Curated security research, vulnerabilities, advisories and tools for practitioners.

#waf

Security coverage tagged waf.

1.

Autonomous WAF Mitigation: From Validated Exploit to Deployed Defense, Fast

blog | 2026-08-03 00:00 | tenzai.com | original ↗ | #ai-security | #cloud | #agentic-ai

2.

Now Detecting: WP2Shell - Pre-Authentication RCE in WordPress Core

vulnerability | Critical | 2026-07-17 00:00 | CVE-2026-63030 | ethiack.com | original ↗ | #rce | #zero-day | #rest-api

3.

In WAF we (should not) trust

research | 2026-03-25 23:00 | blog.quarkslab.com | original ↗ | #appsec | #web-security | #command-obfuscation

4.

Bypassing WAFs for Fun and JS Injection with Parameter Pollution

research | 2025-08-04 00:00 | ethiack.com | original ↗ | #web-security | #xss | #waf

5.

Hacker opinion piece | Will artificial intelligence replace hackers?

blog | 2025-07-21 12:00 | bugcrowd.com | original ↗ | #ai-security | #bug-bounty | #automation

6.

Recon series #3: HTTP fingerprinting – sleuthing for a web application’s hidden vulnerabilities

blog | 2025-03-18 14:58 | yeswehack.com | original ↗ | #bug-bounty | #waf | #cve

7.

Sensing and blocking JavaScript SQL injection attacks

blog | 2025-03-04 00:00 | aikido.dev | original ↗ | #sql-injection | #web-security | #waf

8.

Whitelisting an IP Address for Penetration Testing in Cloudflare

research | 2024-02-12 00:31 | projectblack.io | original ↗ | #waf | #penetration-testing | #cloudflare

9.

An Interesting XSS-Bypassing WAF

vulnerability | 2023-07-26 10:04 | labs.cognisys.group | original ↗ | #pentesting | #web-security | #xss

10.

Web application firewall bypass

blog | 2022-10-11 13:55 | yeswehack.com | original ↗ | #bug-bounty | #pentesting | #web-security

11.

Living with and Learning from Log4Shell

blog | 2021-12-16 00:00 | bugcrowd.com | original ↗ | #supply-chain | #incident-response | #waf

12.

Virtual Patching of Vulnerabilities at the Pace of Business

blog | 2021-07-01 13:26 | yeswehack.com | original ↗ | #vulnerability-management | #incident-response | #waf

13.

ZwinK’s Tips and Tricks to Crush Bug Bounty #4 & #5

blog | 2021-06-22 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #burp-suite | #waf

14.

Are You Giving Out Cheat Codes if You Whitelist Pen Testers?

blog | 2020-07-29 00:00 | bishopfox.com | original ↗ | #waf | #penetration-testing | #methodology

15.

Bug Bounties and NGWAF: 1+1=3

blog | 2016-04-22 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #waf | #bugcrowd