Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 21)

601.

Chaining Three Bugs to Access All Your ServiceNow Data

research | 2024-07-11 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #servicenow | #exploitation-chain

602.

Let’s Go into the rabbit hole (part 3) — the challenges of dynamically hooking Golang programs

research | 2024-07-08 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #reverse-engineering | #golang

603.

Enhancing Asset Discovery: ProjectDiscovery Cloud Platform (v0.8.8)

research | 2024-07-10 15:36 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud | #red-team

604.

Hacking the Nokia Fastmile

research | 2024-07-09 01:30 | projectblack.io | Original ↗ | .md | #hardware-security | #firmware | #rooting

605.

The Side Channel Chronicles #2: Getting started

research | 2024-07-09 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #side-channel

606.

Embracing Complexity in DevOps: Software Supply Chain State of the Union 2024

research | 2024-07-05 00:00 | jfrog.com | Original ↗ | .md | #supply-chain | #devops | #jfrog

607.

Hey Kyber, Give me a Sign! | Expert Review #4

research | 2024-07-02 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

608.

Inside Xerox WorkCentre: Two Unauthenticated RCEs

research | 2024-06-28 11:48 | CVE-2016-11061 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #iot-security | #xerox

609.

Enable SMB Signing via GPO

research | 2024-06-26 02:27 | projectblack.io | Original ↗ | .md | #active-directory | #windows | #hardening

610.

Why nested deserialization is harmful: Magento XXE (CVE-2024-34102)

research | 2024-06-26 00:00 | CVE-2024-34102 | slcyber.io | Original ↗ | .md | #vulnerability-research | #deserialization | #magento

611.

esReverse featured on NIST Binary Code Scanners list

research | 2024-06-25 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #corporate

612.

Prototype Pollution: A Deep-Dive

research | 2024-06-24 00:00 | netspi.com | Original ↗ | .md | #rce | #web-security | #xss

613.

Making desync attacks easy with TRACE

research | 2024-06-19 13:58 | portswigger.net | Original ↗ | .md | #bug-bounty | #request-smuggling | #exploitation

614.

MCUBoot Under (good) Pressure | Part 3: Less is more?

research | 2024-06-21 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #fault-injection

615.

How esReverse is empowering the semiconductor industry

research | 2024-06-20 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

616.

Recovering an ECU firmware using disassembler and branches

research | 2024-06-17 22:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #firmware | #arm

617.

Disable LLMNR via GPO (Together with NBT-NS and MDNS)

research | 2024-06-15 11:24 | projectblack.io | Original ↗ | .md | #ai-security | #active-directory | #credential-theft

618.

onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet

research | 2024-06-11 14:58 | portswigger.net | Original ↗ | .md | #web-security | #xss | #cheat-sheet

619.

Let’s Go into the rabbit hole (part 2) — the challenges of dynamically hooking Golang programs

research | 2024-06-10 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #reverse-engineering | #golang

620.

Elevate your mobile security investigations with esReverse

research | 2024-06-10 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #mobile-security

621.

Introducing SignSaboteur: forge signed web tokens with ease

research | 2024-06-04 07:25 | portswigger.net | Original ↗ | .md | #burp-suite | #authentication | #jwt

622.

Hack the Box - Codify Walkthrough

research | 2024-05-31 00:31 | CVE-2023-29017 | projectblack.io | Original ↗ | .md | #privilege-escalation | #sandbox-escape | #walkthrough

623.

How malware authors play with the LNK file format

research | 2024-05-29 22:00 | CVE-2010-2568 | blog.quarkslab.com | Original ↗ | .md | #malware | #windows | #threat-analysis

624.

Refining your HTTP perspective, with bambdas

research | 2024-05-29 15:03 | portswigger.net | Original ↗ | .md | #burp-suite | #graphql | #tooling

625.

Portable Data exFiltration: XSS for PDFs

research | 2024-05-28 13:42 | portswigger.net | Original ↗ | .md | #xss | #ssrf | #pdf

626.

Getting XXE in Web Browsers using ChatGPT

research | 2024-05-22 14:12 | swarm.ptsecurity.com | Original ↗ | .md | #browser-security | #xxe | #chatgpt

627.

Audit of Kuksa, the open-source shared building blocks for Software Defined Vehicles

research | 2024-05-20 22:00 | blog.quarkslab.com | Original ↗ | .md | #fuzzing | #audit | #automotive

628.

Top 10 web hacking techniques of 2023 - nominations open

research | 2024-05-20 14:00 | portswigger.net | Original ↗ | .md | #web-security | #community | #research

629.

AI deep dive: Pen testing

research | 2024-05-14 19:02 | bugcrowd.com | Original ↗ | .md | #ai-security | #red-teaming | #penetration-testing

630.

Advisory: Next.js SSRF (CVE-2024-34351)

research | 2024-05-09 00:00 | CVE-2024-34351 | slcyber.io | Original ↗ | .md | #vulnerability-research | #advisory | #nextjs

← Previous More →