Marc Ruef • Publications

Publications

"Some of my clients are very awesome. And I like that ;)" - @mruef vor 7 Jahren via Twitter

This is a listing of articles, books and interviews which is shown in reverse chronological order. The list is not complete at all. I have tried to provide a link to an online version of the listed publications if such one is available due to limited copyrights. (1094 Publications, publikationen.csv,

)

Sicherheit von Windows

Hacking Intern

Network Intrusion Detection

Netzguide E-Security

Kunst des Penetration Testing

scip Labs Buch seit 2013

Vulnerability Scanner Design

Source Code Analysis

	16 x Bücher (1%)
	275 x Fachartikel (25%)
	454 x Blog Posts (41%)
	63 x Advisories (6%)
	203 x Interviews (19%)
	23 x Keynotes (2%)

2018 ⇑

Schwachstelle in Mercedes Me App (2018/10/10), VulDB, CVE-2018-18071
Schwachstelle in Mercedes Comand Bordsystem (2018/10/10), VulDB, CVE-2018-18070
Kiddoware Kids Place on Samsung Tab 4 Home Button Protection Crash privilege escalation (2018/05/30), VulDB
Mirmay Secure Private Browser & File Manager up to 2.5 on iPad Auto Lock race condition weak authentication (2018/02/01), VulDB

2017 ⇑

Advisory zu Schwachstelle in Infusionspumpen (2017/05/24), ISC CERT
WEKA INTEREST Security Scanner up to 1.8 Portscan Memory Exhaustion denial of service (2017/06/05), VulDB
WEKA INTEREST Security Scanner up to 1.8 LAN Viewer denial of service (2017/06/05), VulDB
WEKA INTEREST Security Scanner up to 1.8 Webspider denial of service (2017/06/05), VulDB
WEKA INTEREST Security Scanner up to 1.8 Stresstest denial of service (2017/06/05), VulDB
WEKA INTEREST Security Scanner up to 1.8 Stresstest denial of service (2017/06/05), VulDB

2016 ⇑

Apple iOS up to 10 Video Decoding denial of service (2016/11/08), VulDB
Apple iOS 10.0.1 Browser Temporary denial of service (2016/10/10), VulDB

2015 ⇑

Microsoft Access 2010 VBA Datatype denial of service (2015/04/21), VulDB

2011 ⇑

SonicWALL SSL-VPN VirtualOffice bis 4.0 err HTML Injection (2011/06/19), VulDB

2010 ⇑

Shemes GrabIt Malicious NZB Date Denial of Service (2010/07/08), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
Skype Client for Mac Chat Unicode Denial of Service (2010/06/22), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch

2009 ⇑

IBM Lotus Notes 8.5 RSS Widget Privilege Escalation (2009/09/08), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch

2008 ⇑

Pro2col StingRay FTS login username cross site scripting (2008/09/12), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
D-Link DIR-100 long url filter evasion (2008/09/08), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
Dreambox DM500 webserver long URL request denial of service (2008/08/29), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch

2007 ⇑

SiteScape Forum prior 7.3 Cross Site Scripting (2007/07/13), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch
Cisco CallManager 4.1 Web Frontend Input Validation (2007/05/24), Bugtraq, SecurityFocus, Full-Disclosure, SecuriTeam.com und computec.ch

2006 ⇑

Sun Secure Global Desktop diverse Cross Site Scripting (2006/09/21), Bugtraq, SecurityFocus und computec.ch
Horde IMP verschiedene Schwachstellen (2006/09), Bugtraq, SecurityFocus und computec.ch
F5 FirePass 4100 bis 6.0 verschiedene Cross Site Scripting (2006/07/04), Bugtraq, SecurityFocus und computec.ch
Kyberna AG ky2help Meine Links Textfelder SQL-Injection (2006/07/04), computec.ch

2005 ⇑

Alkacon OpenCms 6.x Login Cross Site Scripting (2005/12), Bugtraq, SecurityFocus und computec.ch
e107 rate.php Forwarding Schwachstelle (2005/12), Bugtraq, SecurityFocus und computec.ch
NetGear RP114 TCP-Flooding Denial of Service (2005/12), Bugtraq, SecurityFocus und computec.ch
Mozilla Suite lange Eingaben verstecken (2005/08/08), Bugtraq, SecurityFocus und computec.ch
e107 v0.617 verschiedene Schwachstellen (2005/01/17), Bugtraq, SecurityFocus und computec.ch
Novell GroupWise WebAccess diverse Schwachstellen (2005/01/17), Bugtraq, SecurityFocus und computec.ch
Netegrity SiteMinder TARGET-Weiterleitung (2005/01/17), Bugtraq, SecurityFocus und computec.ch

