360手机卫士 for Android 权限许可和访问控制漏洞

CVE-2011-4769 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 360手机卫士,360 MobileSafe com.qihoo360.mobilesafe应用程序2.1.0版本和2.2.0版本中存在漏洞，该漏洞源于未能正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改SMS消息。 0 360手机卫士360 MobileSafe 2.1.0 360手机卫士360 MobileSafe 2.2.0 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

CVE-2011-4769

The 360 MobileSafe com.qihoo360.mobilesafe application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

Code injection

The 360 KouXin com.qihoo360.kouxin application 1.5.3 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

Code injection

The 360 MobileSafe com.qihoo360.mobilesafe application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

CVE-2011-4772

CVE-2011-4772 affects the Android app 360 KouXin (com.qihoo360.kouxin) version 1.5.3. The issue is improper data protection that allows remote attackers to read or modify SMS messages and a contact list via a crafted application. Root cause: insufficient protection of sensitive data. Impact: conf...

CVE-2011-4769

The 360 MobileSafe com.qihoo360.mobilesafe application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

CVE-2011-4769

The CVE-2011-4769 entry pertains to the Android app 360 MobileSafe (com.qihoo360.mobilesafe) in versions 2.x prior to 2.3.0, where data is not properly protected, allowing remote attackers to read/modify SMS messages and a contact list via a crafted application. Vulnerability details across conne...

CVE-2011-4772

The 360 KouXin com.qihoo360.kouxin application 1.5.3 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

BIOS based Virus discovered by Chinese Security Firm

BIOS based Virus discovered by Chinese Security Firm A Chinese AV company 360 discovered a new Trojan, the "BMW Virus" also called Mebromi, that can actually infect a computers BIOS: "BMW 360 Security Center virus is the latest catch of a high-risk virus, the virus that infected a chain BIOS...

Video Game Phishing

US-CERT is aware of reports that some users on the Xbox 360 video game system are receiving potential phishing attempts through an in-game messaging service. In-game message phishing is not a Microsoft issue and has nothing to do with Xbox LIVE. Games are products of third party developers that a...

Snom IP Phone Web Interface Multiple Vulnerabilities

Exploit for hardware platform in category web applications / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: email protected...

360 Web Manager 3.0 Multiple vulnerabilities

Exploit for php platform in category web applications Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0 Google Dork: "Powered by 360 Web Manager 3.0" Date: 15/04/2011 Author: Ignacio Garrido Contact: email protected Software Link: www.360webmanager.com Version: v3.0 Tested on: Linux...

360 Web Manager 3.0 File Access

Exploit Title: Multiple vulnerabilities in 360 Web Manager 3.0 Google Dork: "Powered by 360 Web Manager 3.0" Date: 15/04/2011 Author: Ignacio Garrido Contact: [email protected] Software Link: www.360webmanager.com Version: v3.0 Tested on: Linux 2.6.18 Vulnerability description: 360 Web Manager 3....

[SECURITY] Fedora 14 Update: hugin-2010.2.0-2.fc14

hugin can be used to stitch multiple images together. The resulting image c an span 360 degrees. Another common use is the creation of very high resolution pictures by combining multiple images. It uses the Panorama Tools as backe nd to create high quality images...

360安全浏览器远程代码执行漏洞

360安全浏览器（360SE）是互联网上好用、安全的新一代浏览器，和360安全卫士、360杀毒等软件等产品一同成为360安全中心的系列产品，官方网站在http://se.360.cn。 在360浏览器中存在一个设计上的问题，结合一些其他的漏洞可能导致远程代码执行。 360安全浏览器 厂商补丁： 360SE -------- 目前厂商已经提供补丁或者升级程序，我们建议使用此软件的用户到官方获取最新版本： http://bbs.360.cn/4000002/37699391.html...

Vulnerability: be wary of“help and Support Center”uninvited-vulnerability warning-the black bar safety net

Microsoft has just released 6 months patch, Windows XP it also exposed a new HCP Protocol vulnerabilities. After 3 6 0 Security Center to verify, when the Windows XP users use IE series browsers open hung it to the web, or playing“the infected”of the music file, the PC will automatically...

XSS vulnerability in 360 Web Manager

Vulnerability ID: HTB22377 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityin360webmanager.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

SQL injection vulnerability in 360 Web Manager

Vulnerability ID: HTB22378 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityin360webmanager.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiti...

360 Web Manager 3.0 Cross Site Scripting

Vulnerability ID: HTB22377 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityin360webmanager.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

360 Web Manager 3.0 - webpages-form-led-edit.php SQL Injection

360 Web Manager 3.0 - webpages-form-led-edit.php SQL Injection source: https://www.securityfocus.com/bid/40378/info 360 Web Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...