Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 32)

931.

Cisco Hyperflex: How We Got RCE Through Login Form and Other Findings

research | 2021-09-29 13:57 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #vulnerability-research | #cve

932.

On the road to bring cybersecurity to medical devices

research | 2021-09-28 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #cybersecurity | #medical-devices

933.

Hunting nonce-based CSP bypasses with dynamic analysis

research | 2021-09-17 14:00 | portswigger.net | Original ↗ | .md | #xss | #burp-scanner | #dynamic-analysis

934.

Introducing QBDL: how to run the NVIDIA NGX SDK under Linux

research | 2021-08-30 22:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #pe | #qbdl

935.

Exploiting GraphQL

research | 2021-08-29 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #api-security | #exploitation

936.

Product Updates from our CTO

research | 2021-08-27 19:53 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #product-update | #announcement

937.

North Korean BLUELIGHT Special: InkySquid Deploys RokRAT

research | 2021-08-24 15:43 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #apt

938.

Nguy cơ lộ lọt thông tin cá nhân NGHIÊM TRỌNG do các loại mã độc đánh cắp thông tin - Oski Malware

research | 2021-08-04 03:48 | blog.viettelcybersecurity.com | Original ↗ | .md | #threat-intelligence | #credential-theft | #malware-analysis

939.

A virtual journey: From hardware virtualization to Hyper-V's Virtual Trust Levels

research | 2021-07-28 22:00 | blog.quarkslab.com | Original ↗ | .md | #windows | #reverse-engineering | #virtualization

940.

Hello Rewind, meet world

research | 2021-07-19 22:00 | blog.quarkslab.com | Original ↗ | .md | #vulnerability-research | #fuzzing | #windows-kernel

941.

Evading CSP with DOM-based dangling markup

research | 2021-07-19 07:19 | portswigger.net | Original ↗ | .md | #browser-security | #xss | #portswigger

942.

Guided tour inside WinDefender’s network inspection driver

research | 2021-07-12 22:00 | blog.quarkslab.com | Original ↗ | .md | #microsoft | #reverse-engineering | #kernel

943.

alert() is dead, long live print()

research | 2021-07-05 10:03 | portswigger.net | Original ↗ | .md | #xss | #poc | #chrome

944.

Our Position on the Digital Millennium Copyright Act (DMCA) and the Need to Safeguard Tools for Responsible Security Researchers

research | 2021-06-23 00:00 | bishopfox.com | Original ↗ | .md | #reverse-engineering | #security-research | #policy

945.

ANNOUNCING HACK THE ARMY 3.0 RESULTS: A CONVERSATION WITH DEFENSE DIGITAL SERVICE, U.S. ARMY, AND HACK THE ARMY 3.0’S TOP HACKER

research | 2021-06-10 22:21 | hackerone.com | Original ↗ | .md | #bug-bounty | #defense | #hackerone

946.

SCOTUS CFAA Ruling: What does it mean for pen testers and security?

research | 2021-06-04 00:00 | bishopfox.com | Original ↗ | .md | #security-research | #penetration-testing | #policy

947.

HACK HARD. HAVE FUN. INCREASE SECURITY

research | 2021-06-04 17:12 | hackerone.com | Original ↗ | .md | #bug-bounty | #zero-day | #hackerone

948.

Unearthing Z͌̈́̾a͊̈́l͊̿g̏̉͆o̾̚̚S̝̬ͅc̬r̯̼͇ͅi̼͖̜̭͔p̲̘̘̹͖t̠͖̟̹͓͇ͅ with visual fuzzing

research | 2021-06-02 13:11 | portswigger.net | Original ↗ | .md | #fuzzing | #portswigger | #javascript

949.

Guide to P-code Injection: Changing the intermediate representation of code on the fly in Ghidra

research | 2021-06-02 14:37 | swarm.ptsecurity.com | Original ↗ | .md | #reverse-engineering | #ghidra | #research

950.

Creating a Ghidra processor module in SLEIGH using V8 bytecode as an example

research | 2021-05-27 14:48 | swarm.ptsecurity.com | Original ↗ | .md | #reverse-engineering | #ghidra | #research

951.

Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns

research | 2021-05-27 14:21 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing

952.

Patch Gapping a Safari Type Confusion

research | 2021-05-24 15:00 | theori.io | Original ↗ | .md | #ios | #exploit | #type-confusion

953.

Decompiling Node.js in Ghidra

research | 2021-05-20 15:18 | swarm.ptsecurity.com | Original ↗ | .md | #reverse-engineering | #ghidra | #research

954.

RFID: Monotonic Counter Anti-Tearing Defeated

research | 2021-05-17 22:00 | blog.quarkslab.com | Original ↗ | .md | #hardware-security | #rfid | #nfc

955.

How we bypassed bytenode and decompiled Node.js bytecode in Ghidra

research | 2021-05-13 16:03 | swarm.ptsecurity.com | Original ↗ | .md | #reverse-engineering | #ghidra | #v8

956.

Audit of Session Secure Messaging Application

research | 2021-04-28 22:00 | blog.quarkslab.com | Original ↗ | .md | #cryptography | #privacy | #audit

957.

From 0 to RCE: Cockpit CMS

research | 2021-04-13 12:48 | CVE-2020-35846 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #vulnerability-research | #cve

958.

nOtWASP bottom 10: vulnerabilities that make you cry

research | 2021-04-07 14:07 | portswigger.net | Original ↗ | .md | #bug-bounty | #pentesting | #appsec

959.

Contextual Content Discovery: You've forgotten about the API endpoints

research | 2021-04-05 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research | #recon | #content-discovery

960.

Hidden OAuth attack vectors

research | 2021-03-25 14:49 | portswigger.net | Original ↗ | .md | #user-enumeration | #ssrf | #oauth

← Previous More →