Curated security research, vulnerabilities, advisories and tools for practitioners.

vulnerability coverage

Curated vulnerability security coverage. (Page 24)

691.

AirDroid: How Much Do Your Apps Know?

vulnerability | 2015-04-15 00:00 | bishopfox.com | original ↗ | #android | #mobile-security | #authentication

692.

The Wolves of Vuln Street - The First System Dynamics Model of the 0day Market

vulnerability | 2015-04-14 13:41 | hackerone.com | original ↗ | #bug-bounty | #research | #hackerone

693.

What's in a Name?

vulnerability | 2015-02-26 13:22 | hackerone.com | original ↗ | #community | #history | #vulnerability-disclosure

694.

Proposed Changes to the Computer Fraud and Abuse Act, Austin Powers, and You

vulnerability | 2015-01-16 13:17 | hackerone.com | original ↗ | #cloud | #vulnerability-disclosure | #hackerone

695.

The Tale of the Privacy Pink Panther

vulnerability | 2015-01-05 13:08 | hackerone.com | original ↗ | #privacy | #encryption | #opinion

696.

Jingle Bugs - How to Rock in a Hard Place

vulnerability | 2014-12-26 12:57 | hackerone.com | original ↗ | #year-in-review | #shellshock | #vulnerability-disclosure

697.

Vulnerability in Kerberos Allows Elevation of Privilege

vulnerability | 2014-11-19 19:16 | CVE-2014-6324 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

698.

Abusing Samsung KNOX to remotely install a malicious application: story of a half patched vulnerability

vulnerability | 2014-11-10 23:00 | blog.quarkslab.com | original ↗ | #android | #mobile-security | #exploit

699.

Introducing Reputation

vulnerability | 2014-10-28 12:39 | hackerone.com | original ↗ | #bug-bounty | #product-update | #hackerone

700.

Introducing Javelin

vulnerability | 2014-02-24 13:44 | blog.trailofbits.com | original ↗ | #threat-detection | #attack-simulation | #announcement

701.

Authentication Bypass

vulnerability | 2013-08-19 00:00 | bugcrowd.com | original ↗ | #pentesting | #burp-suite | #authentication-bypass

702.

Elderwood and the Department of Labor Hack

vulnerability | 2013-05-13 16:00 | blog.trailofbits.com | original ↗ | #zero-day | #apt | #threat-analysis

703.

Ending the Love Affair with ExploitShield

vulnerability | 2012-10-29 15:36 | blog.trailofbits.com | original ↗ | #zero-day | #appsec | #windows

704.

Oracle WebLogic Node Manager allows arbitrary configuration via UNC path

vulnerability | 2010-10-12 00:00 | bishopfox.com | original ↗ | #advisory | #oracle | #weblogic

705.

[MoBP] Bespoke vulnerability advisories

vulnerability | 2008-11-21 07:30 | portswigger.net | original ↗ | #burp-suite | #xss | #vulnerability-scanning

706.

[MoBP] Passive vulnerability scanning

vulnerability | 2008-11-19 08:03 | portswigger.net | original ↗ | #burp-suite | #information-disclosure | #vulnerability-scanning

707.

Book review: Cross Site Scripting Attacks

vulnerability | 2007-07-04 19:56 | portswigger.net | original ↗ | #web-security | #xss | #portswigger

708.

Barriers to automation 1 - vulnerability scanners

vulnerability | 2007-05-22 23:24 | portswigger.net | original ↗ | #automation | #sql-injection | #web-security

709.

On-site request forgery

vulnerability | 2007-05-03 08:09 | portswigger.net | original ↗ | #web-security | #xss | #portswigger

710.

Exploiting XSS in POST requests

vulnerability | 2007-03-29 18:21 | portswigger.net | original ↗ | #web-security | #xss | #portswigger