Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 28)

811.

Digging into the OCI Image Specification

research | 2022-11-23 23:00 | blog.quarkslab.com | Original ↗ | .md | #linux | #containers | #oci

812.

Maillon Faible": DG'Hack CTF 2022 write-up

research | 2022-11-25 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #ctf | #software-security

813.

Purple Team Tips and Tricks: Revisiting Kerberos Enum

research | 2022-11-21 23:29 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #kerberos | #insights

814.

Stealing passwords from infosec Mastodon - without bypassing CSP

research | 2022-11-16 11:49 | portswigger.net | Original ↗ | .md | #credential-theft | #web-security | #xss

815.

Pixel 6 Bootloader: Exploitation - Part III

research | 2022-11-15 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #exploitation | #software-security

816.

Getting Triage Right for Researchers

research | 2022-11-10 19:41 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #vulnerability-management | #bugcrowd

817.

Detecting web message misconfigurations for cross-domain credential theft

research | 2022-11-09 14:13 | portswigger.net | Original ↗ | .md | #burp-suite | #credential-theft | #dom-invader

818.

HTTP/3 connection contamination: an upcoming threat?

research | 2022-11-02 14:49 | portswigger.net | Original ↗ | .md | #web-security | #http2 | #reverse-proxy

819.

Widespread prototype pollution gadgets

research | 2022-10-28 13:04 | portswigger.net | Original ↗ | .md | #web-security | #prototype-pollution | #dom-invader

820.

Exploiting Static Site Generators: When Static Is Not Actually Static

research | 2022-10-28 00:00 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #web-security

821.

SQL Injection and XSS Vulnerability on Centreon

research | 2022-10-26 02:16 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #sql-injection | #xss

822.

Our favourite community contributions to the XSS cheat sheet

research | 2022-10-20 08:28 | portswigger.net | Original ↗ | .md | #xss | #community | #payloads

823.

BÁO CÁO TÌNH HÌNH NGUY CƠ ATTT QUÝ 3 NĂM 2022 - VIETTEL THREAT INTELLIGENCE

research | 2022-10-19 10:22 | blog.viettelcybersecurity.com | Original ↗ | .md | #threat-intelligence | #cybersecurity | #viettel

824.

Internship Offers for the 2022-2023 Season

research | 2022-10-16 22:00 | blog.quarkslab.com | Original ↗ | .md | #fuzzing | #reverse-engineering | #security-research

825.

Chiến dịch phishing các ngân hàng tại Việt Nam

research | 2022-10-10 09:00 | blog.viettelcybersecurity.com | Original ↗ | .md | #threat-intelligence | #phishing | #social-engineering

826.

Pixel 6 bootloader: Emulation, ROP - Part II

research | 2022-10-04 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #software-security | #rop

827.

Bypassing Web Cache Poisoning Countermeasures

research | 2022-09-29 07:36 | portswigger.net | Original ↗ | .md | #web-security | #cloudflare | #portswigger

828.

On Detection: Tactical to Functional

research | 2022-09-29 14:04 | specterops.io | Original ↗ | .md

829.

Making HTTP header injection critical via response queue poisoning

research | 2022-09-26 14:26 | portswigger.net | Original ↗ | .md | #bug-bounty | #web-security | #proxy

830.

Quokka: A Fast and Accurate Binary Exporter

research | 2022-09-21 22:00 | blog.quarkslab.com | Original ↗ | .md | #open-source | #reverse-engineering | #binary-analysis

831.

7 Rules for Top-notch Web3 Bug Bounty Programs

research | 2022-09-21 16:05 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #web3 | #cryptocurrency

832.

HTTP Desync Attacks: what happened next

research | 2022-09-20 08:04 | CVE-2019-16276 | portswigger.net | Original ↗ | .md | #http-desync | #request-smuggling | #vulnerability

833.

The seventh way to call a JavaScript function without parentheses

research | 2022-09-18 17:20 | portswigger.net | Original ↗ | .md | #web-security | #javascript | #tagged-templates

834.

Jetty Features for Hacking Web Apps

research | 2022-09-15 14:14 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #java | #waf-bypass

835.

It pays to be Circomspect

research | 2022-09-15 04:00 | blog.trailofbits.com | Original ↗ | .md | #vulnerability | #static-analysis | #blockchain

836.

Breaking Bitbucket: Pre Auth Remote Command Execution (CVE-2022-36804)

research | 2022-09-14 00:00 | CVE-2022-36804 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #pre-auth

837.

Retrieve the drive letter from a device name on Windows

research | 2022-09-13 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #windows | #tooling

838.

Fork Bomb for Flutter

research | 2022-09-08 12:56 | swarm.ptsecurity.com | Original ↗ | .md | #reverse-engineering | #frida | #flutter

839.

Evading defences using VueJS script gadgets

research | 2022-09-07 09:05 | portswigger.net | Original ↗ | .md | #xss | #waf-bypass | #csp-bypass

840.

Finding DOM Polyglot XSS in PayPal the Easy Way

research | 2022-09-07 09:04 | portswigger.net | Original ↗ | .md | #bug-bounty | #dom-invader | #dom-xss

← Previous More →