Which site/sites do you guys use to view details of security vulnerabilities?
I’m guessing since you asked this question you find it frequently mind-numbing to locate good vulnerability descriptions. I hate it when I get stuck chasing down the details of a single vuln when there are 100s or 1000s of additional vulns in play.
My favorite sources are the vendors that run decent advisory sites, like:
If the vuln is one I discovered from probing a web app then I like to borrow OWASP’s vulnerability descriptions – in fact, OWASP’s Top 10 for 2010 PDF is especially nice for referencing or copying for reports because it’s pretty:
If it is anything to do with an SSL Server then SSL Labs is great: https://www.ssllabs.com/
(w/description of scoring: https://www.ssllabs.com/downloads/SSL_Server_Rating_Guide_2009.pdf)
Beyond that, sometimes pushing the effort to gather the vulnerability details for a particular vulnerability to the vendor is effective if you have a support contract.
I use primarly
- Exploit-DB - Usually I use this for web exploits (like a fresh Joomla hack, or something similar)
- Open-Source vulnerability database - Excellent for all kinds of products. I've found some old. but excellent hacks on this page
- Secunia - For searching
- Microsoft Technet - For some extra reading about the latest Microsoft issues
- Google Reader - I subscribe to a lot of RSS feeds. If you connect to one feed which you find interesting, Google helps you find similar feeds in which is related.
Also it ususally pays off to visit the vendor homepage if your are looking for any trouble your apps could make. They usually post advisories where they show you what are the most critical issues.
I prefer to use the vendor sites for most information. Since I am often more interested in whether or not a patch or workaround exists, I find them to be most useful.
When the vendor site is not entirely useful, i.e. there is no patch/workaround and we still need to determine what level of compensating controls are necessary, I tend to use the following (in order)
Some other sources which always offer either workable exploits, or in-depth technical articles on lots of good stuff:
- http://www.phrack.org - highly technical, pushing the limits of security
- http://www.milw0rm.org -used to be great - not sure any more if its up, lots of 0 day
- http://packetstormsecurity.org/ used to love this site.
- http://www.securityfocus.com - Sometimes have great articles
Also, see this post on securitytube:
Being in Application Security, the website I use most frequently is Fortify Software
This site not only gives an explanation for what the vulnerability category is and how it can be used maliciously, it will frequently give code examples of good and bad practices for a given vulnerability in your language of choice.
This site is more directly related to source code, however even for basic web vulnerability explanations it definitely does the trick, and has helped me immensely when trying to convey to a client what exactly the vulnerability is, and at the same time provide examples to the developers for correction.
I found this site SecurityFocus to have good database of articles. All though sometimes you need to know what you looking for before you can find something solid.
For example, if you looking for vulnerabilities on Adobe Reader there are 0; if you pull up Adobe Acrobat, there are dozens that say Adobe Reader.