Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 8)

211.

Fixing ESC4 - User has dangerous permissions

research | 2026-04-30 23:32 | projectblack.io | Original ↗ | .md | #remediation | #active-directory | #hardening

212.

Thinking in Graphs with IPAHound

research | 2026-04-30 09:01 | swarm.ptsecurity.com | Original ↗ | .md | #attack-chains | #active-directory | #red-team

213.

Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool

research | 2026-04-29 22:00 | blog.quarkslab.com | Original ↗ | .md | #cloud-security | #active-directory | #entra-id

214.

Extending Ruzzy with LibAFL

research | 2026-04-29 11:00 | blog.trailofbits.com | Original ↗ | .md | #appsec | #ruby | #fuzzing

215.

Finding and Exploiting a 21-Year-Old Vulnerability in PHP

research | 2026-05-01 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #php | #exploitation

216.

Turning Dynamic Analysis into an AI Problem

research | 2026-04-30 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #software-security

217.

In-Depth Research on the Telegram Escrow Market: Platform Evolution, Ecosystem Structure, and Regulatory Challenges

research | 2026-04-29 13:00 | certik.com | Original ↗ | .md | #web3 | #research | #blockchain-security

218.

[CVE-2026-34621] Three Bugs Walk Into a PDF: Prototype Pollution, Served Cold

research | 2026-04-29 00:00 | CVE-2026-34621 | starlabs.sg | Original ↗ | .md | #vulnerability-research | #prototype-pollution | #pdf

219.

Cracking a Ring3/Ring0 Key Validator with Time-Travel Debugging

research | 2026-04-28 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #software-security

220.

QEMU and UTM Escape

research | 2026-04-28 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #virtualization | #vm-escape

221.

RCE in Ladybird

research | 2026-04-24 00:00 | calif.io | Original ↗ | .md | #rce | #vulnerability-research | #browser

222.

We Benchmarked Opus 4.7 on Vulnerability Validation. Here's What We Found.

research | 2026-04-21 18:50 | hackerone.com | Original ↗ | .md | #ai-security | #benchmark | #claude

223.

Hackers are using AI. Here's what you need to know.

research | 2026-04-22 00:00 | eshard.com | Original ↗ | .md | #ai-security | #vulnerability-research | #reverse-engineering

224.

[CVE-2026-28825] An Apple Kernel Bug, Brought to You by Microsoft

research | 2026-04-22 00:00 | CVE-2026-28825 | calif.io | Original ↗ | .md | #vulnerability-research | #apple | #kernel

225.

All Your Reverse Engineering Tools Are Belong to US

research | 2026-04-21 00:00 | calif.io | Original ↗ | .md | #rce | #supply-chain | #vulnerability-research

226.

The Frontier Isn’t the Model: Why ‘Good Enough’ Reasoning + Scaffolding Is More Important

research | 2026-04-16 16:18 | theori.io | Original ↗ | .md | #ai-security | #zero-day | #agentic-ai

227.

Obfuscation vs the Optimizer: An LLVM Middle-End Arms Race

research | 2026-04-15 22:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #obfuscation | #llvm

228.

Hacker spotlight: Meet Satyam Pathania

research | 2026-04-16 12:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #community | #hardware-hacking

229.

Beyond the Perimeter How an On-Premises Domain Admin Compromise Unlocked the Cloud

research | 2026-04-17 11:55 | labs.cognisys.group | Original ↗ | .md | #cloud | #cloud-security | #active-directory

230.

Slowburn: Looking through AMD Platform Configuration Blobs infrastructure

research | 2026-04-15 14:30 | swarm.ptsecurity.com | Original ↗ | .md | #hardware-security | #reverse-engineering | #firmware

231.

Multiple Cross-Site Scripting (XSS) Vulnerabilities in Mailcow

research | 2026-04-17 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #account-takeover | #xss

232.

cat readme.txt" is not safe in iTerm2

research | 2026-04-17 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #macos | #terminal-security

233.

Into The Rainbow: Google’s NTLMv1 Rainbow Tables Explained in a Bit Too Much Detail

research | 2026-04-16 16:00 | specterops.io | Original ↗ | .md

234.

We Asked Claude to Audit Sagredo's qmail. It found a RCE.

research | 2026-04-16 00:00 | calif.io | Original ↗ | .md | #ai-security | #rce | #vulnerability-research

235.

BSIM explained once and for all!

research | 2026-04-13 22:00 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #ghidra | #tooling

236.

AI Made Code Cheap. Trust Did Not.

research | 2026-04-13 15:56 | theori.io | Original ↗ | .md | #ai-security | #appsec | #software-security

237.

Learning to Jailbreak an iPhone with Claude (Part 1)

research | 2026-04-15 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #mobile-security | #ios

238.

LibreNMS < 26.3.0 Authenticated RCE & XSS

research | 2026-04-13 10:24 | projectblack.io | Original ↗ | .md | #rce | #web-security | #xss

239.

Codex Hacked a Samsung TV

research | 2026-04-13 00:00 | calif.io | Original ↗ | .md | #vulnerability-research | #codex | #lpe

240.

How Xint’s Predictable Pricing Solves the Token Burn Problem for AI in AppSec

research | 2026-04-09 21:32 | theori.io | Original ↗ | .md | #ai-security | #pricing | #code-analysis

← Previous More →