51 stories tagged vulnerability-disclosure, newest first.
5 points by theanonymousone | 0 comments
Tailworm is a security assessment report detailing multiple vulnerabilities in Tailscale v1.104.2 and headscale v0.29.5, including SSH socket-forwarding races and wormable spread.
227 points by cubefox | 98 comments
AWS Security Blog post reporting that Amazon's MadPot honeypots saw PHP2Shell exploitation attempts four days before public disclosure, with IOCs and recommended actions.
395 points by artooro | 92 comments
GitLab's critical patch release notes for versions 19.5.1 and backports, fixing a CVSS 10.0 regex compiler integer overflow RCE and other security issues.
50 points by mpaepper | 17 comments
A Mastodon thread by security researcher Elise describing a newly found PHP double-free vulnerability affecting 8.4 and 8.5, reported to [email protected] with details withheld.
761 points by ejohnso49 | 394 comments
PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.
253 points by nr378 | 183 comments
OpenAI post describing its Patch the Planet initiative coordinating disclosure and fixes for critical PHP vulnerabilities found with AI models, and proposing a response framework.
4 points by razorsa | 0 comments
A HackerOne vulnerability report about a SQL injection on an ibm.com subdomain; the page shows a HackerOne sign-in prompt.
97 points by torcete | 23 comments
Release notes for OpenSSH 10.6, noting many AI-assisted security bug reports, more frequent releases, and an upcoming deprecation of scp's -R flag.
83 points by timbill | 11 comments
GitHub issue in net4people/bbs where a reporter alleges Xray-core maintainers concealed a certificate verification bypass vulnerability for half a year.
287 points by luispa | 120 comments
A security researcher's blog post describing a Microsoft internal analytics service flaw where unchecked token signatures allowed admin access to query 17.3 trillion records.
134 points by perone | 65 comments
Blog post by Christian S. Perone recounting a 2020 vulnerability he found in a Brazilian federal system that exposed personal data on any Brazilian citizen.
140 points by lostmsu | 54 comments
Radicle's security disclosure describing two critical vulnerabilities in the network protocol used by Radicle nodes, affecting all released versions.
370 points by avsm | 117 comments
Blog post by Anil Madhavapeddy on how AI agents can find exploits from just the rumour of a bug, after a cohttp path traversal fix, and how OSS security disclosure must change.
526 points by colesantiago | 173 comments
Security researcher blog post describing a misconfigured Firestore database at meeting recorder tl;dv that exposed 181,874 meetings, still unfixed six months after reporting.
352 points by hipparchus | 181 comments
Blog post by security engineer and bug bounty hunter Joel Margolis examining what has changed at the bug bounty platform HackerOne.
690 points by ymir_e | 342 comments
JFrog Security Research blog post examining whether recently published critical SQLite CVEs are real vulnerabilities or LLM-generated slop reports.
337 points by miniBill | 115 comments
CERT/CC Vulnerability Note VU#213560 reporting a hidden authentication backdoor in multiple versions of Tenda device firmware.
631 points by javxfps | 356 comments
A security researcher's blog post describing a vulnerability that allowed leaking YouTube creators' private videos.
918 points by binyu | 364 comments
GitHub repository 'exploitarium' archiving public exploit PoCs and writeups for reportedly unreported vulnerabilities in software like 7-Zip, AnyDesk, c-ares, Docker, FFmpeg, and Firefox.
358 points by goranmoomin | 204 comments
Blog post by Filippo Valsorda arguing that vulnerability reports no longer deserve special treatment from open source maintainers.
464 points by possibilistic | 218 comments
Tom's Hardware news article reporting that GitHub banned a security researcher who posted Windows zero-day exploits and threatened further retaliation against Microsoft.
358 points by chizhik-pyzhik | 199 comments
Mailing list post by dnsmasq maintainer Simon Kelley announcing six CERT CVEs for long-standing dnsmasq vulnerabilities and a patched 2.92rel2 release.
403 points by speckx | 160 comments
Jeff Kaufman blog post on how AI acceleration strains both coordinated-disclosure and Linux's 'bugs are bugs' vulnerability cultures, using the Copy Fail bug as an example.
785 points by flipped | 310 comments
An oss-security mailing list post disclosing "Dirty Frag," a Linux local privilege escalation chaining two kernel bugs, released unpatched after the embargo broke.
565 points by ori_b | 477 comments
An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.
