Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 11)

301.

Azure DevOps Agent Interception

research | 2026-02-10 00:00 | lab.ctbb.show | Original ↗ | .md | #cloud | #azure-devops | #ctbb

302.

Top 10 web hacking techniques of 2025

research | 2026-02-06 08:07 | portswigger.net | Original ↗ | .md | #vulnerability-research | #web-security | #xss

303.

How to write your first obfuscator of Java Bytecode

research | 2026-02-04 23:00 | blog.quarkslab.com | Original ↗ | .md | #java | #obfuscation | #asm

304.

Breaking AppSec Myths – Obfuscated Packages

research | 2026-02-04 14:16 | jfrog.com | Original ↗ | .md | #supply-chain | #appsec | #obfuscation

305.

[EN] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing

research | 2026-02-04 11:59 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

306.

[PT-BR] Understanding Client Fingerprinting: Bot Detection Evasion Using Fingerprint Multilayer Spoofing

research | 2026-02-04 11:59 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

307.

Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529

research | 2026-01-30 00:00 | CVE-2024-54529 | projectzero.google | Original ↗ | .md | #exploitation | #macos | #type-confusion

308.

Parse and Parse: MIME Validation Bypass to XSS via Parser Differential

research | 2026-01-30 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #xss | #research

309.

Agentic AI: the Confused Deputy problem

research | 2026-01-27 23:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #agentic-ai | #prompt-injection

310.

One-click RCE on OpenClaw in under 2 hours with an Autonomous Hacking Agent

research | 2026-01-29 00:00 | ethiack.com | Original ↗ | .md | #ai-security | #rce | #zero-day

311.

How We Found 5 Ways to Hack Any Developer Using Google Gemini CLI

research | 2026-01-27 00:00 | bugbunny.ai | Original ↗ | .md | #ai-security | #cloud | #rce

312.

The Fragile Lock: Novel Bypasses For SAML Authentication

research | 2026-01-21 10:34 | portswigger.net | Original ↗ | .md | #appsec | #ruby | #authentication-bypass

313.

Beyond the Perimeter: Why Deception is Critical to Protecting the World’s Most Sensitive Organisations

research | 2026-01-21 21:07 | horizon3.ai | Original ↗ | .md | #vulnerability-research

314.

EVerest security audit

research | 2026-01-19 23:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #vulnerability-research | #vulnerability

315.

Who’s on the Line? Exploiting RCE in Windows Telephony Service

research | 2026-01-19 13:00 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #vulnerability-research | #windows

316.

Top 10 web hacking techniques of 2025: call for nominations

research | 2026-01-16 14:11 | portswigger.net | Original ↗ | .md | #vulnerability-research | #web-security | #community

317.

Why LLMs Hallucinate Vulnerabilities

research | 2026-01-15 21:33 | xbow.com | Original ↗ | .md | #ai-security | #appsec | #llm

318.

[EN] A Deep Dive into KeyTabExtractor Techniques

research | 2026-01-15 18:10 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #kerberos | #research

319.

104 Hacking Tools and Resources

research | 2026-01-14 18:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #cloud | #pentesting

320.

The Security Researcher Who Thinks Like a Pastor

research | 2026-01-13 21:47 | hackerone.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #community

321.

Dissecting and Exploiting CVE-2025-62507: Remote Code Execution in Redis

research | 2026-01-14 14:09 | CVE-2025-62507 | jfrog.com | Original ↗ | .md | #rce | #exploit | #cve

322.

Fixing ESC1 - Enrollee supplies subject and template allows client authentication

research | 2026-01-13 01:10 | projectblack.io | Original ↗ | .md | #cloud | #active-directory | #hardening

323.

Achieving remote code execution in LangSmith Playground using unsafe template formatting

research | 2026-01-12 00:00 | lab.ctbb.show | Original ↗ | .md | #rce | #uninitialized-memory | #ctbb

324.

Gotta cache 'em all: bending the rules of web cache exploitation

research | 2026-01-08 12:21 | portswigger.net | Original ↗ | .md | #vulnerability-research | #web-security | #research

325.

Clang Hardening Cheat Sheet - Ten Years Later

research | 2026-01-07 23:00 | blog.quarkslab.com | Original ↗ | .md | #devsecops | #developer-security | #hardening

326.

Importing Pre-made Kali VMware VM into ESXi

research | 2026-01-07 23:39 | projectblack.io | Original ↗ | .md | #pentesting | #virtualization | #vmware

327.

AI is the new magical master key: How attackers are using AI as a tool

research | 2026-01-07 15:19 | bugcrowd.com | Original ↗ | .md | #ai-security | #threat-intelligence | #malware

328.

Set ms-DS-MachineAccountQuota to 0

research | 2026-01-01 06:12 | projectblack.io | Original ↗ | .md | #active-directory | #blue-team | #hardening

329.

Blind trust: what is hidden behind the process of creating your PDF file?

research | 2025-12-29 11:57 | swarm.ptsecurity.com | Original ↗ | .md | #appsec | #vulnerability-research | #web-security

330.

A Safer Future for Security Research: Landmark Moves in Portugal and the UK

research | 2025-12-18 17:57 | hackerone.com | Original ↗ | .md | #bug-bounty | #vulnerability-research | #security-research

← Previous More →