Curated security research, vulnerabilities, advisories and tools for practitioners.

vulnerability coverage

Curated vulnerability security coverage. (Page 9)

241.

LeftoverLocals: Listening to LLM responses through leaked GPU local memory

vulnerability | 2024-01-16 17:00 | CVE-2023-4969 | blog.trailofbits.com | original ↗ | #ai-security | #llm | #gpu

242.

It’s 2024 and Over 178,000 SonicWall Firewalls are Publicly Exploitable

vulnerability | 2024-01-15 00:00 | bishopfox.com | original ↗ | #rce | #attack-surface | #denial-of-service

243.

How Coordinated Vulnerability Disclosure Can Boost Election Integrity and Public Perception

vulnerability | 2024-01-04 17:29 | hackerone.com | original ↗ | #vulnerability-disclosure | #policy | #election-security

244.

Preventing SQL Injection in Golang

vulnerability | 2024-01-03 04:35 | hackerone.com | original ↗ | #secure-coding | #sql-injection | #web-security

245.

SEGA and SIX Group: The Value of VDP and Bug Bounty

vulnerability | 2023-12-20 13:12 | hackerone.com | original ↗ | #bug-bounty | #vdp | #hackerone

246.

GWT: Unpatched, Unauthenticated Java Deserialization

vulnerability | 2023-12-18 00:00 | bishopfox.com | original ↗ | #rce | #web-framework | #gwt

247.

Vulnerability Disclosure Program or Managed Bug Bounty: How to Determine which Program is Best for You

vulnerability | 2023-12-15 08:00 | bugcrowd.com | original ↗ | #bug-bounty | #crowdsourced-security | #vdp

248.

9 rules for a successful first-time Bug Bounty Program

vulnerability | 2023-12-14 13:23 | yeswehack.com | original ↗ | #bug-bounty | #triage | #best-practices

249.

The Tale of Google’s Response to Reptar CPU Vulnerability

vulnerability | 2023-12-12 00:00 | CVE-2023-23583 | bughunters.google.com | original ↗ | #google | #intel | #cpu-vulnerability

250.

The Reptar CPU Vulnerability

vulnerability | 2023-12-06 00:00 | bughunters.google.com | original ↗ | #vulnerability-research | #google | #reptar

251.

Secure Markdown Rendering in React: Balancing Flexibility and Safety

vulnerability | 2023-12-01 06:13 | hackerone.com | original ↗ | #web-security | #xss | #react

252.

Announcing Our Latest Vulnerability Rating Taxonomy Update

vulnerability | 2023-11-27 16:00 | bugcrowd.com | original ↗ | #bug-bounty | #cryptography | #idor

253.

Assessing the security posture of a widely used vision model: YOLOv7

vulnerability | 2023-11-15 15:15 | blog.trailofbits.com | original ↗ | #rce | #open-source | #denial-of-service

254.

Vulnerability Prioritization: Severity Does Not Mean Priority

vulnerability | 2023-11-14 17:27 | hackerone.com | original ↗ | #bug-bounty | #appsec | #vulnerability-management

255.

DOJO Challenge #28 Winners!

vulnerability | 2023-11-14 15:47 | yeswehack.com | original ↗ | #bug-bounty | #rce | #ctf

256.

Exploiting Windows Kernel Wild Copy With User Fault Handling (CVE-2023–28218)

vulnerability | 2023-11-09 15:00 | CVE-2023-28218 | theori.io | original ↗ | #exploit | #windows-kernel | #heap-overflow

257.

2024 Budget Planning: Preparing For U.S. Mandates to Implement Vulnerability Disclosure Policies (VDPs)

vulnerability | 2023-11-09 17:12 | hackerone.com | original ↗ | #compliance | #iot | #vdp

258.

Continuous Threat Exposure Management: Unify your Offsec Strategy with YesWeHack

vulnerability | 2023-11-09 08:31 | yeswehack.com | original ↗ | #attack-surface | #ctem | #exposure-management

259.

The issue with ATS in Apple’s macOS and iOS

vulnerability | 2023-10-30 12:00 | CVE-2023-38596 | blog.trailofbits.com | original ↗ | #macos | #ios | #apple

260.

MetaMask Snaps: playing in the sand

vulnerability | 2023-11-01 00:00 | osec.io | original ↗ | #vulnerability | #javascript | #browser-extension

261.

Building an Exploit for FortiGate Vulnerability CVE-2023-27997

vulnerability | 2023-10-27 00:00 | CVE-2023-27997 | bishopfox.com | original ↗ | #exploit-development | #heap-overflow | #fortinet

262.

Numbers turned weapons: DoS in Osmosis’ math library

vulnerability | 2023-10-23 18:27 | blog.trailofbits.com | original ↗ | #smart-contracts | #denial-of-service | #vulnerability-disclosure

263.

vulnerability | 2023-10-17 00:00 | aikido.dev | original ↗ | #ai-security | #cloud | #vulnerability-management

264.

CVE-2023-38545 high severity vulnerability in cURL: everything you need to know

vulnerability | 2023-10-11 16:56 | CVE-2023-38545 | wiz.io | original ↗ | #cloud-security | #vulnerability | #patching

265.

DOJO Challenge #27 Winners!

vulnerability | 2023-10-09 13:27 | yeswehack.com | original ↗ | #bug-bounty | #ctf | #xss

266.

A Watchguard Vulnerability That's a "Feature" - GuardLapse

vulnerability | 2023-10-08 06:07 | projectblack.io | original ↗ | #active-directory | #smb | #sso

267.

Critical and high severity Exim vulnerabilities: everything you need to know

vulnerability | 2023-10-02 13:53 | CVE-2023-42115 | wiz.io | original ↗ | #rce | #vulnerability | #patching

268.

How to use AI and Automation for Ethical Hacking and Vulnerability Assessment

vulnerability | 2023-10-02 00:00 | ethiack.com | original ↗ | #ai-security | #automation | #llm

269.

Don’t overextend your Oblivious Transfer

vulnerability | 2023-09-20 12:00 | blog.trailofbits.com | original ↗ | #cryptography | #vulnerability | #threshold-signatures

270.

Why You Need a Vulnerability Disclosure Program (VDP)

vulnerability | 2023-09-18 00:36 | projectblack.io | original ↗ | #cloud | #vdp | #vulnerability-disclosure

← Previous More →