<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Vreugdenhil Research</title>
	<atom:link href="http://vreugdenhilresearch.nl/feed/" rel="self" type="application/rss+xml" />
	<link>http://vreugdenhilresearch.nl</link>
	<description>Research, Vulnerabilities and Exploits</description>
	<lastBuildDate>Tue, 09 Feb 2010 11:12:31 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Old bugs: YaBB</title>
		<link>http://vreugdenhilresearch.nl/2010/02/old-bugs-yabb/</link>
		<comments>http://vreugdenhilresearch.nl/2010/02/old-bugs-yabb/#comments</comments>
		<pubDate>Mon, 08 Feb 2010 16:41:51 +0000</pubDate>
		<dc:creator>Peter</dc:creator>
				<category><![CDATA[exploits]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[POC]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[vulnerabilities]]></category>

		<guid isPermaLink="false">http://vreugdenhilresearch.nl/?p=63</guid>
		<description><![CDATA[I decided to write up on some old and funny bugs I found a while back. Starting today with &#8216;remote&#8217; code execution in YaBB version 2.2 the problem is fixed in 2.4 (or so it seems at first glance)
YaBB (yet another bulletin board) is as the name says a bulletin board. Its written in perl [...]]]></description>
		<wfw:commentRss>http://vreugdenhilresearch.nl/2010/02/old-bugs-yabb/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ICQ Exploit CVE-2006-5650</title>
		<link>http://vreugdenhilresearch.nl/2009/07/icq-exploit-cve-2006-5650/</link>
		<comments>http://vreugdenhilresearch.nl/2009/07/icq-exploit-cve-2006-5650/#comments</comments>
		<pubDate>Mon, 06 Jul 2009 15:54:02 +0000</pubDate>
		<dc:creator>Peter</dc:creator>
				<category><![CDATA[exploits]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[ActiveX]]></category>
		<category><![CDATA[CVE]]></category>
		<category><![CDATA[CVE-2006-5650]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[ICQ]]></category>
		<category><![CDATA[POC]]></category>

		<guid isPermaLink="false">http://vreugdenhilresearch.nl/?p=26</guid>
		<description><![CDATA[I'll kick off with imho one of my more interresting findings. Its not interresting due to the nature of the vulnerability, but due to the possible impact. It was quite some time ago already, back in the summer of 2006 when I was looking into COM objects that came installed with ICQ. If you're unfamiliair with COM objects and how that 'sneak' in with program installations, I suggest you read this article. Anyway, installing ICQ added a few COM objects that were accesible as ActiveX Objects in IE6 without warning. Most of them were a bit boring, but there was a nice design error in one of them]]></description>
		<wfw:commentRss>http://vreugdenhilresearch.nl/2009/07/icq-exploit-cve-2006-5650/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How it began</title>
		<link>http://vreugdenhilresearch.nl/2009/06/in-the-beginning/</link>
		<comments>http://vreugdenhilresearch.nl/2009/06/in-the-beginning/#comments</comments>
		<pubDate>Tue, 30 Jun 2009 19:09:57 +0000</pubDate>
		<dc:creator>Peter</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[vulnerabilities]]></category>
		<category><![CDATA[welcome]]></category>

		<guid isPermaLink="false">http://vreugdenhilresearch.nl/?p=3</guid>
		<description><![CDATA[Although this is my first post I have been searching for vulnerabilities since 1998. Back then it was mostly unsafe php includes and evals,  and there were a lot them. I can remember them all, but funnily enough some still show up in google searches. But I doubt anyone will be interrested in those anymore so I'll try to write more about my recent work. Most of my research I sell to either ZDI or iDefense so I wont be able to disclose much of them untill they are published. But since Im not a strong believer in fulldisclosure anyway I have no problem with that :) For some of my work I will post POC and detailed analyses when I have the time, others I wont even mention.

]]></description>
		<wfw:commentRss>http://vreugdenhilresearch.nl/2009/06/in-the-beginning/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
