Curated security research, vulnerabilities, advisories and tools for practitioners.

vulnerability coverage

Curated vulnerability security coverage. (Page 11)

301.

Level Up Your Bug Bounty Effectiveness: 3 Keys to Launch a Successful Program

vulnerability | 2023-02-23 17:00 | hackerone.com | original ↗ | #bug-bounty | #risk-management | #best-practices

302.

What Does Belgium’s New Legal Framework On Hacking Mean For Me?

vulnerability | 2023-02-23 14:00 | hackerone.com | original ↗ | #vulnerability-disclosure | #policy | #ethical-hacking

303.

Escaping misconfigured VSCode extensions

vulnerability | 2023-02-21 13:00 | CVE-2022-41042 | blog.trailofbits.com | original ↗ | #vulnerability-research | #xss | #path-traversal

304.

What the Vuln: Zimbra

vulnerability | 2023-02-21 00:00 | bishopfox.com | original ↗ | #rce | #vulnerability-research | #path-traversal

305.

Server side prototype pollution, how to detect and exploit

vulnerability | 2023-02-15 16:19 | yeswehack.com | original ↗ | #bug-bounty | #vulnerability-research | #web-security

306.

DOJO CHALLENGE #21 Winners!

vulnerability | 2023-02-14 14:20 | yeswehack.com | original ↗ | #bug-bounty | #access-control | #sql-injection

307.

Beyond a VDP: How a Challenge Brings Proactive Security to Your Agency

vulnerability | 2023-01-31 14:00 | hackerone.com | original ↗ | #bug-bounty | #cisa | #vdp

308.

MyBB <= 1.8.31: Remote Code Execution Chain

vulnerability | 2023-01-25 13:47 | swarm.ptsecurity.com | original ↗ | #rce | #sql-injection | #postgresql

309.

PimpMyBurp #7: How HaE Burp Suite extension can help you in your daily hunting session

vulnerability | 2023-01-18 16:48 | yeswehack.com | original ↗ | #bug-bounty | #pentesting | #burp-suite

310.

CVE-2022-47966 SAML ShowStopper

vulnerability | 2023-01-19 03:52 | CVE-2022-47966 | blog.viettelcybersecurity.com | original ↗

311.

CVE-2022-21587 (Oracle E-Business Suite Unauthenticated RCE)

vulnerability | 2023-01-16 08:13 | CVE-2022-21587 | blog.viettelcybersecurity.com | original ↗ | #rce

312.

Keeping the wolves out of wolfSSL

vulnerability | 2023-01-12 13:00 | blog.trailofbits.com | original ↗ | #fuzzing | #cryptography | #tls

313.

Vulnerability Disclosure Policy as a first step of GfK’s crowdsourced security strategy

vulnerability | 2023-01-11 16:56 | yeswehack.com | original ↗ | #bug-bounty | #crowdsourced-security | #vdp

314.

TP-Link TL-WR940N: 1-days analysis after story. (CVE-2022-43636 & CVE-2022-43635)

vulnerability | 2022-12-26 02:53 | blog.viettelcybersecurity.com | original ↗

315.

How I gave ManticoreUI a makeover

vulnerability | 2022-12-15 13:00 | blog.trailofbits.com | original ↗ | #vulnerability | #tooling | #program-analysis

316.

FlowscreenComponents Basepack, Version 3.0.7 Advisory

vulnerability | 2022-12-15 00:00 | bishopfox.com | original ↗ | #web-security | #xss | #vulnerability

317.

Manticore GUIs made easy

vulnerability | 2022-12-13 13:00 | blog.trailofbits.com | original ↗ | #web3 | #ghidra | #research

318.

160K COVID-19 Records: Vulnerability in Avicena Medical Laboratory

vulnerability | 2022-12-09 00:00 | bishopfox.com | original ↗ | #vulnerability-research | #access-control | #data-exposure

319.

Log HTTP Requests, Version 1.3.1, Advisory

vulnerability | 2022-11-21 00:00 | CVE-2022-3402 | bishopfox.com | original ↗ | #web-security | #wordpress | #xss

320.

Introducing Program Levels: Hacker-friendly Practices that Improve Program Results

vulnerability | 2022-11-16 17:00 | hackerone.com | original ↗ | #bug-bounty | #vulnerability-disclosure | #best-practices

321.

Look out! Divergent representations are everywhere!

vulnerability | 2022-11-10 12:30 | blog.trailofbits.com | original ↗ | #vulnerability-research | #program-analysis | #compilers

322.

Juniper SSLVPN / JunOS RCE and Multiple Vulnerabilities

vulnerability | 2022-10-28 08:30 | pwn.ai | original ↗ | #rce | #xss | #deserialization

323.

Stranger Strings: An exploitable flaw in SQLite

vulnerability | 2022-10-25 11:30 | CVE-2022-35737 | blog.trailofbits.com | original ↗ | #memory-safety | #cve | #vulnerability-disclosure

324.

Turnkey VDP Open Source: making a difference in enhancing cybersecurity as a “public good”

vulnerability | 2022-10-25 08:27 | yeswehack.com | original ↗ | #open-source | #cybersecurity-policy | #vdp

325.

The State of Vulnerabilities in 2022

vulnerability | 2022-10-19 00:00 | bishopfox.com | original ↗ | #bug-bounty | #vulnerability-management | #gitlab

326.

How to secure against Forced Browsing

vulnerability | 2022-09-22 00:00 | josephthacker.com | original ↗ | #access-control | #web-security | #vulnerability

327.

Exploiting Web3's Hidden Attack Surface: Universal XSS on Netlify's Next.js Library

vulnerability | 2022-09-21 00:00 | samcurry.net | original ↗ | #web3 | #xss | #nextjs

328.

Introducing Unified HackerOne Scope Management with Burp Suite Support

vulnerability | 2022-09-15 22:00 | hackerone.com | original ↗ | #bug-bounty | #burp-suite | #tooling

329.

Các lỗ hổng mới liên tục xuất hiện trên Zimbra - Phần II

vulnerability | 2022-09-07 11:30 | CVE-2022-30333 | blog.viettelcybersecurity.com | original ↗

330.

Linux Kernel Exploit (CVE-2022–32250) with mqueue

vulnerability | 2022-08-23 15:00 | CVE-2022-32250 | theori.io | original ↗ | #use-after-free | #linux-kernel | #exploit

← Previous More →