Pubblicazioni: Avvisi
Durante il nostro lavoro di analisi di sicurezza si scoprono continuamente nuove vulnerabilità. Quei cosiddetti 0-day sono segnalati ai produttori e divulgati in maniera coordinata – di solito c’è anche un proof-of-concept. In questo modo aiutiamo i nostri clienti e partner ad aumentare la qualità delle loro soluzioni. (RSS | Twitter)
2011 ^
- SonicWALL SSL-VPN VirtualOffice bis 4.0 err HTML Injection, Ruef, Marc, 19. Giugno 2011, scip VulDB
2010 ^
- Shemes Grabit Malicious NZB Date Denial of Service, Ruef, Marc, 08. Luglio 2010, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
- Skype für MacOS X Chat Unicode Denial of Service, Ruef, Marc, 21. Giugno 2010, Skype Developer Zone
2009 ^
- ManageEngine Password Manager Pro searchtext Script Injection, Friedli, Stefan, 15. Dicembre 2009, scip AG, VulDB
- Dropbox.com – Probleme mit HTTP Header Injection, Friedli, Stefan, 14. Dicembre 2009, scip AG, Labs
- Check Point Connectra R62 Login Script Injection Vulnerability, Friedli, Stefan, 21. Settembre 2009, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
- IBM Lotus Notes 8.5 RSS Widget Privilege Escalation, Ruef, Marc, 08. Settembre 2009, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
2008 ^
- Pro2col StingRay FTS login username cross site scripting, Ruef, Marc, 12. Settembre 2008, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
- D-Link DIR-100 long url filter evasion, Ruef, Marc, 08. Settembre 2008, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
- Dreambox DM500 webserver long URL request denial of service, Ruef, Marc, 29. Agosto 2008, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
2007 ^
- SiteScape Forum prior 7.3 Cross Site Scripting, Ruef, Marc, 13. Luglio 2007, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
- Cisco CallManager 4.1 Web Frontend Input Validation, Friedli, Stefan, Ruef, Marc, 24. Maggio 2007, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
- ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities, Friedli, Stefan, 05. Marzo 2007, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
- Wordpress 2.1.1 – Multiple Script Injection Vulnerabilities, Friedli, Stefan, 27. Febbraio 2007, Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
2006 ^
- Sun Secure Global Desktop diverse Cross Site Scripting, Ruef, Marc, 21. Settembre 2006, Bugtraq, SecurityFocus und computec.ch
- Horde IMP verschiedene Schwachstellen, Ruef, Marc, Settembre 2006, Bugtraq, SecurityFocus und computec.ch
- Content Management Framework ‘G3’ – XSS Vulnerability in Search Function, Friedli, Stefan, 02. Agosto 2006, Bugtraq, SecurityFocus
- F5 FirePass 4100 bis 6.0 verschiedene Cross Site Scripting, Ruef, Marc, 04. Luglio 2006, Bugtraq, SecurityFocus und computec.ch
- Kyberna AG ky2help Meine Links Textfelder SQL-Injection, Ruef, Marc, 04. Luglio 2006, computec.ch
2005 ^
- Alkacon OpenCms 6.x Login Cross Site Scripting, Ruef, Marc, Dicembre 2005, Bugtraq, SecurityFocus und computec.ch
- e107 rate.php Forwarding Schwachstelle, Ruef, Marc, Dicembre 2005, Bugtraq, SecurityFocus und computec.ch
- NetGear RP114 TCP-Flooding Denial of Service, Ruef, Marc, Dicembre 2005, Bugtraq, SecurityFocus und computec.ch
- Mozilla Suite lange Eingaben verstecken, Ruef, Marc, 08. Agosto 2005, Bugtraq, SecurityFocus und computec.ch
- e107 v0.617 verschiedene Schwachstellen, Ruef, Marc, 17. Gennaio 2005, Bugtraq, SecurityFocus und computec.ch
- Novell GroupWise WebAccess diverse Schwachstellen, Ruef, Marc, 17. Gennaio 2005, Bugtraq, SecurityFocus und computec.ch
