BestHub
Sign in
Tagged articles

Security Research

41 articles · Page 1 of 1
Black & White Path
Black & White Path
Aug 10, 2026 · Information Security

CVE-2026-45454: SharePoint Server Upload.aspx Path Traversal Leads to Remote Code Execution

The AretiQ security team disclosed a path‑traversal flaw in SharePoint Server's Upload.aspx page that lets an authenticated user with Contribute rights upload files to any library, and when PageParserPaths permits server‑side scripts, an ASPX webshell can be executed for full remote code execution, with CVSS 3.1 score 6.5 (Microsoft 8.2).

CVE-2026-45454Path TraversalPowerShell
0 likes · 14 min read
CVE-2026-45454: SharePoint Server Upload.aspx Path Traversal Leads to Remote Code Execution
Black & White Path
Black & White Path
Aug 9, 2026 · Information Security

Black Hat Reveal: Single Email Can Hijack Five Major AI Browsers Including Claude, Gemini, and ChatGPT Atlas

At Black Hat USA 2026, Zenity Labs disclosed the "PleaseFix" vulnerability that lets attackers hijack AI browsers via a malicious email without any user interaction, compromising Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas, and Copilot Edge, and demonstrated further local‑host exploits and mitigation steps.

AI browsersBlack Hat 2026Intent Collision
0 likes · 8 min read
Black Hat Reveal: Single Email Can Hijack Five Major AI Browsers Including Claude, Gemini, and ChatGPT Atlas
Black & White Path
Black & White Path
Aug 7, 2026 · Information Security

How I Used AI to Earn $500K in Google Bug Bounty in Three Months

Over three months, the author collected thousands of Google API keys, built a scanner and an AI‑driven testing framework, uncovered multiple high‑value vulnerabilities across Google services, and earned more than $500,000 in bug‑bounty rewards, detailing each step and lesson learned.

AIAutomationBug Bounty
0 likes · 12 min read
How I Used AI to Earn $500K in Google Bug Bounty in Three Months
Black & White Path
Black & White Path
Aug 3, 2026 · Industry Insights

HackerOne Enforces Real‑Name Verification: Government ID Required for Bug Reports Starting Aug 14

HackerOne will mandate government‑issued ID verification for all bug bounty submissions from August 14, excluding minors and users on VPNs or rooted devices, sparking community outrage, raising privacy concerns, and potentially driving researchers toward gray‑market channels as regulatory pressure mounts.

Bug BountyHackerOneKYC
0 likes · 9 min read
HackerOne Enforces Real‑Name Verification: Government ID Required for Bug Reports Starting Aug 14
Black & White Path
Black & White Path
Jul 27, 2026 · Information Security

How a Normal AD User Can Compromise an Entire Domain via the Certighost Vulnerability (CVE‑2026‑54121)

The Certighost vulnerability (CVE‑2026‑54121) in Microsoft Active Directory Certificate Services allows a regular domain user to impersonate a domain controller, obtain a certificate, perform DCSync, and fully compromise an AD forest, with a publicly released PoC and detailed mitigation steps.

Active DirectoryCVE-2026-54121Certificate Services
0 likes · 12 min read
How a Normal AD User Can Compromise an Entire Domain via the Certighost Vulnerability (CVE‑2026‑54121)
Black & White Path
Black & White Path
Jul 26, 2026 · Information Security

CVE‑2026 PoC Collection: All 12 Exploit Codes in One Repository

A GitHub repository named cve-2026-poc-collection, maintained by researcher XZ1r0, aggregates twelve high‑severity CVE‑2026 proof‑of‑concept exploits across web, Linux, Windows and other categories, detailing their impact, implementation languages, and offering a search script to help security professionals quickly locate and analyze the code.

CVE-2026KubernetesPoC
0 likes · 9 min read
CVE‑2026 PoC Collection: All 12 Exploit Codes in One Repository
Black & White Path
Black & White Path
Jul 24, 2026 · Information Security

How Kimi K3 Uncovered Multiple Redis Zero‑Day RCE Bugs in Just 27 Minutes

In July 2026, the AI model Kimi K3 from Moonshot AI discovered and generated working remote‑code‑execution exploits for four Redis versions within 27 minutes, detailing a double‑free Stream NACK flaw and a TDigest heap overflow, and providing open‑source PoC scripts and defense guidance.

