The primary goal of this whitepaper is to provide analysis that studies research trends using publicly reported vulnerabilities.
39c10997c6f5094533bf1e13e89f8d785b8bce736894c854cff9c91582970db9
Small write-up discussing dynamic evaluation vulnerabilities in PHP applications.
a217e9eefc906363f69f40b0accf98bbda961516dbf227b93297f62febc5822a
Format String Vulnerabilities in Perl Programs - Whitepaper discussing all the attack and impact details of recent discussions surrounding format string exploitation in perl. Provides further insight on how these flaws can be manipulated and has examples.
1f644276a53775b2a1efbef6e98a60ccf369cc0a40fb16ff4f0877b18aea1d03
FTP clients, including those that may be embedded in web clients, can be vulnerable to certain directory traversal attacks by modified FTP servers. If successful, the attacks could allow the server to overwrite or create arbitrary files outside of the client's working directory, subject to file/directory permissions and the privilege level of the client. Vulnerable clients include wget-1.8.1, OpenBSD 3.0 ftp, and Solaris 2.7 and 2.7 ftp.
e04b3f39784fb43911484c74fae121e90aac99afd0985873bce51157ed79afb2
Sendform.cgi v1.4.4 and below has a directory traversal vulnerability which allows remote attackers to read any file with the privileges of the web server. Fix available here. Bugtraq ID 5286.
694cdf39c7befd0a99c544d8c6c02d17f57020d35701886d6ec90789a6b1f585