Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 13)

361.

Introducing Credential Monitoring

research | 2025-11-04 11:40 | projectdiscovery.io | Original ↗ | .md | #bug-bounty

362.

ST4S Assessment

research | 2025-11-02 08:19 | projectblack.io | Original ↗ | .md | #compliance | #penetration-testing | #framework

363.

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

research | 2025-10-30 12:50 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #detection

364.

HQC vs. Kyber: Meet the Next Generation of Post-Quantum Security Superheroes

research | 2025-10-24 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

365.

Firebase Security Fundamentals

research | 2025-10-21 04:04 | projectblack.io | Original ↗ | .md | #cloud-security | #access-control | #mobile-security

366.

Internship Offers for the 2025-2026 Season

research | 2025-10-19 22:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #android | #reverse-engineering

367.

New ESA Hardware Security Laboratory built by eShard

research | 2025-10-21 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #fault-injection

368.

HTTP/1.1 must die: the desync endgame

research | 2025-10-17 10:13 | portswigger.net | Original ↗ | .md | #http-desync | #request-smuggling | #cloudflare

369.

JFrog AppTrust: A Technical Deep Dive into Building a Trusted Software Supply Chain

research | 2025-10-16 13:15 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #compliance

370.

How we broke exchanges: a deep dive into authentication and client-side bugs

research | 2025-10-16 12:00 | osec.io | Original ↗ | .md | #web3 | #account-takeover | #authentication

371.

Oops! It's a kernel stack use-after-free: Exploiting NVIDIA's GPU Linux drivers

research | 2025-10-13 22:00 | blog.quarkslab.com | Original ↗ | .md | #use-after-free | #exploitation | #linux-kernel

372.

CRLF Injection Nested Response Splitting CSP Gadget

research | 2025-10-15 00:00 | lab.ctbb.show | Original ↗ | .md | #crlf-injection | #response-splitting | #csp-gadget

373.

Tales from the Trace: How Agentic AI Merges Static and Dynamic Testing

research | 2025-10-09 12:00 | xbow.com | Original ↗ | .md | #ai-security | #sql-injection | #sast

374.

BYOVD to the next level (part 2) — rootkit like it's 2025

research | 2025-10-08 22:00 | blog.quarkslab.com | Original ↗ | .md | #windows | #post-exploitation | #kernel

375.

LDAP - Entender Para Atacar

research | 2025-10-10 14:26 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #ldap | #insights

376.

LDAP - Know To Attack

research | 2025-10-10 14:25 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #ldap | #insights

377.

AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies

research | 2025-10-09 00:00 | hunt.io | Original ↗ | .md | #threat-hunting | #c2 | #malware-analysis

378.

Triple Threat: Signal's Ratchet Goes Post-Quantum

research | 2025-10-06 22:00 | blog.quarkslab.com | Original ↗ | .md | #cryptography | #post-quantum | #ml-kem

379.

APT Meets GPT: Targeted Operations with Untamed LLMs

research | 2025-10-08 12:25 | volexity.com | Original ↗ | .md | #ai-security | #vulnerability-research | #threat-intelligence

380.

Abusing libmagic﹕ Inconsistencies That Lead to Type Confusion

research | 2025-10-06 00:00 | lab.ctbb.show | Original ↗ | .md | #exploitation | #type-confusion | #file-upload

381.

Leaking CSP nonces with CSS & MathML

research | 2025-10-05 00:00 | lab.ctbb.show | Original ↗ | .md | #csp | #css | #nonce-leak

382.

HTML facts﹕ <input type=”image”> and a <frame> XSS bypass

research | 2025-10-05 00:00 | lab.ctbb.show | Original ↗ | .md | #html | #input-image | #frame

383.

Traccar Unauthenticated LFI v5.8-v6.8.1

research | 2025-10-01 11:28 | CVE-2025-61666 | projectblack.io | Original ↗ | .md | #lfi | #unauthenticated | #traccar

384.

Hedged Dilithium Dis-Faulting | Expert Review #6

research | 2025-10-02 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

385.

Security review of PHP documentation

research | 2025-09-21 22:00 | blog.quarkslab.com | Original ↗ | .md | #php | #secure-coding | #documentation

386.

Stronger Together: Embracing AI as a Force Multiplier

research | 2025-09-19 13:45 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #security-research

387.

WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine

research | 2025-09-18 07:50 | portswigger.net | Original ↗ | .md | #burp-suite | #fuzzing | #prototype-pollution

388.

Beerus Framework – Um Novo Framework Mobile Surge

research | 2025-09-19 16:16 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

389.

Beerus Framework – A New Mobile Framework Arises

research | 2025-09-19 16:16 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #insights

390.

How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities

research | 2025-09-12 12:21 | portswigger.net | Original ↗ | .md | #bug-bounty | #interview | #workflow

← Previous More →