AI Vulnerability DiscoveryRedisSecurity Research
0 likes · 9 min read
How Kimi K3 Uncovered Multiple Redis Zero‑Day RCE Bugs in Just 27 Minutes
Black & White Path
Black & White Path
Jul 22, 2026 · Information Security

How Windows Tracks You: Inside the GDID Identifier and Extraction Tool

The article explains the Global Device Identifier (GDID) embedded in every Windows machine, how it is stored in the registry, used across Microsoft services, and how researchers can extract or attempt to spoof it with the GDID‑Extractor tool, revealing a four‑layer defense and privacy implications.

Device IdentifierGDIDSecurity Research
0 likes · 18 min read
How Windows Tracks You: Inside the GDID Identifier and Extraction Tool
Black & White Path
Black & White Path
Jul 19, 2026 · Information Security

Critical WordPress Core wp2shell Exploit Chain – Full Technical Analysis & POC

WordPress’s wp2shell vulnerability chain, disclosed by Adam Kues and Mustafa Can İpekçi, links CVE‑2026‑63030 REST route confusion with CVE‑2026‑60137 SQL injection to achieve pre‑authentication remote code execution via a single HTTP request, and the article details the exploit steps, detection scripts, and mitigation measures.

RCEREST APISQL injection
0 likes · 14 min read
Critical WordPress Core wp2shell Exploit Chain – Full Technical Analysis & POC
Black & White Path
Black & White Path
Jul 15, 2026 · Artificial Intelligence

Inside the 42K‑Word OpenAI Codex Desktop System Prompt Leak

A security researcher released over 42,000 words of OpenAI Codex desktop system prompts and tool definitions, revealing the AI's layered persona, dual‑channel workflow, skill‑calling mechanisms, tool set, and safety constraints, offering a rare window into AI agent design and security.

AI safetyCodexGitHub
0 likes · 8 min read
Inside the 42K‑Word OpenAI Codex Desktop System Prompt Leak
Black & White Path
Black & White Path
Jul 13, 2026 · Artificial Intelligence

Grok 4.5 Shows Exceptional Vulnerability Detection – A New Tool for Security Researchers

Released on July 8, 2026, xAI's Grok 4.5 outperforms competitors in software‑engineering benchmarks, consumes far fewer tokens, and has been praised by security researchers for its powerful vulnerability‑detection capability, while offering a $2/​M‑input‑token pricing and 80 TPS inference speed.

AI modelGrok 4.5Security Research
0 likes · 4 min read
Grok 4.5 Shows Exceptional Vulnerability Detection – A New Tool for Security Researchers
Black & White Path
Black & White Path
Jul 9, 2026 · Information Security

One‑Stop Linux Privilege Escalation Toolkit Covering 24 Vulnerabilities Across 7 Architectures

lpe-toolkit is a multi‑architecture Linux privilege‑escalation toolkit that bundles 24 exploits across seven CPU architectures, automatically detects kernel versions to filter patched bugs, offers pre‑compiled binaries for amd64, multiple execution modes, and practical use cases for red‑team testing, incident response, and security research.

CVELinuxPenetration Testing
0 likes · 8 min read
One‑Stop Linux Privilege Escalation Toolkit Covering 24 Vulnerabilities Across 7 Architectures
Black & White Path
Black & White Path
Jul 6, 2026 · Information Security

Bad Epoll Shows Why Human Audits Still Beat AI in Kernel Security

Human researcher Jaeyoung Chung uncovered the Bad Epoll kernel race‑condition (CVE‑2026‑46242) that AI model Mythos missed, demonstrating that even the most advanced AI code‑auditing tools can overlook critical vulnerabilities while human intuition and deep analysis still dominate security research.

AI auditingCVE-2026-46242Linux kernel
0 likes · 9 min read
Bad Epoll Shows Why Human Audits Still Beat AI in Kernel Security
Black & White Path
Black & White Path
Jun 11, 2026 · Information Security

Nightmare Eclipse Returns: RoguePlanet Zero‑Day Grants SYSTEM on Patched Windows

On June 9, 2026, security researcher Nightmare Eclipse released the RoguePlanet zero‑day exploit that leverages a race condition in Microsoft Defender to spawn a SYSTEM‑level command prompt on Windows 10/11 machines fully patched with the June updates, while also hinting at a possible BitLocker bypass.

