In der Sicherheitsforschung werden Sicherheitslücken aktiv gesucht und an die Verantwortlichen gemeldet werden. Das Ziel ist es, dass Sicherheitslücken entdeckt und bereits behoben wurden, bevor sie aktiv für böswillige Zwecke ausgenutzt werden.
Leider reagieren die meisten Hersteller und Betreiber hier nicht sehr kooperativ. So werden gemeldete Sicherheitslücken meist entweder heruntergespielt (nur „Testdaten“) oder sogar abgestritten (bereits durch „interne Audits“ gefunden) oder es erfolgt überhaupt keine Antwort.
Ich behalte wir vor, gemeldete, aber noch nicht behobene Sicherheitslücken nach einer angemessenen Zeit (aktuell gehe ich bei 90 Tagen als „angemessen“ aus, verlängere diesen Zeitraum aber gerne bei wirklich schweren Lücken oder auf nachvollziehbare Anfrage) zu veröffentlichen.
Vor mir gefundene und gemeldete Sicherheitslücken:
| Software | Version | Schwachstellentyp |
| Board 51 | 1.0 | Leak of Sensitive Data |
| BRILLANT & CO Website | SQL Injection | |
| egavilanmedia Login System | 1.0 | SQL Injection |
| felixsaid Car Rental Management System | 1.0 | Multiple SQL Injections |
| janobe Baby Care System | 1.0 | Multiple SQL Injections |
| janobe Cemetery Mapping System | 1.0 | Multiple SQL Injections |
| janobe Class Record System | 1.0 | Multiple SQL Injections |
| janobe Grading System | 1.0 | Multiple SQL Injections |
| janobe Hotel Reservation System | 1.0 | Multiple SQL Injections |
| janobe Job Search System | 1.0 | Multiple SQL Injections |
| janobe Library System | 1.0 | Multiple SQL Injections |
| janobe Pharmacy Management System | 1.0 | Multiple SQL Injections |
| janobe Vehicle Management System | 1.0 | SQL Injection |
| jkev Learning Management System | 1.0 | SQL Injection |
| mayuri_k Advocate Office Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Billing System | 1.0 | Multiple SQL Injections |
| mayuri_k Canteen Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Church Management System | 1.1 | SQL Injection |
| mayuri_k Courier Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Diagnostic Lab Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Employee Management System | 1.0 | Multiple SQL Injections |
| mayuri_k E-Pass Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Fee Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Garage Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Gas Agency Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Gym Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Hospital Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Inventory Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Lead Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Loan Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Parking Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Pet Grooming Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Petrol Pump Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Pharmacy Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Practice Management System | 1.0 | Multiple SQL Injections |
| mayuri_k SACCO Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Salon Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Task Management System | 1.0 | Multiple SQL Injections |
| mayuri_k Tours & Travel Management System | 1.0 | Multiple SQL Injections |
| Nabopoll | 1.1.2 | Multiple SQL Injections |
| OpenDCIM | 23.04 | Cross Site Scripting |
| oretnom23 AC Repair and Services Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Ahira | 1.0 | Multiple SQL Injections |
| oretnom23 Air Cargo Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Art Gallery Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Badminton Court Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Bank Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Banking System | 1.0 | Multiple SQL Injections |
| oretnom23 Blood Bank Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Book Store Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Bus Booking System | 1.0 | Multiple SQL Injections |
| oretnom23 Cab Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Computer Aided Instruction in World Literature | 1.0 | Multiple SQL Injections |
| oretnom23 Car Driving School Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Church Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Clinic Patient Management System | 2.0 | Multiple SQL Injections |
| oretnom23 Computer Laboratory Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Construction Project Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Content Management System | 0.1 | Multiple SQL Injections |
| oretnom23 Customer Relationship Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Customer Support System | 1.0 | Multiple SQL Injections |
| oretnom23 Dormitory Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Enrollment System | 1.0 | Multiple SQL Injections |
| oretnom23 Event Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Event Registration and Attendance System | 1.0 | Multiple SQL Injections |
| oretnom23 Faculty Scheduling System | 1.0 | Multiple SQL Injections |
| oretnom23 File Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Fire Reporting System | 1.0 | Multiple SQL Injections |
| oretnom23 Flight Booking System | 1.0 | Multiple SQL Injections |
| oretnom23 Food Ordering System | 1.0 | Multiple SQL Injections |
| oretnom23 Gym Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Hotel Management System | 1.0 | Multiple SQL Injections |
| oretnom23 House Rental Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Human Resources Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Internship Timesheet System | 1.0 | Multiple SQL Injections |
| oretnom23 Judging Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Laundry Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Leave Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Loan Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Lodge Reservation Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Medicine Ordering System | 1.0 | Multiple SQL Injections |
| oretnom23 Medicine Tracking System | 1.0 | Multiple SQL Injections |
| oretnom23 Mobile Store Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Online Diagnostics Lab Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Online Discussion Forum System | 1.0 | Multiple SQL Injections |
| oretnom23 Online Marriage Registration System | 1.0 | Multiple SQL Injections |
| oretnom23 Pharmacy Sales Inventory System | 1.0 | Multiple SQL Injections |
| oretnom23 Prison Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Project Time Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Railway Reservation System | 1.0 | Multiple SQL Injections |
| oretnom23 Realtime Quiz System | 1.0 | Multiple SQL Injections |
| oretnom23 Repair Shop Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Sales Inventory System | 1.0 | Multiple SQL Injections |
| oretnom23 Sanitization Management System | 1.0 | Multiple SQL Injections |
| oretnom23 School Fees Management System | 1.0 | Multiple SQL Injections |
| oretnom23 School Log Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Service Provider Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Simple Bidding System | 1.0 | Multiple SQL Injections |
| oretnom23 Simple Customer Relationshop Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Simple Invoice System | 1.0 | Multiple SQL Injections |
| oretnom23 Sports Complex Booking System | 1.0 | Multiple SQL Injections |
| oretnom23 Students Attendance Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Task Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Theme Park Ticketing System | 1.0 | Multiple SQL Injections |
| oretnom23 Traffic Offense Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Vacation Tracking System | 1.0 | Multiple SQL Injections |
| oretnom23 Vehicle Parking Area Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Vehicle Service Management System | 1.0 | Multiple SQL Injections |
| oretnom23 Yoga Class Registration System | 1.0 | Multiple SQL Injections |
| razormist Complaint Management System | 1.0 | Multiple SQL Injections |
| Sportzentrum Vaterstetten Website | SQL Injection | |
| Storm Warning Paintball (Kanada) | Multiple SQL Injections |