Vulnerability Research

Explore recommended reads, summarized by AI

Vulnerability Discovery and Exploitation

Technical accounts of finding, analyzing, and exploiting security flaws in software and hardware systems.

CVE Discovery and Exploit Development

Popular this week

In

InfoSec Write-ups

by

julichaan

When a Single Text File Breaks a Trust Boundary (Bug Bounty writeup)

In

System Weakness

by

Sanketh Subhas

PHP2Shell Explained: How a PHP Memory Error Became Remote Code Execution

Beri Contraster

CVE-2026–98432: Linux Kernel TCP Use-After-Free RCE

ZXVE

*sshole: The 257-Character Password That Opened Locked SSH Accounts

In

GovTech Singapore

by

Hazley Samsudin

AETHER in the loop: Integrating AI-powered copilot into Agentic RE pipeline for vulnerability…

Latest stories

Santosh Kumar Puppala

retrieve said 403. history_detail said 200. (Objects API, CVE-2026-82411)

KRISHNAPRASAD T

PHP2Shell: Understanding Two Critical PHP Vulnerabilities and Their Security Impact

Albert Lab

PHP2Shell(CVE-2026–109618 and CVE-2026–109619): Everything You Need to Know (and Debug) Part 1…

Beri Contraster

CVE-2026–98432: Linux Kernel TCP Use-After-Free RCE

In

System Weakness

by

Sanketh Subhas

PHP2Shell Explained: How a PHP Memory Error Became Remote Code Execution

See more stories

Who to follow

Popular this week

In

InfoSec Write-ups

by

julichaan

When a Single Text File Breaks a Trust Boundary (Bug Bounty writeup)

In

System Weakness

by

Sanketh Subhas

PHP2Shell Explained: How a PHP Memory Error Became Remote Code Execution

Beri Contraster

CVE-2026–98432: Linux Kernel TCP Use-After-Free RCE

ZXVE

*sshole: The 257-Character Password That Opened Locked SSH Accounts

In

GovTech Singapore

by

Hazley Samsudin

AETHER in the loop: Integrating AI-powered copilot into Agentic RE pipeline for vulnerability…

Latest stories

Santosh Kumar Puppala

retrieve said 403. history_detail said 200. (Objects API, CVE-2026-82411)

KRISHNAPRASAD T

PHP2Shell: Understanding Two Critical PHP Vulnerabilities and Their Security Impact

Albert Lab

PHP2Shell(CVE-2026–109618 and CVE-2026–109619): Everything You Need to Know (and Debug) Part 1…

Beri Contraster

CVE-2026–98432: Linux Kernel TCP Use-After-Free RCE

In

System Weakness

by

Sanketh Subhas

PHP2Shell Explained: How a PHP Memory Error Became Remote Code Execution

See more stories

Who to follow