Curated security research, vulnerabilities, advisories and tools for practitioners.

vulnerability coverage

Curated vulnerability security coverage. (Page 8)

211.

CVE-2024-4040 exploited in the wild: everything you need to know

vulnerability | 2024-04-24 16:15 | CVE-2024-4040 | wiz.io | original ↗ | #rce | #vulnerability | #patching

212.

AI vulnerability deep dive: Prompt injection

vulnerability | 2024-04-23 12:00 | bugcrowd.com | original ↗ | #ai-security | #prompt-injection | #vulnerability

213.

PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls

vulnerability | 2024-04-19 00:00 | CVE-2024-3400 | bishopfox.com | original ↗ | #rce | #palo-alto-networks | #globalprotect

214.

Chaining N-days to Compromise All: Part 4 — VMware Workstation Information leakage

vulnerability | 2024-04-17 15:00 | theori.io | original ↗ | #vmware | #bluetooth | #usb

215.

Dojo challenge #31 winners!

vulnerability | 2024-04-16 12:55 | yeswehack.com | original ↗ | #bug-bounty | #ctf | #dojo

216.

How a Race Condition Vulnerability Could Cast Multiple Votes

vulnerability | 2024-04-11 16:07 | hackerone.com | original ↗ | #web-security | #vulnerability | #research

217.

Chaining N-days to Compromise All: Part 3 — Windows Driver LPE: Medium to System

vulnerability | 2024-04-08 15:00 | theori.io | original ↗ | #privilege-escalation | #lpe | #windows-driver

218.

Secure Coding Practices: Mastering URL Encoding for Enhanced Web Security

vulnerability | 2024-04-08 06:30 | hackerone.com | original ↗ | #secure-coding | #web-security | #url-encoding

219.

XZ Utils CVE-2024-3094: A Tale of Broken Trust, Curious Persistence, and a Call to Action

vulnerability | 2024-04-01 16:00 | CVE-2024-3094 | hackerone.com | original ↗ | #supply-chain | #open-source | #linux

220.

Chaining N-days to Compromise All: Part 2 — Windows Kernel LPE (a.k.a Chrome Sandbox Escape)

vulnerability | 2024-03-31 15:00 | CVE-2023-21674 | theori.io | original ↗ | #use-after-free | #sandbox-escape | #windows-kernel

221.

Vulnerability Disclosure Policy Requirements for UK Smart Products

vulnerability | 2024-03-26 16:02 | hackerone.com | original ↗ | #compliance | #vulnerability-disclosure | #regulation

222.

Exploiting GLPI during a Red Team engagement

vulnerability | 2024-03-20 23:00 | blog.quarkslab.com | original ↗ | #php | #sql-injection | #red-team

223.

Logging: The Silent Security Guard and Its Pitfalls

vulnerability | 2024-03-21 02:35 | hackerone.com | original ↗ | #incident-response | #compliance | #best-practices

224.

Chaining N-days to Compromise All: Part 1 — Chrome Renderer RCE

vulnerability | 2024-03-17 15:00 | CVE-2023-3079 | theori.io | original ↗ | #rce | #exploit | #v8

225.

HackerOne’s In-Depth Approach to Vulnerability Triage and Validation

vulnerability | 2024-03-14 16:00 | hackerone.com | original ↗ | #bug-bounty | #appsec | #vdp

226.

Dojo challenge #30 winners!

vulnerability | 2024-03-12 12:38 | yeswehack.com | original ↗ | #rce | #ctf | #dojo

227.

Out of the kernel, into the tokens

vulnerability | 2024-03-08 14:00 | blog.trailofbits.com | original ↗ | #linux | #jwt | #vulnerability-disclosure

228.

How to write an effective Bug Bounty report

vulnerability | 2024-03-06 14:13 | yeswehack.com | original ↗ | #bug-bounty | #best-practices | #reporting

229.

Authentication bypass vulnerabilities in TeamCity: everything you need to know

vulnerability | 2024-03-06 16:49 | wiz.io | original ↗ | #cloud | #authentication-bypass | #jetbrains

230.

CVE-2024-21762 Vulnerability Scanner for FortiGate Firewalls

vulnerability | 2024-03-01 00:00 | CVE-2024-21762 | bishopfox.com | original ↗ | #patch-analysis | #ssl-vpn | #fortigate

231.

‘Be curious, be persistent’: Icare on thriving as a Bug Bounty hunter

vulnerability | 2024-03-01 09:07 | yeswehack.com | original ↗ | #bug-bounty | #rce | #interview

232.

Hai: The AI Assistant for Vulnerability Intelligence

vulnerability | 2024-02-27 16:30 | hackerone.com | original ↗ | #ai-security | #bug-bounty | #triage

233.

Preventing Directory Traversal Attacks: Techniques and Tips for Secure File Access

vulnerability | 2024-02-26 23:48 | hackerone.com | original ↗ | #web-security | #path-traversal | #hackerone

234.

Breaking the shared key in threshold signature schemes

vulnerability | 2024-02-20 14:30 | blog.trailofbits.com | original ↗ | #denial-of-service | #cryptography | #vulnerability-disclosure

235.

TensorFlow Threat Model and Security Guidelines Update

vulnerability | 2024-02-05 00:00 | bughunters.google.com | original ↗ | #bug-bounty | #machine-learning | #tensorflow

236.

Identifying and Remediating CWE-79: Cross-Site Scripting in ASP.NET

vulnerability | 2024-01-31 01:26 | hackerone.com | original ↗ | #web-security | #xss | #owasp

237.

Inside the Platform: Bugcrowd’s Vulnerability Trends Report

vulnerability | 2024-01-24 13:50 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #crowdsourced-security

238.

Identifying and Remediating CWE-328 Reversible One-Way Hash in Django Applications

vulnerability | 2024-01-24 07:55 | hackerone.com | original ↗ | #web-security | #python | #django

239.

Mitigating CWE-352: Cross-Site Request Forgery in Ruby Applications

vulnerability | 2024-01-23 06:38 | hackerone.com | original ↗ | #ruby | #web-security | #csrf

240.

Pass the Hash Attack Defense: AD Security 101

vulnerability | 2024-01-18 19:58 | semperis.com | original ↗ | #active-directory | #credential-theft | #ntlm

← Previous More →