Curated security research, vulnerabilities, advisories and tools for practitioners.

vulnerability coverage

Curated vulnerability security coverage. (Page 15)

421.

Hafnium Attack Timeline

vulnerability | 2021-05-05 15:13 | semperis.com | original ↗ | #zero-day | #active-directory | #web-shell

422.

How HackerOne Helps the Vulnerability Management Process

vulnerability | 2021-04-29 19:40 | hackerone.com | original ↗ | #vulnerability-management | #cve | #triage

423.

Remote Denial-of-Service on CycloneTCP : CVE-2021-26788

vulnerability | 2021-04-12 22:00 | CVE-2021-26788 | blog.quarkslab.com | original ↗ | #denial-of-service | #fuzzing | #embedded

424.

Analysis of a Windows IPv6 Fragmentation Vulnerability: CVE-2021-24086

vulnerability | 2021-04-06 22:00 | CVE-2021-24086 | blog.quarkslab.com | original ↗ | #denial-of-service | #windows | #vulnerability

425.

VRT v1.10 Released: Flash downgrades and extended automotive categorization

vulnerability | 2021-03-30 00:00 | bugcrowd.com | original ↗ | #bugcrowd | #vrt | #vulnerability-rating

426.

YesWeHack Tracker 2.1 – it’s all about communication and collaboration

vulnerability | 2021-03-25 15:06 | yeswehack.com | original ↗ | #cloud | #vulnerability-management | #devsecops

427.

The Ultimate Guide to Finding and Escalating XSS Bugs

vulnerability | 2021-03-25 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #xss

428.

DOJO CHALLENGE #7 Winners!

vulnerability | 2021-03-12 10:44 | yeswehack.com | original ↗ | #ctf | #xss | #prototype-pollution

429.

ProxyLogon (CVE-2021-26855): 2021’s Top Contender for Vulnerability for the Year (It’s March...)

vulnerability | 2021-03-10 00:00 | CVE-2021-26855 | bishopfox.com | original ↗ | #zero-day | #ssrf | #proxylogon

430.

PimpMyBurp #3 – AutoRepeater: add automation to your beautiful hunter life

vulnerability | 2021-03-10 13:35 | yeswehack.com | original ↗ | #bug-bounty | #burp-suite | #automation

431.

Big Bugs: Bitbucket Pipelines Kata Containers Build Container Escape

vulnerability | 2021-03-01 00:00 | CVE-2020-28914 | bugcrowd.com | original ↗ | #container-security | #container-escape | #cve-2020-28914

432.

The Rise of Misconfiguration and Supply Chain Vulnerabilities

vulnerability | 2021-02-26 04:51 | hackerone.com | original ↗ | #supply-chain | #cloud-security | #solarwinds

433.

Unauthorized RCE in VMware vCenter

vulnerability | 2021-02-24 17:11 | swarm.ptsecurity.com | original ↗ | #rce | #vulnerability-research | #vmware

434.

How to Find XXE Bugs: Severe, Missed and Misunderstood

vulnerability | 2021-02-19 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #web-security

435.

PimpMyBurp #2 – Auth Analyzer : How to test horizontal and vertical privileges escalation

vulnerability | 2021-02-17 13:38 | yeswehack.com | original ↗ | #bug-bounty | #burp-suite | #privilege-escalation

436.

Ship Innovative Software Faster with YesWeHack Tracker 2.0

vulnerability | 2021-02-09 15:38 | yeswehack.com | original ↗ | #cloud | #vulnerability-management | #devsecops

437.

Hacker Spotlight: Interview with hazimaslam

vulnerability | 2021-02-05 15:00 | hackerone.com | original ↗ | #bug-bounty | #xss | #pakistan

438.

How a Common Misconfiguration Led to Over 30 Critical Findings

vulnerability | 2021-02-02 00:00 | bishopfox.com | original ↗ | #attack-surface | #sql-injection | #penetration-testing

439.

Moving on from Active Directory Red Forest

vulnerability | 2021-01-25 19:47 | semperis.com | original ↗ | #active-directory | #microsoft | #privileged-access

440.

Bad Pods: Kubernetes Pod Privilege Escalation

vulnerability | 2021-01-19 00:00 | bishopfox.com | original ↗ | #cloud-security | #kubernetes | #container-security

441.

Mautic Version <=3.2.2 Advisory

vulnerability | 2021-01-15 00:00 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

442.

CRAN Version 4.0.2 Advisory

vulnerability | 2021-01-11 00:00 | CVE-2020-27637 | bishopfox.com | original ↗ | #supply-chain | #path-traversal | #advisory

443.

DOJO CHALLENGE #6 Winners!

vulnerability | 2020-12-22 11:11 | yeswehack.com | original ↗ | #ctf | #sql-injection | #web-security

444.

Hacker Spotlight: Interview with benteveo

vulnerability | 2020-12-18 17:00 | hackerone.com | original ↗ | #bug-bounty | #rce | #open-source

445.

Breaking Aave Upgradeability

vulnerability | 2020-12-16 16:01 | blog.trailofbits.com | original ↗ | #smart-contracts | #defi | #vulnerability-disclosure

446.

The World’s Largest Live Hacking Event

vulnerability | 2020-12-14 15:00 | hackerone.com | original ↗ | #bug-bounty | #hackerone | #virtual-event

447.

VDPs are at the Heart of the Australian Cyber Security Centre’s Recommendations

vulnerability | 2020-12-08 16:20 | hackerone.com | original ↗ | #vdp | #vulnerability-disclosure | #policy

448.

DOJO CHALLENGE #3 Winners!

vulnerability | 2020-11-25 13:22 | yeswehack.com | original ↗ | #ctf | #xss | #training

449.

US Government Mandates Vulnerability Disclosure for IoT

vulnerability | 2020-11-23 20:25 | hackerone.com | original ↗ | #iot | #vdp | #vulnerability-disclosure

450.

Vulnerability Disclosure Policy through the eyes of a bug hunter

vulnerability | 2020-11-23 15:53 | yeswehack.com | original ↗ | #bug-bounty | #vdp | #vulnerability-disclosure

← Previous More →