Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: CodeV discovers 31 vulnerabilitys on 5 OS softwares
From: Javier Bassi <javierbassi () gmail com>
Date: Wed, 23 Nov 2011 18:59:33 -0300

On Wed, Nov 23, 2011 at 8:11 AM, Press - Dogn├Ždis <press () dognaedis com> wrote:
Dear FullDisclosure,

CodeV is a static code analysis tool (currently for php only, but soon
to be developed to other languages) developed by Dognaedis
 to offer a tool to integrate in the
development of the life cycle of software in order to detect
vulnerabilities that arise from bad input validations as soon as they
hit the code. The tool has a public demo version that is limited to a
script with 250 lines of code and is available at


We analyzed some Open Source software to test our own tool and
discovered 31 new vulnerabilities in 5 different opensource softwares.
Following responsible disclosures of discovered vulnerabilities
throughout CodeV's Open Source Software analysis, we are here reporting
all the vulnerabilities discovered as soon as possible to the community,
offering security not only to our clients but to the entire public. All
the vulnerabilities brought to public previously followed the necessary
disclosure protocol to the responsible teams. The vulnerabilities
discovered can be found in

Thank you for your time and we hope you enjoy CodeV.

I liked the disclaimer in submit-ok.html

"DISCLAIMER: Lorem ipsum dolor sit amet, consectetur adipisicing elit,
sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut
enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi
ut aliquip ex ea commodo consequat. Duis aute irure dolor in
reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla
pariatur. Excepteur sint occaecat cupidatat non proident, sunt in
culpa qui officia deserunt mollit anim id est laborum. "

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]