Vulnerability Research RSS Feeds

Directory0 vulnerability research feeds · 26 articlesShow all languages →

Latest

Vulnerability Research articles

GitLost: Prompt Injection Vulnerability in GitHub Agentic Workflows Allows Private Repository Data Leakage

TL;DR: Noma Labs discovered a critical prompt injection vulnerability within GitHub’s new Agentic Workflows, allowing an unauthenticated attacker to silently pull data from private repositories by posting a crafted GitHub Issue in a public repository belo

Newstechnologysecurityprogramming

noma.security·Hacker News: Front Page·10d ago·5 min read

Critical Aptos Move VM Vulnerability Enables Arbitrary On-Chain Struct Hijacking via Stale Type-Tag Cache

Insighttechnologyprogramming

Shared by @lex_node ↗

hexens.io10d ago

PrintNightmare Exploit: How Windows Print Spooler Vulnerabilities Enable Domain Compromise

Insighttechnologysecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com13d ago

Security researcher details SYSTEM privilege escalation vulnerability in MSI Center software

Insighttechnologysecurity

mrbruh.com14d ago

How a Security Researcher Discovered 5 OPNsense Vulnerabilities Including a Critical RCE (CVE-2026-57155)

How I found 5 vulnerabilities and achieved Remote Code Execution in OPNsense after a week of security research (including CVE-2026-57155).

Insighttechnologycybersecurityprogramming

hackerask.com·Hacker News: Front Page·17d ago·10 min read

Exploitarium: A consolidated GitHub archive of public exploit PoCs and vulnerability research writeups

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand...

Codetechnologycybersecurityprogramming

github.com·Hacker News: Front Page·21d ago·3 min read

Check Point Researchers Chain SQL Injection in LangGraph AI Agent Memory to Achieve Remote Code Execution

CheckPoint-LangGraph RCE Chain: How a SQL Injection in AI Agent Memory Opens the Door to Full Server Takeover + Video - "Undercode Testing": Monitor hackers

Insighttechnologysecurityartificial intelligence

undercodetesting.com·Tech by Flipboard·26d ago·12 min read