Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 7)

181.

XSS without HTML: Client-Side Template Injection with AngularJS

research | 2025-12-17 15:21 | portswigger.net | original ↗ | #appsec | #web-security | #xss

182.

Announcing Xint Code

research | 2025-12-16 00:43 | theori.io | original ↗ | #ai-security | #cloud | #rce

183.

Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaigns

research | 2025-12-17 00:00 | hunt.io | original ↗ | #supply-chain | #threat-intelligence | #malware

184.

A modern tale of blinkenlights

research | 2025-12-10 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #hardware-security | #reverse-engineering

185.

Orthanc 1.12.9 User Impersonation

research | 2025-12-09 00:53 | CVE-2025-15581 | projectblack.io | original ↗ | #appsec | #vulnerability-research | #vulnerability

186.

React2Shell: Technical Deep-Dive & In-the-Wild Exploitation of CVE-2025-55182

research | 2025-12-08 17:18 | CVE-2025-55182 | wiz.io | original ↗

187.

What Are Bug Bounties and How Do They Work?

research | 2025-12-04 17:00 | hackerone.com | original ↗ | #bug-bounty | #pentesting | #red-teaming

188.

Agent Capability Is a System Design Problem: Lessons From a 90% Improvement on CyberGym

research | 2025-11-24 00:00 | depthfirst.com | original ↗ | #ai-security | #benchmark | #ai-agents

189.

Prompt Injection Isn't a Vulnerability

research | 2025-11-24 00:00 | josephthacker.com | original ↗ | #ai-security | #bug-bounty | #appsec

190.

Esbuild's XSS Bug that Survived 5 Billion Downloads and Bypassed HTML Sanitization

research | 2025-11-20 00:00 | depthfirst.com | original ↗ | #supply-chain | #vulnerability-research | #xss

191.

Bitcoin Core audit

research | 2025-11-18 23:00 | blog.quarkslab.com | original ↗ | #web3 | #vulnerability-research | #cryptocurrency

192.

Remote Control Android from PC Using scrcpy

research | 2025-11-17 10:38 | projectblack.io | original ↗ | #android | #mobile-testing | #scrcpy

193.

Injection for an athlete

research | 2025-11-14 14:07 | swarm.ptsecurity.com | original ↗ | #android | #mobile-security | #firmware

194.

Introducing HTTP Anomaly Rank

research | 2025-11-11 14:41 | portswigger.net | original ↗ | #ai-security | #burp-suite | #web-security

195.

Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks

research | 2025-11-10 13:34 | wiz.io | original ↗ | #ai-security | #secrets | #github

196.

Kubevirt security audit

research | 2025-11-06 23:00 | blog.quarkslab.com | original ↗ | #kubernetes | #virtualization | #vulnerability

197.

EntraGoat Scenario 3: Exploiting Group Ownership in Entra ID

research | 2025-11-06 22:05 | semperis.com | original ↗ | #privilege-escalation | #entra-id | #attack-paths

198.

Critical RCE Vulnerability CVE-2025-11953 Puts React Native Developers at Risk

research | 2025-11-04 14:15 | CVE-2025-11953 | jfrog.com | original ↗ | #rce | #supply-chain | #npm

199.

ST4S Assessment

research | 2025-11-02 08:19 | projectblack.io | original ↗ | #compliance | #penetration-testing | #framework

200.

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

research | 2025-10-30 12:50 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #detection

201.

Firebase Security Fundamentals

research | 2025-10-21 04:04 | projectblack.io | original ↗ | #cloud-security | #access-control | #mobile-security

202.

Internship Offers for the 2025-2026 Season

research | 2025-10-19 22:00 | blog.quarkslab.com | original ↗ | #ai-security | #android | #reverse-engineering

203.

HTTP/1.1 must die: the desync endgame

research | 2025-10-17 10:13 | portswigger.net | original ↗ | #http-desync | #request-smuggling | #cloudflare

204.

JFrog AppTrust: A Technical Deep Dive into Building a Trusted Software Supply Chain

research | 2025-10-16 13:15 | jfrog.com | original ↗ | #supply-chain | #compliance | #jfrog

205.

How we broke exchanges: a deep dive into authentication and client-side bugs

research | 2025-10-16 12:00 | osec.io | original ↗ | #web3 | #account-takeover | #authentication

206.

Oops! It's a kernel stack use-after-free: Exploiting NVIDIA's GPU Linux drivers

research | 2025-10-13 22:00 | blog.quarkslab.com | original ↗ | #use-after-free | #exploitation | #linux-kernel

207.

Tales from the Trace: How Agentic AI Merges Static and Dynamic Testing

research | 2025-10-09 12:00 | xbow.com | original ↗ | #ai-security | #sql-injection | #sast

208.

BYOVD to the next level (part 2) — rootkit like it's 2025

research | 2025-10-08 22:00 | blog.quarkslab.com | original ↗ | #windows | #post-exploitation | #kernel

209.

AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies

research | 2025-10-09 00:00 | hunt.io | original ↗ | #threat-hunting | #c2 | #malware-analysis

210.

Triple Threat: Signal's Ratchet Goes Post-Quantum

research | 2025-10-06 22:00 | blog.quarkslab.com | original ↗ | #cryptography | #post-quantum | #ml-kem

← Previous More →