Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 23)

661.

Microsoft Exchange 2010 Arbitrary User Impersonation

research | 2024-03-05 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #email-security | #windows

662.

BGE Attack on AES White-Boxes: Extending Blue Galaxy Energy for Decryption and Shuffled States

research | 2024-02-28 23:00 | blog.quarkslab.com | Original ↗ | .md | #cryptography | #release | #aes

663.

How I Built a Car In a Box

research | 2024-02-21 23:00 | blog.quarkslab.com | Original ↗ | .md | #car-hacking | #hardware | #training

664.

Top 10 web hacking techniques of 2023

research | 2024-02-19 15:58 | portswigger.net | Original ↗ | .md | #web-security | #community | #research

665.

Continuing the Citrix Saga: CVE-2023-5914 & CVE-2023-6184

research | 2024-02-20 00:00 | CVE-2023-5914 | slcyber.io | Original ↗ | .md | #vulnerability-research | #exploitation | #citrix

666.

Behind the release of esDynamic 2024.01

research | 2024-02-15 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #release | #product-updates

667.

Introducing esDynamic 2024.01 — the future of Chip Security Testing

research | 2024-02-15 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #release | #product-updates

668.

PHP deserialization attacks and a new gadget chain in Laravel

research | 2024-02-12 23:00 | blog.quarkslab.com | Original ↗ | .md | #php | #deserialization | #vulnerability

669.

Fiddling the Twiddle Constants | Expert Review #2

research | 2024-02-14 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #hardware-security

670.

Whitelisting an IP Address for Penetration Testing in Cloudflare

research | 2024-02-12 00:31 | projectblack.io | Original ↗ | .md | #waf | #penetration-testing | #cloudflare

671.

CharmingCypress: Innovating Persistence

research | 2024-02-13 09:47 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

672.

DJI - The ART of obfuscation

research | 2024-02-05 23:00 | blog.quarkslab.com | Original ↗ | .md | #android | #reverse-engineering | #obfuscation

673.

Digital Exposure Analysis of the 500 Largest Portuguese Companies

research | 2024-02-05 00:00 | ethiack.com | Original ↗ | .md | #attack-surface | #research | #easm

674.

Ivanti's Pulse Connect Secure Auth Bypass Round Two

research | 2024-02-02 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #ivanti | #auth-bypass

675.

How Memory Forensics Revealed Exploitation of Ivanti Connect Secure VPN Zero-Day Vulnerabilities

research | 2024-02-01 11:59 | volexity.com | Original ↗ | .md | #rce | #zero-day | #vulnerability-research

676.

eShard releases a new Expertise Module for Lightweight Cryptography

research | 2024-01-29 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #hardware-security

677.

A Deep Dive into V8 Sandbox Escape Technique Used in In-The-Wild Exploit

research | 2024-01-25 15:00 | theori.io | Original ↗ | .md | #sandbox-escape | #exploit | #v8

678.

Bypassing browser tracking protection for CORS misconfiguration abuse

research | 2024-01-25 13:37 | swarm.ptsecurity.com | Original ↗ | .md | #browser-security | #web-security | #cors

679.

Hiding payloads in Java source code strings

research | 2024-01-24 12:27 | portswigger.net | Original ↗ | .md | #rce | #burp-suite | #java

680.

Introducing the Cloud Threat Landscape, a new TI resource for cloud defenders

research | 2024-01-24 15:28 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #threat-intelligence

681.

Understanding the Benefits of Key Derivation Functions: A Deep Dive into PBKDF2

research | 2024-01-19 01:44 | hackerone.com | Original ↗ | .md | #cryptography | #kdf | #pbkdf2

682.

SSH Without Port Forwarding

research | 2024-01-16 22:47 | projectblack.io | Original ↗ | .md | #cloud | #networking | #ssh

683.

High Signal Detection and Exploitation of Ivanti's Pulse Connect Secure Auth Bypass & RCE

research | 2024-01-18 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

684.

PixieFail: Nine vulnerabilities in Tianocore's EDK II IPv6 network stack.

research | 2024-01-15 23:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability | #ipv6 | #uefi

685.

The Side Channel Chronicles #1: A bit of history

research | 2024-01-15 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #history

686.

Python ❤️ SSPI: Teaching Impacket to Respect Windows SSO

research | 2024-01-11 13:08 | swarm.ptsecurity.com | Original ↗ | .md | #kerberos | #red-team | #impacket

687.

BEERUS.APK - Spotlighting sandbox exfiltration

research | 2023-12-27 12:00 | yokai.hakaisecurity.io | Original ↗ | .md | #cloud | #vulnerability-research | #insights

688.

Finding that one weird endpoint, with Bambdas

research | 2023-12-12 14:11 | portswigger.net | Original ↗ | .md | #burp-suite | #information-disclosure | #bambdas

689.

Optimizing Render Performance in React with Hooks: A Deep Dive into useMemo and useCallback

research | 2023-12-13 02:36 | hackerone.com | Original ↗ | .md | #performance | #javascript | #react

690.

When Cryptographers Want to Lose Weight

research | 2023-12-12 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #cryptography

← Previous More →