Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 8)

211.

Traccar Unauthenticated LFI v5.8-v6.8.1

research | 2025-10-01 11:28 | CVE-2025-61666 | projectblack.io | original ↗ | #lfi | #unauthenticated | #traccar

212.

Security review of PHP documentation

research | 2025-09-21 22:00 | blog.quarkslab.com | original ↗ | #php | #secure-coding | #documentation

213.

Stronger Together: Embracing AI as a Force Multiplier

research | 2025-09-19 13:45 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #security-research

214.

WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine

research | 2025-09-18 07:50 | portswigger.net | original ↗ | #burp-suite | #fuzzing | #prototype-pollution

215.

How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities

research | 2025-09-12 12:21 | portswigger.net | original ↗ | #bug-bounty | #interview | #workflow

216.

HTB CBBH Review - A Penetration Tester's Perspective

research | 2025-09-12 05:55 | projectblack.io | original ↗ | #pentesting | #certification | #web-security

217.

Bypassing Windows Login Without Password

research | 2025-09-12 05:55 | projectblack.io | original ↗ | #pentesting | #privilege-escalation | #windows

218.

Cookie Chaos: How to bypass __Host and __Secure cookie prefixes

research | 2025-09-03 14:46 | portswigger.net | original ↗ | #cookies | #asp-net | #unicode

219.

Server-Side Template Injection

research | 2025-09-03 07:38 | portswigger.net | original ↗ | #rce | #web-security | #template-injection

220.

Cracking the lens: targeting HTTP's hidden attack-surface

research | 2025-09-03 07:38 | portswigger.net | original ↗ | #bug-bounty | #attack-surface | #portswigger

221.

A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA

research | 2025-09-03 07:38 | portswigger.net | original ↗ | #black-hat | #conference | #research

222.

Practical Web Cache Poisoning

research | 2025-09-03 07:37 | portswigger.net | original ↗ | #burp-suite | #web-security | #portswigger

223.

HTTP Desync Attacks: Request Smuggling Reborn

research | 2025-09-03 07:37 | portswigger.net | original ↗ | #bug-bounty | #black-hat | #web-security

224.

Web Cache Entanglement: Novel Pathways to Poisoning

research | 2025-09-03 07:37 | portswigger.net | original ↗ | #black-hat | #web-security | #cdn

225.

HTTP/2: The Sequel is Always Worse

research | 2025-09-03 07:37 | portswigger.net | original ↗ | #black-hat | #web-security | #request-smuggling

226.

Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling

research | 2025-09-03 07:36 | portswigger.net | original ↗ | #black-hat | #web-security | #request-smuggling

227.

"The entire internet is broken": ethical hacking expert John Hammond meets James Kettle

research | 2025-08-27 09:11 | portswigger.net | original ↗ | #http-desync | #request-smuggling | #james-kettle

228.

Inline Style Exfiltration: leaking data with chained CSS conditionals

research | 2025-08-27 07:35 | portswigger.net | original ↗ | #chromium | #exfiltration | #css

229.

HackerOne Partners with IBM to Advance AI Protections for Granite Models

research | 2025-08-27 13:59 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #cloud

230.

8 Malicious npm Packages Deliver Multi-Layered Chrome Browser Information Stealer

research | 2025-08-27 15:26 | jfrog.com | original ↗ | #supply-chain | #npm | #obfuscation

231.

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

research | 2025-08-19 14:31 | portswigger.net | original ↗ | #burp-suite | #request-smuggling | #false-positives

232.

Marshal madness: A brief history of Ruby deserialization exploits

research | 2025-08-19 11:00 | blog.trailofbits.com | original ↗ | #ruby | #deserialization | #vulnerabilities

233.

A Fuzzy Escape - A tale of vulnerability research on hypervisors

research | 2025-08-18 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #fuzzing | #exploitation

234.

Vulnerability Discovery with LLM-Powered Patch Diffing

research | 2025-08-15 00:00 | bishopfox.com | original ↗ | #ai-security | #vulnerability-research | #automation

235.

Inside Grammarly’s AI-driven automation with the MCP Server for Wiz

research | 2025-08-14 15:46 | wiz.io | original ↗ | #ai-security | #mcp | #case-study

236.

EntraGoat Scenario 6: Exploiting Certificate-Based Authentication to Impersonate Global Admin in Entra ID

research | 2025-08-12 21:34 | semperis.com | original ↗ | #account-takeover | #privilege-escalation | #entra-id

237.

Building Effective LLM Agents | AI Cyber Challenge

research | 2025-08-08 19:28 | theori.io | original ↗ | #ai-security | #patching | #vulnerability-detection

238.

AI Cyber Challenge and Theori's RoboDuck

research | 2025-08-08 19:27 | theori.io | original ↗ | #ai-security | #open-source | #llm

239.

Inside the brain of a hacking robot: Exploring traces | AI Cyber Challenge

research | 2025-08-08 19:25 | theori.io | original ↗ | #ai-security | #vulnerability-discovery | #aixcc

240.

Salesforce Penetration Testing Fundamentals

research | 2025-08-07 03:56 | projectblack.io | original ↗ | #access-control | #penetration-testing | #salesforce

← Previous More →