BitLocker bypassMicrosoft DefenderRoguePlanet
0 likes · 10 min read
Nightmare Eclipse Returns: RoguePlanet Zero‑Day Grants SYSTEM on Patched Windows
Black & White Path
Black & White Path
May 30, 2026 · Industry Insights

Why Is Google Paying Only $500 for a Critical V8 Out‑of‑Bounds Write Bug?

The article examines Google’s $500 reward for a high‑severity V8 out‑of‑bounds write vulnerability, tracing the historic decline of bug‑bounty payouts, the monopolistic role of major platforms, AI‑driven bug‑finding saturation, and the resulting challenges for security researchers both globally and in China.

AIBug BountyGoogle
0 likes · 11 min read
Why Is Google Paying Only $500 for a Critical V8 Out‑of‑Bounds Write Bug?
Black & White Path
Black & White Path
May 27, 2026 · Information Security

From White‑Hat to Banned Outlaw: The Rapid Fall of a Security Researcher

An anonymous researcher with a legitimate MSRC account publicly released multiple Windows 0‑day exploits after his reports were ignored, leading to swift bans on GitHub and GitLab, sparking a heated debate over platform policies, coordinated disclosure failures, and the broader breakdown of the bug‑bounty ecosystem.

Bug BountyGitHubGitLab
0 likes · 9 min read
From White‑Hat to Banned Outlaw: The Rapid Fall of a Security Researcher
Black & White Path
Black & White Path
Apr 27, 2026 · Information Security

How I Exploited Multiple Vulnerabilities in a University System

This article details a step‑by‑step penetration test on a university’s web platform, covering XSS file uploads, JWT tampering for arbitrary login, massive personal data leakage, SQL injection payloads, and the exposure of several AK/SK secrets, all with concrete screenshots and commands.

JWTPenetration TestingSQL injection
0 likes · 5 min read
How I Exploited Multiple Vulnerabilities in a University System
Black & White Path
Black & White Path
Apr 19, 2026 · Information Security

Why Security Researchers Deserve Respect: Lessons from the 2026 Windows Defender Zero‑Day Fallout

In April 2026 a trio of Windows Defender zero‑day bugs—BlueHammer, RedSun and UnDefend—were publicly disclosed after Microsoft’s Security Response Center repeatedly ignored the researcher’s reports, sparking a debate over responsible disclosure, corporate trust, and the urgent need to respect security professionals.

BlueHammerMicrosoftSecurity Research
0 likes · 6 min read
Why Security Researchers Deserve Respect: Lessons from the 2026 Windows Defender Zero‑Day Fallout
Black & White Path
Black & White Path
Apr 17, 2026 · Information Security

RedSun PoC Uses Windows Defender Tag to Overwrite Files and Escalate Privileges

The RedSun proof‑of‑concept demonstrates that when Windows Defender detects a malicious file marked with a cloud‑based detection tag, it may rewrite the file to its original location instead of isolating it, allowing an attacker to replace system files and obtain administrator privileges.

RedSunSecurity ResearchWindows Defender
0 likes · 1 min read
RedSun PoC Uses Windows Defender Tag to Overwrite Files and Escalate Privileges
Black & White Path
Black & White Path
Mar 14, 2026 · Information Security

Godzilla Reflection AES Plugin with Data‑Flow Break: A Webshell Generator that Evades Detection

The article introduces VeilShell, a Godzilla‑based reflection AES encryptor combined with a Data‑Flow Break and dynamic callback technique to generate PHP webshells, presents detailed evasion test results against Changting, Alibaba and VirusTotal scanners, and provides performance metrics and a GitHub link for acquisition.

AES encryptionData-Flow BreakDetection Evasion
0 likes · 3 min read
Godzilla Reflection AES Plugin with Data‑Flow Break: A Webshell Generator that Evades Detection
Linux Tech Enthusiast
Linux Tech Enthusiast
Feb 23, 2026 · Information Security

What Programming Languages Do Hackers Prefer? Survey and Exploit-DB Analysis

A 2021 CCC member survey and a large‑scale analysis of Exploit‑DB reveal that hackers predominantly use Shell scripts and Python, with notable overlap across both data sets, while language preferences shift over time toward Python and away from C, highlighting detection challenges and future trends.

