Community Blog

N-Stealth 3.7 Detects the Top Ten Web Application Vulnerabilities

January 13, 2003

The Open Web Application Security Project has released a report outlining the top ten vulnerabilities in web applications. All of the classic flaws are covered, such as buffer overflows, cross-site-scripting, command injection, unvalidated parameters, various misconfigurations, and other issues. You also might want to check out OWASP’s much acclaimed Guide to Building Secure Web Applications […]

Denial of Service Hole in Linksys Router

November 7, 2002

An easily exploitable denial of service vulnerability has been found in one of the most popular makes of cable/DSL routers. The Linksys 4-port EtherFast router, model number BEFSR41, can be crashed by merely accessing the Gozilla.cgi script with a blank request (for example, “http://192.168.0.1/Gozilla.cgi?”). However, this attack only works if the remote management interface is […]

N-Stealth in TechSupportAlert

October 16, 2002

N-Stealth HTTP Security Scanner is in TechSupportAlert Issue 83. “N-Stealth is a Web vulnerability assessment product that will really test out your Web server security. I tried it out on three hosting services and N-Stealth found vulnerabilities in all three” said Gizmo Richards, editor of TechSupportAlert.com. For more data on the TechSupportAlert, see: http://www.techsupportalert.com. Be […]

« Older Entries   Newer Entries »