- Netegrity SiteMinder TARGET-Weiterleitung, Ruef, Marc, 17. Gennaio 2005, Bugtraq, SecurityFocus und computec.ch
2004 ^
- ittoolbox.com HTML Injection, Ruef, Marc, 25. Ottobre 2004, computec.ch
- Pinnacle ShowCenter Skin Denial of Service, Ruef, Marc, 21. Settembre 2004, Bugtraq, SecurityFocus und computec.ch
- Netgear RP114 URL-Filter mit langer URL umgehen, Ruef, Marc, 24. Maggio 2004, Bugtraq, SecurityFocus und computec.ch
2003 ^
- Seclution Airlock Forwarding Schwachstelle, Ruef, Marc, Novembre 2003, computec.ch
- Microsoft Internet Explorer GIF mshtml.dll Pufferüberlauf, Ruef, Marc, 02. Settembre 2003, Bugtraq, SecurityFocus und computec.ch
- MSN Search Cross Site Scripting, Ruef, Marc, 18. Agosto 2003, Bugtraq, SecurityFocus und computec.ch
- BlackICE PC Protection Cross Site Scripting Filter umgehen, Ruef, Marc, 14. Giugno 2003, Bugtraq, SecurityFocus und computec.ch
- Xbox Return to Castle Wolfenstein Online Capture the Flag Cheating, Ruef, Marc, 01. Giugno 2003, Bugtraq, SecurityFocus und computec.ch
- XMB 1.8 Partagium Cross Site Scripting, Ruef, Marc, 23. Maggio 2003, Bugtraq, SecurityFocus und computec.ch
- Winamp Skin Maker gibt Pfade bei toten Links preis, Ruef, Marc, 10. Maggio 2003, Bugtraq, SecurityFocus und computec.ch
- International Movie Database (imdb.com) HTML Injection, Ruef, Marc, 05. Maggio 2003, computec.ch
- CableCom.ch Kompatibelitäts-Abfrage Cross Site Scripting, Ruef, Marc, 05. Maggio 2003, computec.ch
- Netscape Communicator 4.x sensitive Daten in Konfigurations-Dateien, Ruef, Marc, 28. Febbraio 2003, Bugtraq, SecurityFocus und computec.ch
- Kazaa Media Desktop v2 Bufferoverflow und Denial of Service, Ruef, Marc, 17. Gennaio 2003, Bugtraq, SecurityFocus und computec.ch
2002 ^
- Okena StormWatch erweiterte Rechte dank fehlendem SQL-Passwort, Ruef, Marc, 15. Novembre 2002, Bugtraq, SecurityFocus und computec.ch
- PhUsIoN Webserver 1.x diverse Schwachstellen, Ruef, Marc, 16. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- SonicWall URL-Filter umgehen mittels IP-Adressen, Ruef, Marc, 15. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- Quik-Serv 1.x beliebige Dateien auf dem Zielsystem lesen, Ruef, Marc, 15. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- Personal FTP Server Denial of Service-Attacke mittels langen Login-Daten, Ruef, Marc, 15. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- Telcondex SimpleWebServer Denial of Service-Attacke mittels langer URL-Anfrage, Ruef, Marc, 12. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- Daniel Arenz’ Mini Server beliebige Dateien auf dem Zielsystem lesen, Ruef, Marc, 12. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- My Web Server 1.0.x Denial of Service-Attacke mittels langer URL-Anfrage, Ruef, Marc, 12. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- Plain text DDNS password in NetGear FM114P backups, Ruef, Marc, 10. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- TCP flood against NetGear FM114P, Ruef, Marc, 10. Ottobre 2002, Bugtraq, SecurityFocus, PacketStorm und computec.ch
- NetGear FM114P 1.x diverse Schwachstellen, Ruef, Marc, 28. Agosto 2002, Bugtraq, SecurityFocus und computec.ch
- Finjan SurfinGate URL-Filter umgehen, Ruef, Marc, 25. Agosto 2002, Bugtraq, SecurityFocus und computec.ch
- Trend Micro Office Scan optimierte Denial of Service-Attacke und Exploit, Ruef, Marc, 10. Giugno 2002, Bugtraq, SecurityFocus und computec.ch
2000 ^
- MS IIS 4.0 Denial of Service durch fehlerhaften Upload, Ruef, Marc, 06. Giugno 2000, computec.ch
