The last proof of human craft: forging a Microsoft Edge full chain with logic bugs only!
24
votes
Showing only topics in ~comp with the tag "vulnerabilities".
Back to normal view /
Search all groups
-
-
PHP warns it plans to release two emergency patches imminently
73 votes -
Class of QUIC vulnerabilities across implementations allows QPACK amplification attacks against HTTP/3 servers
5 votes -
Critical GitLab flaw (CVSS 10.0) could allow unauthenticated RCE across twelve years of releases
18 votes -
A theory of prompt injection (and why you should study roles)
27 votes -
Mythos finds a curl vulnerability
31 votes -
Curl will end its bug bounty program by the end of January due to excessive AI generated reports
63 votes -
Adversaries leverage AI for vulnerability exploitation, augmented operations, and initial access
5 votes -
AI is breaking two vulnerability cultures
19 votes -
Behind the scenes hardening Firefox with Claude Mythos Preview
20 votes -
Linux privilege escalation (CVE-2026-31431)
49 votes -
Synthesizing multi-agent harnesses for vulnerability discovery
9 votes -
Goodbye innerHTML, hello setHTML: stronger XSS protection in Firefox 148
19 votes -
Copilot broke your audit log, but Microsoft won’t tell you
38 votes -
iOS Denial of Service via Darwin notifications
11 votes -
Next.js and the corrupt middleware: the authorizing artifact
20 votes -
How I hacked my company's SSO provider
18 votes -
Too many people don’t value the time of security researchers
22 votes -
This GitHub profile has a custom background
31 votes -
GitHub Issues Patch for Critical Exploit in Enterprise Server
8 votes -
Critical vulnerability in Rust's Command library allows for command injection when using its API to invoke batch scripts with arguments on Windows systems (CVE-2024-24576)
18 votes -
Hertzbleed - a new family of frequency side channel attacks on x86 processors
13 votes -
The lead developer of curl analyzed its known security vulnerabilities and determined that half of them are related to it being written in C
12 votes -
Finding vulnerabilities in the calling state machines of video/audio messaging platforms
3 votes -
Intel Publishes Microcode Security Patches, No Benchmarking Or Comparison Allowed!
12 votes