Advisories
At G-SEC™ we believe that finding and publishing vulnerabilities is a service to vendor, users and companies, we try to follow responsible disclosure guidelines where possible.
Vulnerabilities are reported responsbily under certain terms that bind the vendor to also act responsibly. The terms can be found here.
Subscribe to our RSS Feed to be informed about advisories
Current advisories :
- One bug to rule them all - Denial of service condition in Firefox IE5,IE6,IE7,IE8, Netscape, Firefox, Safari, Opera, Konqueror,
Seamonkey, Wii, PS3, iPhone, iPod, Nokia, Siemens etc.
- Apple iPhone & iPod touch remote code execution
- Computer Associates - Multiple products remote arbritary code execution
- Generic PDF bypass - [ F-secure, Symantec, McAfee ]
Past advisories :
- Multiple Avira Antivir Denial of Service (remote) - BID33270
- Avira Antivir Privilege escalation - BID33291
- IBM Proventia multiple bypasses (forced release) - BID34345
- SUN Java Remote code execution - BID34667
- Internet Explorer 5 & 6 Remote code execution - BID31618
- Jscape SSH Man-in-the-Middle through key validation error - BID29882
- Firefox Denial of Service (unclamped loop) forced disclosure
- Firefox Denial of Service (Keygen) forced disclosure - BID35132
- F-Secure Remote code execution vulnerability
- Panda Anti-virus generic evasion (TAR) - BID35027
- Panda Anti-virus generic evasion (CAB) - BID35027
- Bitdefender generic evasion (PDF) - BID35010
- Avira Antivir generic evasion (PDF) - BID35008
- F-Prot CAB bypass / evasion - BID34896 - CVE - DOE CIRC
- AVG ZIP bypass / evasion - BID34895
- Mcafee RAR,ZIP multiple evasions -BID34780
- Trendmicro RAR,ZIP,CAB evasion (no patch) - BID34763
- Nod32 CAB bypass / evasion - BID34764
- Aladdin eSafe generic evasion / bypass - BID34726
- Comodo RAR evasion - BID34737
- Avira Antivir ZIP evasion - BID34723
- Fortinet - Generic evasion (Limited details) - BID34583
- Nod32 - Generic evasion (Limited details) - BID34764
- Avast! - Generic evasion (Limited details) - BID34578
- Bitdefender - Generic evasion (Limited details) - BID34580
- F-Prot - ZIP Method evasion - BID15293
- IBM Proventia - Generic evasion (Limited disclosure)
- ClamAV below 0.95 - Generic evasion (Limited disclosure) - BID34344
- F-prot Antivirus bypass - ZIP
- CheckPoint VPN-1 SecureClient Privilege escalation
- F-Secure Anti-virus Bypass - CVE-2006-0337
- Safe'nsec HIPS & Anti-Spyware- Priviledge Escalation
- XAMPP - Multiple Priviledge Escalation and Rogue Autostart
- When you trust WehnTrust - Priviledge Escalation
- Zango Adware - Insecure AutoUpdate and remote file execution
Note: All trademarks mentioned herein belong to their respective owners.