Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 6)

151.

CVE-2026-45454 — Microsoft SharePoint Server Upload Page Folder Path Traversal to Remote Code Execution

research | 2026-06-10 00:00 | CVE-2026-45454 | aretiq.ai | Original ↗ | .md | #rce | #path-traversal | #sharepoint

152.

User-to-User Authentication: Down the Rabbit Hole – Part 1

research | 2026-06-09 16:00 | specterops.io | Original ↗ | .md

153.

Introducing priority queue bypass: A new way to recognize top hackers

research | 2026-06-08 12:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #bug-bounty | #bugcrowd

154.

Old Wine in a New Bottle: A Decade-Old lxd-Group Root, Re-Armed

research | 2026-06-09 00:00 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #linux | #privilege-escalation

155.

A Beginner’s Guide to Solidity: Key Concepts and Practical Tips

research | 2026-06-08 14:01 | hackenproof.com | Original ↗ | .md | #web3 | #smart-contracts | #defi

156.

How to Read Any Smart Contract Project Without Getting Lost

research | 2026-06-08 13:47 | hackenproof.com | Original ↗ | .md | #web3 | #smart-contracts | #code-review

157.

5 Solidity Patterns That Pass Code Review But Fail in Production

research | 2026-06-08 13:40 | hackenproof.com | Original ↗ | .md | #web3 | #vulnerability-research | #smart-contracts

158.

From Zero Python to Building AI Agents That Hunt Bugs For You

research | 2026-06-08 13:31 | hackenproof.com | Original ↗ | .md | #ai-security | #bug-bounty | #web3

159.

OOBdump: Relocation Oriented Programming

research | 2026-06-08 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #exploitation | #binary-exploitation

160.

The Click that shouldn’t have worked: RCE via clickjacking in Internet Explorer

research | 2026-06-05 11:18 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #windows | #clickjacking

161.

CVE-2026-28318 — SolarWinds Serv-U HTTP Deflate Uncontrolled Resource Consumption

research | 2026-06-07 00:00 | CVE-2026-28318 | aretiq.ai | Original ↗ | .md | #rce | #vulnerability | #cve

162.

From prompt to pwned: chaining LLM and web bugs to Admin

research | 2026-06-04 22:00 | blog.quarkslab.com | Original ↗ | .md | #ai-security | #web-security | #red-team

163.

"Practical Android Software Protection in the Wild" - An Appetizer

research | 2026-06-03 22:00 | blog.quarkslab.com | Original ↗ | .md | #malware | #android | #reverse-engineering

164.

CVE-2026-3593 — ISC BIND 9 DNS-over-HTTPS HTTP/2 SETTINGS Use-After-Free

research | 2026-06-05 00:00 | CVE-2026-3593 | aretiq.ai | Original ↗ | .md | #vulnerability-research | #denial-of-service | #use-after-free

165.

VerdantBamboo: Just Another BRICKSTORM in the Firewall

research | 2026-06-04 20:23 | volexity.com | Original ↗ | .md | #cloud | #vulnerability-research | #threat-intelligence

166.

21 Zero-Days in FFmpeg

research | 2026-06-02 12:00 | depthfirst.com | Original ↗ | .md | #rce | #zero-day | #memory-safety

167.

Quantum Computing Threats to the Blockchain Industry

research | 2026-06-03 18:00 | certik.com | Original ↗ | .md | #web3 | #cryptography | #post-quantum

168.

Scala Security Audit

research | 2026-05-31 22:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #vulnerability-research | #fuzzing

169.

Pwning Minecraft: 4-byte heap overflow to RCE

research | 2026-06-02 12:00 | osec.io | Original ↗ | .md | #rce | #exploit | #memory-corruption

170.

Codex Discovered a Hidden HTTP/2 Bomb

research | 2026-06-02 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #codex | #http2

171.

CVE-2026-8206 — Themeum Kirki WordPress Plugin Password Reset Email Redirect Privilege Escalation

research | 2026-06-02 00:00 | CVE-2026-8206 | aretiq.ai | Original ↗ | .md | #appsec | #vulnerability-research | #account-takeover

172.

Webinar: Exploiting Physical Vulnerabilities of Keccak in PQC

research | 2026-06-01 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #hardware-security | #post-quantum-cryptography

173.

WAF Bypasses via h2 framing

research | 2026-06-01 00:00 | lab.ctbb.show | Original ↗ | .md | #supply-chain | #plugins | #security

174.

[CVE-2026-41091] RedSun: Exploiting Windows Defender's Remediation Workflow

research | 2026-06-01 00:00 | CVE-2026-41091 | calif.io | Original ↗ | .md | #vulnerability-research | #windows | #exploitation

175.

CVE-2026-48866 — WordPress Gravity Forms Plugin File Upload Path Traversal Arbitrary File Deletion

research | 2026-06-01 00:00 | CVE-2026-48866 | aretiq.ai | Original ↗ | .md | #vulnerability-research | #web-security | #wordpress

176.

CVE-2026-48827 — Apache MINA SSHD sshd-git Path Traversal Info Disclosure

research | 2026-06-01 00:00 | CVE-2026-48827 | aretiq.ai | Original ↗ | .md | #git | #vulnerability-research | #data-exposure

177.

Navigating the AI Wave: How We're Keeping Security Research Meaningful

research | 2026-05-29 17:01 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #triage

178.

Race Against The Patch: The Evolution of Four Exploit Chains in LiteLLM

research | 2026-05-29 00:00 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #ai-infrastructure | #pwn2own

179.

An AI audit of FreeBSD

research | 2026-05-28 00:00 | calif.io | Original ↗ | .md | #ai-security | #vulnerability-research | #claude

180.

Device Code Phishing: Technical Analysis and Proactive Hunting via Netlas

research | 2026-05-28 00:00 | netlas.io | Original ↗ | .md | #threat-hunting | #phishing | #oauth

← Previous More →