Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 15)

421.

Exploiting Web Worker XSS with Blobs

research | 2025-08-08 00:00 | lab.ctbb.show | Original ↗ | .md | #xss | #exploitation | #web-worker

422.

AI Pentesting Without the Noise: Hackbots and the Verifier

research | 2025-08-07 00:00 | ethiack.com | Original ↗ | .md | #ai-security | #ai-pentesting | #verifier

423.

Bypassing WAFs for Fun and JS Injection with Parameter Pollution

research | 2025-08-04 00:00 | ethiack.com | Original ↗ | .md | #web-security | #xss | #waf

424.

We can't set up the conversation because your organisations are not set up to talk to each other

research | 2025-08-01 00:02 | projectblack.io | Original ↗ | .md | #collaboration | #troubleshooting | #microsoft-teams

425.

The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.

research | 2025-07-31 12:00 | xbow.com | Original ↗ | .md | #bug-bounty | #cloud | #rce

426.

Hannibal Stealer: A Deep Technical Analysis

research | 2025-08-01 00:00 | netlas.io | Original ↗ | .md | #malware | #credential-theft | #threat-analysis

427.

TraderTraitor: Deep Dive

research | 2025-07-28 13:17 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #threat-intelligence

428.

ToolShell - Chuỗi lỗ hổng SharePoint nghiêm trọng đang bị khai thác trong thực tế

research | 2025-07-24 10:37 | CVE-2025-49704 | blog.viettelcybersecurity.com | Original ↗ | .md | #active-exploitation | #threat-intelligence | #sharepoint

429.

The Guest Who Could: Exploiting LPE in VMWare Tools

research | 2025-07-22 13:32 | swarm.ptsecurity.com | Original ↗ | .md | #vulnerability-research | #windows | #saml

430.

Free DNS Filtering

research | 2025-07-21 11:09 | projectblack.io | Original ↗ | .md | #malware | #network-security | #cloudflare

431.

No Tokens Required: A Movie Power Virtual Reality Breakout Exploit

research | 2025-07-21 14:48 | mccaulay.co.uk | Original ↗ | .md | #vulnerability-research | #sandbox-escape | #exploitation

432.

A Novel Technique for SQL Injection in PDO's Prepared Statements

research | 2025-07-21 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #sql-injection

433.

Daemon Ex Plist: LPE via MacOS Daemons

research | 2025-07-17 15:11 | swarm.ptsecurity.com | Original ↗ | .md | #macos | #local-privilege-escalation | #launchd

434.

Repeater Strike: manual testing, amplified

research | 2025-07-15 13:46 | portswigger.net | Original ↗ | .md | #ai-security | #burp-suite | #automation

435.

Google Pixel Root Guide

research | 2025-07-12 11:49 | projectblack.io | Original ↗ | .md | #android | #mobile-testing | #google-pixel

436.

Critical RCE Vulnerability in mcp-remote: CVE-2025-6514 Threatens LLM Clients

research | 2025-07-09 13:00 | CVE-2025-6514 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #mcp

437.

Password Policy GPO

research | 2025-07-07 05:25 | projectblack.io | Original ↗ | .md | #active-directory | #nist | #hardening

438.

When too much access is not enough: a story about Confluence and tokens

research | 2025-07-02 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #aws | #red-team

439.

Bypassing WAFs with the phantom $Version cookie

research | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #web-security | #cookies | #waf-bypass

440.

Stealing HttpOnly cookies with the cookie sandwich technique

research | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #cookies | #exfiltration | #session-security

441.

Splitting the email atom: exploiting parsers to bypass access controls

research | 2025-06-27 13:49 | portswigger.net | Original ↗ | .md | #rce | #email-security | #unicode

442.

Novel SSRF Technique Involving HTTP Redirect Loops

research | 2025-06-23 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #ssrf

443.

Shifting left" secures PQC implementations from physical attacks

research | 2025-06-20 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

444.

FileFlows Vulnerabilities - SQL Injection by Decompiling .NET Code

research | 2025-06-11 23:03 | projectblack.io | Original ↗ | .md | #sql-injection | #vulnerability | #decompilation

445.

Getting started with Wirego

research | 2025-06-09 22:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #wireshark | #tool

446.

Cut the Noise, Find the Threats: Wiz Defend Launches for Government

research | 2025-06-10 11:00 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #threat-detection

447.

A look back at Hardwear.io USA 2025

research | 2025-06-10 00:00 | eshard.com | Original ↗ | .md | #cloud | #vulnerability-research | #hardware-security

448.

What 7,000+ NodeZero RAT Attempts Show Us About Cyber Security

research | 2025-06-09 13:25 | horizon3.ai | Original ↗ | .md | #vulnerability-research

449.

Chatting with Your Attack Paths: An MCP for BloodHound

research | 2025-06-04 15:30 | specterops.io | Original ↗ | .md | #ai-security

450.

ISO 27001 Penetration Testing Requirements

research | 2025-06-03 02:12 | projectblack.io | Original ↗ | .md | #compliance | #penetration-testing | #iso-27001

← Previous More →