Curated security research, vulnerabilities, advisories and tools for practitioners.

vulnerability coverage

Curated vulnerability security coverage. (Page 11)

301.

Critical or Clickbait: GitHub Actions and Apache Tomcat RCE Vulnerabilities 2025

vulnerability | 2025-03-21 20:09 | CVE-2025-30066 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #apache

302.

CVE-2024-53991 - Discourse Backup Disclosure: Rails send_file Quirk

vulnerability | 2025-03-20 11:29 | CVE-2024-53991 | projectdiscovery.io | Original ↗ | .md | #bug-bounty

303.

Container Scanning & Vulnerability Management

vulnerability | 2025-03-20 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #vulnerability-management | #secrets

304.

Tomcat CVE-2025-24813: What You Need to Know

vulnerability | 2025-03-18 00:00 | CVE-2025-24813 | bishopfox.com | Original ↗ | .md | #rce | #deserialization | #vulnerability

305.

Safe harbor and the future of AI flaw reporting: Lessons from vulnerability disclosure

vulnerability | 2025-03-13 18:26 | bugcrowd.com | Original ↗ | .md | #ai-security | #cloud | #ai-safety

306.

Automate and Accelerate Vulnerability Management with HackerOne & ServiceNow

vulnerability | 2025-03-12 17:34 | hackerone.com | Original ↗ | .md | #vulnerability-management | #automation | #servicenow

307.

US House passes bill mandating vulnerability disclosure policies for federal contractors

vulnerability | 2025-03-11 13:33 | yeswehack.com | Original ↗ | .md | #cisa | #vdp | #vulnerability-disclosure

308.

Amplify automates security testing with ProjectDiscovery’s precision

vulnerability | 2025-03-11 16:54 | projectdiscovery.io | Original ↗ | .md | #bug-bounty

309.

CVE-2024-28989: Weak Encryption Key Management in Solar Winds Web Help Desk

vulnerability | 2025-03-10 00:00 | CVE-2024-28989 | netspi.com | Original ↗ | .md | #encryption | #solarwinds | #aes-gcm

310.

A no-BS Docker security checklist for the vulnerability-minded developer

vulnerability | 2025-03-06 00:00 | aikido.dev | Original ↗ | .md | #container-security | #privilege-escalation | #docker

311.

Sitecore: Unsafe Deserialisation Again! (CVE-2025-27218)

vulnerability | 2025-03-06 00:00 | CVE-2025-27218 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research

312.

How ConnectWise streamlined vulnerability detection with ProjectDiscovery

vulnerability | 2025-03-04 18:59 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud | #aws

313.

GigaVulnerability: readout protection bypass on GigaDevice GD32 MCUs

vulnerability | 2025-02-27 15:07 | swarm.ptsecurity.com | Original ↗ | .md | #hardware-security | #gigadevice | #gd32

314.

Ivanti Endpoint Manager – Multiple Credential Coercion Vulnerabilities

vulnerability | 2025-02-19 10:00 | CVE-2024-10811 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #ivanti

315.

First analysis of Apple's USB Restricted Mode bypass (CVE-2025-24200)

vulnerability | 2025-02-13 23:00 | CVE-2025-24200 | blog.quarkslab.com | Original ↗ | .md | #reverse-engineering | #ios | #vulnerability

316.

Nginx/Apache Path Confusion to Auth Bypass in PAN-OS (CVE-2025-0108)

vulnerability | 2025-02-12 00:00 | CVE-2025-0108 | slcyber.io | Original ↗ | .md | #zero-day | #vulnerability-research | #auth-bypass

317.

Vulnerability management reboot sought, CISOs more influential in boardroom, Trump’s cyber overhaul – OffSec roundup for CISOs

vulnerability | 2025-02-07 15:49 | yeswehack.com | Original ↗ | .md | #ai-security | #vulnerability-management | #red-teaming

318.

Welcome, Hackbots: How AI Is Shaping the Future of Vulnerability Discovery

vulnerability | 2025-02-03 18:27 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #automation

319.

How Paddle Strengthened Its Security Posture with ProjectDiscovery

vulnerability | 2025-01-30 16:55 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #attack-surface | #compliance

320.

Crafting DAST Nuclei Templates for OOB Template Engines Injection: A Practical Guide

vulnerability | 2025-01-22 07:14 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud

321.

Super-charging Bug Bounty Hunting with the Power of AI

vulnerability | 2025-01-17 00:00 | ethiack.com | Original ↗ | .md | #ai-security | #bug-bounty | #reconnaissance

322.

Your Client Requires NIS2 Vulnerability Patching. Now What?

vulnerability | 2025-01-14 00:00 | aikido.dev | Original ↗ | .md | #vulnerability-management | #compliance | #nis2

323.

LDAPNightmare Explained

vulnerability | 2025-01-13 21:04 | CVE-2024-49113 | semperis.com | Original ↗ | .md | #rce | #denial-of-service | #windows

324.

Critical Vulnerabilities in SimpleHelp Remote Support Software

vulnerability | 2025-01-13 20:04 | CVE-2024-1708 | horizon3.ai | Original ↗ | .md | #vulnerability-research

325.

Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)

vulnerability | 2025-01-11 17:23 | CVE-2024-50603 | wiz.io | Original ↗ | .md | #cloud | #rce | #aws

326.

Capturing the Flags of the Internet: Find 0-days in OSS and write scanners to detect them

vulnerability | 2025-01-08 00:00 | bughunters.google.com | Original ↗ | .md | #zero-day | #open-source | #google

327.

Time Travel Debugging vs. Traditional Debuggers

vulnerability | 2025-01-10 00:00 | CVE-2020-15999 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

328.

CVE-2025-0282 and CVE-2025-0283: Critical Ivanti 0days Exploited in the Wild

vulnerability | 2025-01-09 14:23 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #vpn

329.

Exploiting Second Order SQL Injection with Stored Procedures

vulnerability | 2024-12-22 00:00 | netspi.com | Original ↗ | .md | #sql-injection | #second-order | #oob

330.

Celebrating 2024: Securing your infrastructure with ProjectDiscovery

vulnerability | 2024-12-19 00:10 | projectdiscovery.io | Original ↗ | .md | #bug-bounty | #cloud

← Previous More →