1261 points by unsnap_biceps | 448 comments
Disclosure site for Copy Fail (CVE-2026-31431), a Linux kernel logic-flaw local privilege escalation exploitable by a 732-byte Python script on distros since 2017.
343 points by MrBruh | 144 comments
Blog post describing a remote code execution vulnerability found by decompiling AMD's AutoUpdate software, which AMD declined to fix.
373 points by jnord | 206 comments
Elektroniktidningen news article reporting that the cURL project is ending its bug bounty program.
406 points by CyberShadow | 135 comments
Security advisory describing an unauthenticated remote code execution vulnerability in the OpenCode AI coding assistant's local HTTP server, fixed in later versions.
456 points by fuck_flock | 147 comments
Nexanet threat intel blog post reporting that Flock Safety hardcoded a password 53 times across its surveillance infrastructure software.
1080 points by hackermondev | 397 comments
A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.
324 points by sangeeth96 | 204 comments
React team blog post disclosing two new denial-of-service and source code exposure vulnerabilities in React Server Components, found while probing the React2Shell patch.
752 points by bearsyankees | 258 comments
A blog post describing how the author found an unauthenticated API flaw in Filevine's legal AI tool exposing 100k+ confidential files, with a disclosure timeline.
348 points by ramimac | 135 comments
Blog post by Joshua Rogers describing security issues he reported in Okta's auth0/nextjs-auth0 library, including an OAuth parameter injection, and the AI-slop handling of his fix.
590 points by galnagli | 138 comments
Ian Carroll's blog post describing bugs in FIA systems that allowed access to Formula 1 drivers' personal data, including Max Verstappen's passport.
897 points by redbell | 431 comments
A HackerOne vulnerability report page, apparently an AI-generated bug report rejected by maintainers; the content had not loaded when captured.
391 points by BobDaHacker | 203 comments
A security researcher blog post describing how an authentication bypass in Restaurant Brands International systems exposed Burger King drive-thru audio recordings.
706 points by Sayrus | 261 comments
Blog post from Pistachio describing how Microsoft 365 Copilot could access files without leaving audit log records, and Microsoft's decision not to notify customers.
442 points by bearsyankees | 265 comments
A blog post by a security researcher describing vulnerabilities found in a dating app and the startup's poor handling of the disclosure.
1062 points by xyzeva | 268 comments
A security researcher's blog post describing how a Firebase misconfiguration in ToDesktop, an Electron app bundler used by Cursor and others, allowed code execution on millions of users.
836 points by mooreds | 144 comments
Blog post by Sean Kahler describing how he ethically found a vulnerability enabling takeover of 700 million Electronic Arts accounts.
352 points by udev4096 | 173 comments
Security blog post disclosing that qBittorrent's DownloadManager ignored SSL certificate errors for 14 years, enabling remote code execution, fixed in version 5.0.1.
1542 points by mmsc | 400 comments
A GitHub Gist write-up by a 15-year-old bug hunter describing a Zendesk bug affecting many Fortune 500 companies that earned over $50,000 in bounties.
1859 points by iancarroll | 403 comments
Ian Carroll's blog post describing how a SQL injection flaw let researchers add arbitrary people to the TSA Known Crewmember program, bypassing airport security screening.
578 points by tprow50 | 170 comments
PromptArmor blog post describing an indirect prompt injection vulnerability in Slack AI that lets attackers exfiltrate data from private channels.
379 points by el_duderino | 120 comments
A blog post describing how the author found and exploited a cross-site scripting (XSS) vulnerability on chess.com.
386 points by EatonZ | 82 comments
Blog post describing how an Eicher Motors premium calculator site on a Toyota Tsusho Insurance Broker India subdomain leaked Microsoft email credentials exposing 657k customer emails.
988 points by MrBruh | 411 comments
A security researcher's blog post describing how exposed Firebase credentials at AI hiring vendor Chattr gave access to data across many US fast food chains.
445 points by danielwmayer | 145 comments
Blog post by Daniel Mayer describing an exploit in Magic: The Gathering Arena that forced opponents to auto-concede, giving a 100% win rate.
321 points by pseudotrash | 139 comments
News aggregator article reporting that a security.txt file is now mandatory for Dutch government websites.
394 points by jruohonen | 57 comments
A KU Leuven CiTiP blog post discussing Belgium's new legal framework legalising ethical hacking and whether it threatens or helps cybersecurity.