Programming LanguagesPythonSecurity Research
0 likes · 11 min read
What Programming Languages Do Hackers Prefer? Survey and Exploit-DB Analysis
IT Services Circle
IT Services Circle
Jun 15, 2024 · Information Security

How Researchers Built a Malicious VSCode Extension in 30 Minutes and Exposed Marketplace Security Flaws

A security research team created a counterfeit VSCode extension in half an hour, demonstrated how easily malicious code can be injected and distributed through the VSCode Marketplace, and revealed that dozens of high‑value companies, security firms and even a national court were compromised, highlighting critical gaps in extension vetting and supply‑chain protection.

Malicious ExtensionSecurity ResearchVSCode
0 likes · 10 min read
How Researchers Built a Malicious VSCode Extension in 30 Minutes and Exposed Marketplace Security Flaws
MaGe Linux Operations
MaGe Linux Operations
Oct 28, 2022 · Information Security

Hidden Malware in Fake GitHub PoCs: Researchers Find 4,893 Malicious Repos

Researchers from the Leiden Institute of Advanced Computer Science analyzed over 47,000 GitHub repositories, uncovering that many fake proof‑of‑concept exploits conceal malware, with nearly 5,000 repositories deemed malicious and detailed case studies revealing hidden trojans, Cobalt Strike tools, and stealthy information stealers.

GitHubSecurity ResearchThreat analysis
0 likes · 6 min read
Hidden Malware in Fake GitHub PoCs: Researchers Find 4,893 Malicious Repos
AntTech
AntTech
Oct 11, 2022 · Information Security

In‑Depth Analysis of Hyper‑V DirectX Attack Surface and Related CVEs

The article provides a comprehensive technical walkthrough of the Hyper‑V DirectX component, detailing its architecture, virtual GPU configuration, attack surface, and step‑by‑step exploitation of four critical CVEs (CVE‑2022‑21918, CVE‑2021‑43219, CVE‑2022‑21912, CVE‑2022‑21898) with code snippets and debugging insights.

CVEDirectXHyper‑V
0 likes · 11 min read
In‑Depth Analysis of Hyper‑V DirectX Attack Surface and Related CVEs
Liangxu Linux
Liangxu Linux
Jun 26, 2021 · Information Security

Uncovering RotaJakiro: A Stealthy Linux Backdoor Malware Hidden Since 2018

Researchers from 360 Netlab have uncovered RotaJakiro, a stealthy Linux backdoor malware first seen in 2018, which uses ZLIB compression, AES/XOR/ROTATE encryption, and hidden plugins to exfiltrate data and evade detection, with twelve functions yet its true purpose remains unknown.

C2Linux malwareRotaJakiro
0 likes · 4 min read
Uncovering RotaJakiro: A Stealthy Linux Backdoor Malware Hidden Since 2018
21CTO
21CTO
Mar 20, 2021 · Information Security

How TikTok’s Android WebView Exposes Multiple Vulnerabilities Leading to Remote Code Execution

Egyptian security researchers discovered a chain of flaws in TikTok’s Android app—including generic WebView XSS, Add Wiki Activity XSS, intent-based component launch, a Zip Slip in Tma Test Activity, and an RCE exploit—that can be combined to achieve remote code execution, and the report details TikTok’s remediation steps.

AndroidRemote Code ExecutionSecurity Research
0 likes · 10 min read
How TikTok’s Android WebView Exposes Multiple Vulnerabilities Leading to Remote Code Execution
ITPUB
ITPUB
Mar 22, 2016 · Information Security

Exploiting a Rare MSSQL Blind Injection via @@LANGID and @@TEXTSIZE

The author details a seldom‑seen MSSQL blind injection discovered during a Google bounty, explaining why automated scanners failed, how manual testing with @@LANGID and @@TEXTSIZE revealed the flaw, and the proof‑of‑concept steps that ultimately earned a reward.

Blind InjectionGoogle BountyMSSQL
0 likes · 5 min read
Exploiting a Rare MSSQL Blind Injection via @@LANGID and @@TEXTSIZE