Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 26)

751.

eShard and PQShield securing the future of Cryptography

research | 2023-05-11 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #cryptography | #post-quantum

752.

Bypass IIS Authorisation with this One Weird Trick - Three RCEs and Two Auth Bypasses in Sitecore 9.3

research | 2023-05-10 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #microsoft

753.

Introducing TritonDSE: A framework for dynamic symbolic execution in Python

research | 2023-05-01 22:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #binary-analysis | #python

754.

esReven 2023.04 is out!

research | 2023-05-02 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #reverse-engineering

755.

Ambushed by AngularJS: a hidden CSP bypass in Piwik PRO

research | 2023-04-28 12:31 | portswigger.net | Original ↗ | .md | #web-security | #dom-xss | #csp-bypass

756.

Advisory: Oracle Opera Pre-Auth RCE (CVE-2023-21932)

research | 2023-04-30 00:00 | CVE-2023-21932 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #advisory

757.

Android greybox fuzzing with AFL++ Frida mode

research | 2023-04-26 22:00 | blog.quarkslab.com | Original ↗ | .md | #fuzzing | #android | #instrumentation

758.

A Deep Dive on Katana "Field" Extraction

research | 2023-04-27 19:23 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #red-team

759.

Advisory: Reflected Cross-Site Scripting in cPanel (CVE-2023-29489)

research | 2023-04-26 00:00 | CVE-2023-29489 | slcyber.io | Original ↗ | .md | #vulnerability-research | #xss | #advisory

760.

NEAT and NES Algorithms

research | 2023-04-20 15:00 | theori.io | Original ↗ | .md | #cryptography | #reverse-engineering | #block-cipher

761.

HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)

research | 2023-04-20 04:00 | hackerone.com | Original ↗ | .md | #security-research | #vulnerability-disclosure | #policy

762.

Guest article: solving a flare-on challenge with esReven

research | 2023-04-20 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ctf | #reverse-engineering

763.

Báo cáo Tình hình nguy cơ An toàn thông tin Quý 1 năm 2023

research | 2023-04-10 03:02 | blog.viettelcybersecurity.com | Original ↗ | .md | #threat-intelligence | #cybersecurity | #viettel

764.

Privilege escalation in AWS Elastic Kubernetes Service

research | 2023-04-02 00:00 | calif.io | Original ↗ | .md | #cloud | #aws | #vulnerability-research

765.

A gentle introduction to Microsoft OMI and how to crash it

research | 2023-03-30 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #fuzzing | #microsoft

766.

PicoCTF: Power Analysis Challenges

research | 2023-03-31 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ctf | #hardware-security

767.

The curl quirk that exposed Burp Suite & Google Chrome

research | 2023-03-28 13:13 | portswigger.net | Original ↗ | .md | #burp-suite | #vulnerability-research | #web-security

768.

3CX Supply Chain Compromise Leads to ICONIC Incident

research | 2023-03-30 11:37 | volexity.com | Original ↗ | .md | #supply-chain | #vulnerability-research | #threat-intelligence

769.

Server-side prototype pollution: Black-box detection without the DoS

research | 2023-03-28 09:50 | portswigger.net | Original ↗ | .md | #web-security | #prototype-pollution | #detection

770.

PicoCTF: SRA Challenge

research | 2023-03-28 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ctf | #hardware-security

771.

Our Pwn2Own journey against time and randomness (part 1)

research | 2023-03-23 23:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #firmware | #vulnerability

772.

Exploiting prototype pollution in Node without the filesystem

research | 2023-03-23 15:00 | portswigger.net | Original ↗ | .md | #rce | #web-security | #prototype-pollution

773.

Audit of Falco, the open-source cloud-native runtime security

research | 2023-03-21 23:00 | blog.quarkslab.com | Original ↗ | .md | #cloud | #kubernetes | #fuzzing

774.

2022 MVP Winner Roundup

research | 2023-03-21 15:20 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #community | #bugcrowd

775.

What does the EU Cyber Resilience Act (CRA) mean for connected device manufacturers?

research | 2023-03-22 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #compliance | #hardware-security

776.

BÁO CÁO TÌNH HÌNH NGUY CƠ ATTT NĂM 2022 - VIETTEL THREAT INTELLIGENCE

research | 2023-03-15 04:32 | blog.viettelcybersecurity.com | Original ↗ | .md | #threat-intelligence | #cybersecurity | #annual-report

777.

Researcher Spotlight: bl3ep

research | 2023-03-08 18:58 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #red-team | #community

778.

Using Memory Analysis to Detect EDR-Nullifying Malware

research | 2023-03-07 11:01 | volexity.com | Original ↗ | .md | #vulnerability-research | #malware | #memory-forensics

779.

MCUBoot Under (good) Pressure | Part 1: Walk Around the Code

research | 2023-03-03 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #hardware-security

780.

Reconnaissance like a cyber scout - Part 3. Final.

research | 2023-02-21 04:10 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #research

← Previous More →