2004 ⇑

ittoolbox.com HTML Injection (2004/10/25), computec.ch
Pinnacle ShowCenter Skin Denial of Service (2004/09/21), Bugtraq, SecurityFocus und computec.ch
Netgear RP114 URL-Filter mit langer URL umgehen (2004/05/24), Bugtraq, SecurityFocus und computec.ch

2003 ⇑

Seclution Airlock Forwarding Schwachstelle (2003/11), computec.ch
Microsoft Internet Explorer GIF mshtml.dll Pufferüberlauf (2003/09/02), Bugtraq, SecurityFocus und computec.ch
MSN Search Cross Site Scripting (2003/08/18), Bugtraq, SecurityFocus und computec.ch
BlackICE PC Protection Cross Site Scripting Filter umgehen (2003/06/14), Bugtraq, SecurityFocus und computec.ch
Xbox Return to Castle Wolfenstein Online Capture the Flag Cheating (2003/06/01), Bugtraq, SecurityFocus und computec.ch
XMB 1.8 Partagium Cross Site Scripting (2003/05/23), Bugtraq, SecurityFocus und computec.ch
Winamp Skin Maker gibt Pfade bei toten Links preis (2003/05/10), Bugtraq, SecurityFocus und computec.ch
International Movie Database (imdb.com) HTML Injection (2003/05/05), computec.ch
CableCom.ch Kompatibelitäts-Abfrage Cross Site Scripting (2003/05/05), computec.ch
Netscape Communicator 4.x sensitive Daten in Konfigurations-Dateien (2003/02/28), Bugtraq, SecurityFocus und computec.ch
Kazaa Media Desktop v2 Bufferoverflow und Denial of Service (2003/01/17), Bugtraq, SecurityFocus und computec.ch

2002 ⇑

Okena StormWatch erweiterte Rechte dank fehlendem SQL-Passwort (2002/11/15), Bugtraq, SecurityFocus und computec.ch
PhUsIoN Webserver 1.x diverse Schwachstellen (2002/10/16), Bugtraq, SecurityFocus, PacketStorm und computec.ch
SonicWall URL-Filter umgehen mittels IP-Adressen (2002/10/15), Bugtraq, SecurityFocus, PacketStorm und computec.ch
Quik-Serv 1.x beliebige Dateien auf dem Zielsystem lesen (2002/10/15), Bugtraq, SecurityFocus, PacketStorm und computec.ch
Personal FTP Server Denial of Service-Attacke mittels langen Login-Daten (2002/10/15), Bugtraq, SecurityFocus, PacketStorm und computec.ch
Telcondex SimpleWebServer Denial of Service-Attacke mittels langer URL-Anfrage (2002/10/12), Bugtraq, SecurityFocus, PacketStorm und computec.ch
Daniel Arenz' Mini Server beliebige Dateien auf dem Zielsystem lesen (2002/10/12), Bugtraq, SecurityFocus, PacketStorm und computec.ch
My Web Server 1.0.x Denial of Service-Attacke mittels langer URL-Anfrage (2002/10/12), Bugtraq, SecurityFocus, PacketStorm und computec.ch
Plain text DDNS password in NetGear FM114P backups (2002/10/10), Bugtraq, SecurityFocus, PacketStorm und computec.ch
TCP flood against NetGear FM114P (2002/10/10), Bugtraq, SecurityFocus, PacketStorm und computec.ch
NetGear FM114P 1.x diverse Schwachstellen (2002/08/28), Bugtraq, SecurityFocus und computec.ch
Finjan SurfinGate URL-Filter umgehen (2002/08/25), Bugtraq, SecurityFocus und computec.ch
Trend Micro Office Scan optimierte Denial of Service-Attacke und Exploit (2002/06/10), Bugtraq, SecurityFocus und computec.ch

2000 ⇑

MS IIS 4.0 Denial of Service durch fehlerhaften Upload (2000/06/06), computec.ch