full-disclosure - Re: CodeV discovers 31 vulnerabilitys on 5 OS softwares

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CALCvwp7sAF+3TDD9KZD9VCYpyP7W=NfGjMygXbPMeUjOgaga9w@mail.gmail.com>
Date: Thu, 24 Nov 2011 09:18:07 +1100
From: xD 0x41 <secn3t@...il.com>
To: Javier Bassi <javierbassi@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: CodeV discovers 31 vulnerabilitys on 5 OS
	softwares

t with 250 lines of code and is available at

Oh awesome disclosure there dude.. mad stuff, mad poc... cmion, now
where is the fucking code then ???




On 24 November 2011 08:59, Javier Bassi <javierbassi@...il.com> wrote:
> On Wed, Nov 23, 2011 at 8:11 AM, Press - Dognædis <press@...naedis.com> wrote:
>> Dear FullDisclosure,
>>
>> CodeV is a static code analysis tool (currently for php only, but soon
>> to be developed to other languages) developed by Dognaedis
>>  to offer a tool to integrate in the
>> development of the life cycle of software in order to detect
>> vulnerabilities that arise from bad input validations as soon as they
>> hit the code. The tool has a public demo version that is limited to a
>> script with 250 lines of code and is available at
>>
>>
>> We analyzed some Open Source software to test our own tool and
>> discovered 31 new vulnerabilities in 5 different opensource softwares.
>> Following responsible disclosures of discovered vulnerabilities
>> throughout CodeV's Open Source Software analysis, we are here reporting
>> all the vulnerabilities discovered as soon as possible to the community,
>> offering security not only to our clients but to the entire public. All
>> the vulnerabilities brought to public previously followed the necessary
>> disclosure protocol to the responsible teams. The vulnerabilities
>> discovered can be found in
>>
>> Thank you for your time and we hope you enjoy CodeV.
>
> I liked the disclaimer in submit-ok.html
>
> "DISCLAIMER: Lorem ipsum dolor sit amet, consectetur adipisicing elit,
> sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut
> enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi
> ut aliquip ex ea commodo consequat. Duis aute irure dolor in
> reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla
> pariatur. Excepteur sint occaecat cupidatat non proident, sunt in
> culpa qui officia deserunt mollit anim id est laborum. "
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/