|
About the Write-ups and Disclosures category
|
|
0
|
884
|
February 5, 2021
|
|
Policy Pulse - Week of July 18, 2026 | Issue #25
|
|
0
|
18
|
July 19, 2026
|
|
Best practices for vulnerability disclosure in real time video platforms
|
|
1
|
10
|
July 19, 2026
|
|
Policy Pulse - Week of July 11, 2026 | Issue #24
|
|
0
|
21
|
July 12, 2026
|
|
Shittrix — 89 vulnerabilities in Citrix XenServer / XCP-ng, day-0 disclosure
|
|
0
|
25
|
May 3, 2026
|
|
TCP Hijacking Proof of Concept
|
|
0
|
122
|
October 24, 2024
|
|
Discord Remote Code Execution Proof of Concept
|
|
0
|
232
|
July 9, 2024
|
|
Steam Remote Code Execution
|
|
0
|
292
|
June 27, 2024
|
|
Hacker Sick Codes says cybersecurity in agtech is no game after viral John Deere tractor hack
|
|
1
|
510
|
March 23, 2024
|
|
Actual P2P OTR Client
|
|
0
|
586
|
August 29, 2023
|
|
PNG Php Encoding Malware PoC
|
|
0
|
527
|
August 29, 2023
|
|
Responsible Disclosure of Security Vulnerability identified on a Huloop.ai
|
|
1
|
542
|
August 18, 2023
|
|
Google Dork SSL Bypassing For Auto Dorking
|
|
0
|
859
|
July 21, 2023
|
|
Android - Bypass Setup Screen - Samsung & LG & FRP & Reactivation Lock Removal
|
|
0
|
2975
|
July 6, 2023
|
|
Discord Has Some Issues
|
|
0
|
423
|
October 28, 2022
|
|
Windows LFI > RFI Zero Day
|
|
0
|
990
|
October 25, 2022
|
|
Windows 10 -11 Injection Zero Day
|
|
0
|
847
|
October 25, 2022
|
|
Zero Click PoC with One Drive Uri Callback
|
|
0
|
1069
|
October 24, 2022
|
|
A New Jailbreak for John Deere Tractors Rides the Right-to-Repair Wave
|
|
0
|
441
|
August 26, 2022
|
|
CVE-2021-38701 - Avigilon Multiple IP Camera Stored Cross-Site Scripting
|
|
0
|
1326
|
October 23, 2021
|
|
Multiple Severe Vulnerabilities in MonkeyType.Com | Chat Based XSS, Auth bypass, User Spoofing
|
|
0
|
2525
|
September 9, 2021
|
|
Universal “netmask” npm package, used by 270,000+ projects, vulnerable to octal input data: server-side request forgery, remote file inclusion, local file inclusion, and more (CVE-2021-28918)
|
|
0
|
1177
|
March 29, 2021
|
|
A brief history of vulnerability disclosure and bug bounty - Awesome three-part series by @DFisher
|
|
0
|
617
|
September 6, 2021
|
|
CVE-2021-35956 AKCP sensorProbe - 'Multiple' Cross Site Scripting (XSS)
|
|
3
|
1688
|
August 28, 2021
|
|
CVE-2021-22929 - Brave Browser 1.27 and below permanently logs the server connection time for all v2 tor domains to ~/.config/BraveSoftware /Brave-Browser/tor/data/tor.log
|
|
1
|
982
|
August 17, 2021
|
|
New report on coordinated vulnerability disclosure in Canada
|
|
0
|
789
|
July 19, 2021
|
|
Recent macOS Threat Research I've been looking at
|
|
1
|
744
|
June 1, 2021
|
|
Researchers hacked Indian govt sites via exposed git and env files
|
|
1
|
759
|
May 19, 2021
|
|
Ubuntu Privilege Escalation: Exploiting Crash Handlers by Itai Greenhut from Aleph Security
|
|
0
|
714
|
February 16, 2021
|
|
CVE-2020-27388: YOURLS 1.5 - 1.7.10, Multiple Stored Cross Site Scripting (XSS) Vulnerabilities in Admin Panel
|
|
0
|
1520
|
February 5, 2021
|