Skip to main content
Scour
Discover
Docs
Login
Sign Up
You are offline. Trying to reconnect...
Copied to clipboard
Unable to share or copy to clipboard
Vulnerability Research
🔓 Vulnerability Research
CVE, zero-day, security research, bug hunting, disclosure
Filter Results
Timeframe
Choose a timeframe
Fresh
Past Hour
Today
This Week
This Month
Feeds to Scour
Subscribed
All
Scoured
476
posts in
19.3
ms
🤖
ai 应用
Elasticsearch Labs
·
2d
2 days ago
From
vulnerability
report to
CVE
draft in minutes: how Elastic automated
security
advisories with AI
Covers
NVD - Home
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for From vulnerability report to CVE draft in minutes: how Elastic automated security advisories with AI
🔐
Cybersecurity
Orca Security
·
4h
4 hours ago
Best
Vulnerability
Management Tools and Software in 2026
Covers
Critical SharePoint Zero-Day (CVE-2025-53770) Under Active Exploitation
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Best Vulnerability Management Tools and Software in 2026
🔐
Cybersecurity
RIPE Labs
·
3d
3 days ago
How Do We Manage
Vulnerabilities
in the Age of AI?
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for How Do We Manage Vulnerabilities in the Age of AI?
🔐
Cybersecurity
Security Affairs
·
14h
14 hours ago
Cisco Catalyst SD-WAN
Zero-Day
CVE-2026-20245
Exploited Months Before Disclosure
Covers
3 stories
See all stories this covers
including
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Covered by
Metacurity
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure
🔐
Cybersecurity
arXiv
·
2d
2 days ago
From
CVE
to
CWE
: Syscall-Based HIDS Generalisation
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for From CVE to CWE: Syscall-Based HIDS Generalisation
🔐
Cybersecurity
Cybersecurity and Infrastructure Security Agency CISA
·
11h
11 hours ago
Cisa Adds Two Known
Exploited
Vulnerabilities
Catalog
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Cisa Adds Two Known Exploited Vulnerabilities Catalog
🛡️
Memory Safety
kb.cert.org
·
3d
3 days ago
VU
#936962: Multiple file parsing vulnerabilities in FastStone Image Viewer 8.3.0.0
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for VU#936962: Multiple file parsing vulnerabilities in FastStone Image Viewer 8.3.0.0
🛡️
Memory Safety
SecurityWeek
·
15h
15 hours ago
Chrome 149 Update Resolves 18 Severe
Vulnerabilities
Covers
The Stable channel has been updated to 149\.0\.7827\.196/197 for Windows and Mac and 149\.0\.7827\.196 for Linux, which will roll out over the coming days/weeks\. A full list of...
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Chrome 149 Update Resolves 18 Severe Vulnerabilities
🔐
Cybersecurity
BleepingComputer
·
2d
2 days ago
The
Exploit
Doesn't Exist. You Can Still Prove It Works Against You
Covers
4 stories
See all stories this covers
including
Project Glasswing: Securing critical software for the AI era
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for The Exploit Doesn't Exist. You Can Still Prove It Works Against You
🔐
Cybersecurity
daniel.haxx.se
·
1d
1 day ago
a
CVE
dispute
Discussed on
Hacker News
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for a CVE dispute
🔐
Cybersecurity
Eugene Yan
·
4d
4 days ago
Patterns for Building Cybersecurity Evals
Covers
3 stories
See all stories this covers
including
ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Patterns for Building Cybersecurity Evals
🔐
Cybersecurity
blog.volerion.com
·
2d
2 days ago
Two Months In: Assessing the Impact of NIST's Enrichment Cutbacks
Covers
NIST Updates NVD Operations to Address Record CVE Growth
Discussed on
Hacker News
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Two Months In: Assessing the Impact of NIST's Enrichment Cutbacks
🔐
Cybersecurity
Qualys
·
1d
1 day ago
CERT-In’s AI
Vulnerability
Blueprint: Why Indian CISOs Need Machine-Speed Risk Operations in the Post-Mythos Era
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for CERT-In’s AI Vulnerability Blueprint: Why Indian CISOs Need Machine-Speed Risk Operations in the Post-Mythos Era
💣
Binary Exploitation
medium.com
·
6d
6 days ago
How a Loose Regex in a File Upload Component Led to a $12,000
Remote
Code
Execution
(RCE)
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for How a Loose Regex in a File Upload Component Led to a $12,000 Remote Code Execution (RCE)
🔐
Cybersecurity
Tenable Blog
·
1d
1 day ago
How much cyber risk does AI create for organizations? 457 million
security
issues. Here’s what you can do about it.
Covers
2 stories
See all stories this covers
including
Critical SharePoint Zero-Day (CVE-2025-53770) Under Active Exploitation
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for How much cyber risk does AI create for organizations? 457 million security issues. Here’s what you can do about it.
🔐
Cybersecurity
0x00sec
·
3d
3 days ago
RedSun
Exploit
(
CVE-2026-41091
)
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for RedSun Exploit (CVE-2026-41091)
🔐
Cybersecurity
AISLE
·
1d
1 day ago
AISLE Discovers 6 CVEs in curl, Including Oldest Issue Ever
Covers
8 stories
See all stories this covers
including
Mythos finds a curl vulnerability
Covered by
4 sources
See all sources covering this story
including
SecurityWeek
,
The Hacker News
Discussed on
Hacker News
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for AISLE Discovers 6 CVEs in curl, Including Oldest Issue Ever
🔐
Cybersecurity
GitHub
·
6d
6 days ago
CVE
Daily, RSS Feed Generation Back End
Discussed on
Hacker News
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for CVE Daily, RSS Feed Generation Back End
🔐
Cybersecurity
Help Net Security
·
1d
1 day ago
Cisco Unified CM flaw actively
exploited
to drop webshells (
CVE-2026-20230
)
Covers
2 stories
See all stories this covers
including
Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)
🔐
Cybersecurity
CSO Online
·
1d
1 day ago
Hole in widely-used FFmpeg
codec
could crash media servers or enable
RCE
Covers
5 stories
See all stories this covers
including
FFmpeg 8.0 Released
Covered by
sh.itjust.works
Love
Like
Not for me
Save
See related topics
Feeds
Share
Report
Off Topic
Harmful Content
Low Quality
Spam
Misleading
Duplicate
Wrong Language
Block Domain
Actions for Hole in widely-used FFmpeg codec could crash media servers or enable RCE
Page 2 »
Log in to enable infinite scrolling
Keyboard Shortcuts
Navigation
Next / previous post
j
/
k
Open post
o
or
Enter
Preview post
v
Post Actions
Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s
Recommendations
Add interest / feed
Enter
Not interested
x
Go to
Home
g
h
Interests
g
i
Feeds
g
f
Likes
g
l
History
g
y
Changelog
g
c
Settings
g
s
Discover
g
b
Search
/
Pagination
Next page
n
Previous page
p
General
Show this help
?
Submit feedback
!
Close modal / unfocus
Esc
Press
?
anytime to show this help
Like
Save
Not for me
Report