Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 12)

331.

XSS without HTML: Client-Side Template Injection with AngularJS

research | 2025-12-17 15:21 | portswigger.net | Original ↗ | .md | #appsec | #web-security | #xss

332.

Announcing Xint Code

research | 2025-12-16 00:43 | theori.io | Original ↗ | .md | #ai-security | #cloud | #rce

333.

Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaigns

research | 2025-12-17 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware

334.

Welcome to the new Project Zero Blog

research | 2025-12-16 00:00 | projectzero.google | Original ↗ | .md | #community | #research | #blog

335.

A modern tale of blinkenlights

research | 2025-12-10 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #reverse-engineering

336.

[PT-BR] N8Naked: exploring security misconfigurations in N8N

research | 2025-12-11 22:06 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

337.

[EN] N8Naked: exploring security misconfigurations in N8N

research | 2025-12-11 22:05 | yokai.hakaisecurity.io | Original ↗ | .md | #ai-security | #vulnerability-research | #research

338.

eShard strengthens its Strategic Committee with the appointment of Emmanuel Carjat

research | 2025-12-11 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #corporate

339.

Orthanc 1.12.9 User Impersonation

research | 2025-12-09 00:53 | CVE-2025-15581 | projectblack.io | Original ↗ | .md | #appsec | #vulnerability-research | #vulnerability

340.

What Are Bug Bounties and How Do They Work?

research | 2025-12-04 17:00 | hackerone.com | Original ↗ | .md | #bug-bounty | #pentesting | #red-teaming

341.

Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks

research | 2025-12-04 18:29 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

342.

Stopping Redirects

research | 2025-12-04 00:00 | lab.ctbb.show | Original ↗ | .md | #client-side | #ctbb | #redirect

343.

Vega CVE-2025-59840 - Unusual XSS Technique toString gadget chains

research | 2025-12-01 00:00 | CVE-2025-59840 | lab.ctbb.show | Original ↗ | .md | #xss | #gadget-chain | #vega

344.

Write Path Traversal to a RCE Art Department

research | 2025-11-28 00:00 | lab.ctbb.show | Original ↗ | .md | #rce | #path-traversal | #exploitation

345.

Evaluating the Side-Channel Security of Post-Quantum Hardware IP

research | 2025-11-26 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

346.

Agent Capability Is a System Design Problem: Lessons From a 90% Improvement on CyberGym

research | 2025-11-24 00:00 | depthfirst.com | Original ↗ | .md | #ai-security | #benchmark | #ai-agents

347.

Challenge Two - Stranger XSS

research | 2025-11-24 00:00 | lab.ctbb.show | Original ↗ | .md | #xss | #challenge | #writeup

348.

Prompt Injection Isn't a Vulnerability

research | 2025-11-24 00:00 | josephthacker.com | Original ↗ | .md | #ai-security | #bug-bounty | #appsec

349.

Esbuild's XSS Bug that Survived 5 Billion Downloads and Bypassed HTML Sanitization

research | 2025-11-20 00:00 | depthfirst.com | Original ↗ | .md | #supply-chain | #vulnerability-research | #xss

350.

Bitcoin Core audit

research | 2025-11-18 23:00 | blog.quarkslab.com | Original ↗ | .md | #web3 | #vulnerability-research | #cryptocurrency

351.

Remote Control Android from PC Using scrcpy

research | 2025-11-17 10:38 | projectblack.io | Original ↗ | .md | #android | #mobile-testing | #scrcpy

352.

Challenge One - Strange XSS

research | 2025-11-18 00:00 | lab.ctbb.show | Original ↗ | .md | #xss | #challenge | #writeup

353.

ASP.NET MVC View Engine Search Patterns

research | 2025-11-17 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #ctbb | #aspnet-mvc

354.

Injection for an athlete

research | 2025-11-14 14:07 | swarm.ptsecurity.com | Original ↗ | .md | #android | #mobile-security | #firmware

355.

Introducing HTTP Anomaly Rank

research | 2025-11-11 14:41 | portswigger.net | Original ↗ | .md | #ai-security | #burp-suite | #web-security

356.

Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks

research | 2025-11-10 13:34 | wiz.io | Original ↗ | .md | #ai-security | #secrets | #github

357.

Unicode surrogates conversion to (simplified) replacement characters

research | 2025-11-10 00:00 | lab.ctbb.show | Original ↗ | .md | #web-security | #unicode | #surrogate

358.

Kubevirt security audit

research | 2025-11-06 23:00 | blog.quarkslab.com | Original ↗ | .md | #kubernetes | #virtualization | #vulnerability

359.

EntraGoat Scenario 3: Exploiting Group Ownership in Entra ID

research | 2025-11-06 22:05 | semperis.com | Original ↗ | .md | #privilege-escalation | #entra-id | #attack-paths

360.

Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk

research | 2025-11-04 14:15 | CVE-2025-11953 | jfrog.com | Original ↗ | .md | #rce | #supply-chain | #npm

← Previous More →