Поиск:Автор - компьютерная безопасность: уязвимости и эксплоиты

[RU] switch to
English Version

См. так же
  Michal Zalewski <lcamtuf_(at)_TPI.PL>
  Michal Zalewski <lcamtuf_(at)_bos.bindview.com>
  Michal Zalewski <lcamtuf_(at)_razor.bindview.com>
  Michal Zalewski <lcamtuf_(at)_echelon.pl>
  Michal Zalewski <lcamtuf_(at)_coredump.cx>
  Michal Zalewski <lcamtuf_(at)_ghettot.net>
  Michal Zalewski <lcamtuf_(at)_ghettot.org>
  Michal Zalewski <lcamtuf_(at)_gmail.com>
Имя: Michal Zalewski
E-mail: lcamtuf_(at)_DIONE.IDS.PL

MSIE7 entrapment again (+ FF tidbit)
Firefox wyciwyg:// cache zone bypass
[Full-disclosure] Assorted browser vulnerabilities
Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)
MSIE7 browser entrapment vulnerability (probably Firefox, too)
Firefox: onUnload tailgating (MSIE7 entrapment bug variant)
[Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
Firefox: about:blank is phisher's best friend
Firefox: serious cookie stealing / same-domain bypass vulnerability
Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
[Full-disclosure] Firefox/MSIE focus stealing vulnerability - clarification
[Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
[Full-disclosure] Firefox + popup blocker + XMLHttpRequest + srand() = oops
[Full-disclosure] Web 2.0 backdoors made easy with MSIE & XMLHttpRequest
Concurrency strikes MSIE (potentially exploitable msxml3 flaws)
Re: Concurrency-related vulnerabilities in browsers - expect problems
Concurrency-related vulnerabilities in browsers - expect problems
[Full-disclosure] MSIE (mshtml.dll) OBJECT tag vulnerability
Remote overflow in MSIE script action handlers (mshtml.dll)
Compromising pictures of Microsoft Internet Explorer!
Linux ISO9660 handling flaws
[Full-Disclosure] Sendmail 8.12.9 prescan bug (a new one) [CAN-2003-0694]
x509 cert parsing in web browsers
Lotus Domino: security hole the size of Texas, plus somewhat smaller protocol auditing utility
Oracle WebDb engine brain-damagse
commercial products and security [ + new bug ]
Netscape Navigator buffer overflow
commercial products and security [ + new bug ]
Another thingy.
swc / ActivCard
sperl 5.00503 (and newer ;) exploit
Lotus ESMTP Service (Lotus Domino Release 5.0.1 (Intl))