:56 | CVE-2023-38545 | wiz.io | Original ↗ | .md | #cloud-security | #vulnerability | #patching

160.

Critical and high severity Exim vulnerabilities: everything you need to know

vulnerability | 2023-10-02 13:53 | CVE-2023-42115 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #patching

161.

Critical vulnerabilities in media libraries exploited in the wild: everything you need to know

blog | 2023-10-01 13:31 | wiz.io | Original ↗ | .md | #vulnerability | #exploited-in-the-wild | #libwebp

162.

Top 3 web application security vulnerabilities in 2024

blog | 2023-09-27 00:00 | aikido.dev | Original ↗ | .md | #remediation | #web-security | #sast

163.

Don’t overextend your Oblivious Transfer

vulnerability | 2023-09-20 12:00 | blog.trailofbits.com | Original ↗ | .md | #cryptography | #vulnerability | #threshold-signatures

164.

A problem with .NET Self-Contained Apps and how to pop calculators in dnSpy

blog | 2023-09-23 00:00 | blog.washi.dev | Original ↗ | .md | #reverse-engineering | #vulnerability | #tools

165.

Security flaws in an SSO plugin for Caddy

blog | 2023-09-18 12:00 | blog.trailofbits.com | Original ↗ | .md | #cloud | #security-audit | #xss

166.

Breaking Secure Boot on the Silicon Labs Gecko platform

research | 2023-08-20 22:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability | #embedded | #ota

167.

Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần I

blog | 2023-08-10 10:10 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #vulnerability | #patching

168.

[CVE-2019-18935] Các lỗ hổng bảo mật được khai thác nhiều trong 6 tháng đầu năm 2023 - Phần 2

vulnerability | 2023-08-02 08:16 | CVE-2019-18935 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #deserialization | #exploitation

169.

Các lỗ hổng bảo mật được khai thác nhiều trong 6 tháng đầu năm 2023 - Phần 1

blog | 2023-08-02 08:16 | blog.viettelcybersecurity.com | Original ↗ | .md | #threat-intelligence | #exploitation | #vulnerability

170.

For Science! - Using an Unimpressive Bug in EDK II to Do Some Fun Exploitation

research | 2023-06-22 22:00 | blog.quarkslab.com | Original ↗ | .md | #exploitation | #firmware | #vulnerability

171.

TaskCafe, Version 0.3.2 Advisory

blog | 2023-06-20 00:00 | bishopfox.com | Original ↗ | .md | #access-control | #account-takeover | #xss

172.

CVE-2020-27265 (Pre-auth on KEPWARE products)

vulnerability | 2023-05-26 12:56 | CVE-2020-27265 | blog.viettelcybersecurity.com | Original ↗ | .md | #vulnerability | #ot-security | #stack-overflow

173.

Git Arbitrary Configuration Injection (CVE-2023-29007)

vulnerability | 2023-04-26 00:00 | CVE-2023-29007 | ethiack.com | Original ↗ | .md | #rce | #git | #vulnerability

174.

WP Coder, Version 2.5.3 Advisory

vulnerability | 2023-04-13 00:00 | CVE-2023-0895 | bishopfox.com | Original ↗ | .md | #sql-injection | #wordpress | #vulnerability

175.

Microsoft Intune, Version 1.55.48.0 Advisory

blog | 2023-04-04 00:00 | bishopfox.com | Original ↗ | .md | #microsoft | #privilege-escalation | #vulnerability

176.

How to avoid the aCropalypse

vulnerability | 2023-03-30 12:00 | CVE-2023-21036 | blog.trailofbits.com | Original ↗ | .md | #privacy | #vulnerability | #image-parsing

177.

A gentle introduction to Microsoft OMI and how to crash it

research | 2023-03-30 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #fuzzing | #microsoft

178.

Our Pwn2Own journey against time and randomness (part 1)

research | 2023-03-23 23:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #firmware | #vulnerability

179.

Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems

vulnerability | 2023-03-16 00:00 | projectzero.google | Original ↗ | .md | #rce | #android | #vulnerability

180.

Vulnerabilities in the TPM 2.0 reference implementation code

vulnerability | 2023-03-13 23:00 | blog.quarkslab.com | Original ↗ | .md | #virtualization | #vulnerability | #tpm

← Previous More →