TCP/IPに係る既知の脆弱性に関する調査報告書：IPA 独立行政法人 情報処理推進機構
コンピュータをはじめとしたインターネットに接続する電子機器には、TCP/IPソフトウェアが組み込まれています。 近年では、情報家電や携帯端末などの電子機器にも使われるようになり、TCP/IPソフトウェアは広く利用されています。 TCP/IPを実装したソフトウェアは、これまで多くの脆弱性が発見、公表され、機器ごとに対策が実装されてきました。しかし、こうした脆弱性の詳細な情報をとりまとめた資料がなかったことから、新たに開発されるソフトウェアで既に公表されている脆弱性の対策が実装されておらず、脆弱性が「再発」するケースが見受けられます。 このような課題に対応するため、IPAでは、TCP/IPに関する既知の脆弱性を取り上げ、TCP/IP実装時の情報セキュリティ対策の向上を目指して調査を実施しました。 本報告書は、一般に公表されているTCP/IPに関する既知の脆弱性情報を収集分析し、詳細な解説書とし
CXSECURITY.COM Free Security List
Bugtraq Stats Yesterday: {{ x.iyest }} Last month: {{ x.imont }} Current month: {{ x.icurr }} Total: {{ x.itotal }}
Security Research by Dan Rosenberg
Welcome to my little corner of the Internet. I'm a security researcher working at Azimuth Security. I enjoy finding and exploiting software vulnerabilities via source auditing, fuzz testing, and reverse engineering. My research is primarily focused on open source software, especially the Linux kernel.
Wapiti : a Free and Open-Source web-application vulnerability scanner in Python for Windows, Linux, BSD, OSX
Download Wapiti Current stable version: 3.0.9 Release date: 2021-12-15 The web-application vulnerability scanner Wapiti allows you to audit the security of your websites or web applications. It performs "black-box" scans (it does not study the source code) of the web application by crawling the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets th
Netsparker Community Edition, Free Web Application Security Scanner
Read this blog post for more information on why we are stopping the development of Netsparker Community Edition, the free SQL Injection scanner. When we started Netsparker we released Netsparker Community Edition, a free SQL Injection scanner. I am sure many of you are familiar with it as till this day it is generating thousands of downloads each month. There were several reasons why back then we
Inguma - A Free Vulnerability Research and Penetration Testing Toolkit
Inguma - A Free Penetration Testing and Vulnerability Research Toolkit Menu A paper about fuzzing with Inguma's Krash Fuzzer Andrew Brooks wrote a paper about how easy working with Krash, Inguma's supplied fuzzer can be. You can download the paper in ODT or PDF. Thank you so much Andrew!. He also started a blog which you can view here. The people at Security Database awarded the Inguma project as
Changelog - Personal (PSI) - Vulnerability Scanning - Secunia.com
Secunia delivers software security research that provides reliable, curated and actionable vulnerability intelligence. Organizations can expect to receive standardized, validated and enriched vulnerability research on a specific version of a software product. Secunia Research supports four solutions:
脆弱性情報共有フレームワーク - MyJVN バージョンチェッカ
MyJVN にようこそ MyJVN は JVN iPediaの情報を、利用者が効率的に活用して頂けるように、 脆弱性対策情報を効率的に収集したり、利用者のPC上にインストールされたソフトウェア 製品のバージョンを容易にチェックする等の機能を提供する仕組み（フレームワーク）です。
XSSed | Cross Site Scripting (XSS) attacks information and archive
Another Ebay permanent XSSWritten by KFTuesday, 13 November 2012 The Indian security researcher Shubham Upadhyay aka Cyb3R_Shubh4M, sent us a new permanent XSS affecting the products listings on Ebay.com read more... F-Secure, McAfee and Symantec websites again XSSedWritten by DPFriday, 13 January 2012 Once again, the websites of the three famous antivirus vendors are vulnerable to cross-site scri
3proxy tiny free proxy server for Windows, Linux, Unix: SOCKS, HTTP, FTP proxy
× Few antiviral products inadequately detect 3proxy as Trojan.Daemonize, Backdoor.Daemonize, etc and many detect 3proxy as a PUA (potentially unwanted program). It may cause browser warning on download page. 3proxy is not trojan or backdoor and contains no functionality except described in documentation. Clear explanation of this fact is given, for example, in Microsoft's article. 0.9.3 Bugfixes:
CVE - CVE
TOTAL CVE Records: 225772 NOTICE: Transition to the all-new CVE website at WWW.CVE.ORG and CVE Record Format JSON are underway. NOTICE: Legacy CVE download formats deprecation is now underway and will end on June 30, 2024. New CVE List download format is available now. The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.
Exploits Database by Offensive Security
The Exploit Database is maintained by OffSec, an information security training company that provides various Information Security Certifications as well as high end penetration testing services. The Exploit Database is a non-profit project that is provided as a public service by OffSec. The Exploit Database is a CVE compliant archive of public exploits and corresponding vulnerable software, develo
IT Security and Compliance Platform | Qualys, Inc.
OVERVIEW Enterprise TruRisk Platform Everything you need to measure, manage, and reduce your cyber risk in one place ASSET MANAGEMENT CyberSecurity Asset Management (CSAM) See entire attack surface, continuously maintain your CMDB, and track EOL/EOS software External Attack Surface Management (EASM) - New Gain an attacker’s view of your external internet-facing assets and unauthorized software Vul
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
VULNERABILITY LAB - SECURITY VULNERABILITY RESEARCH LABORATORY - Best Independent Bug Bounty Programs, Responsible Disclosure & Vulnerability Coordination Platform - INDEX
https://securitytracker.com/
vulnerabilitydatabase.com
Hardware Virtualization Rootkits
NVD - Home
Welcome to nginx!
Cisco IOS penetration testing with Metasploit - Help Net Security