1076 matches found
360安全浏览器远程代码执行漏洞
360安全浏览器（360SE）是互联网上好用、安全的新一代浏览器，和360安全卫士、360杀毒等软件等产品一同成为360安全中心的系列产品，官方网站在http://se.360.cn。 在360浏览器中存在一个设计上的问题，结合一些其他的漏洞可能导致远程代码执行。 360安全浏览器 厂商补丁： 360SE -------- 目前厂商已经提供补丁或者升级程序，我们建议使用此软件的用户到官方获取最新版本： http://bbs.360.cn/4000002/37699391.html...
Vulnerability: be wary of“help and Support Center”uninvited-vulnerability warning-the black bar safety net
Microsoft has just released 6 months patch, Windows XP it also exposed a new HCP Protocol vulnerabilities. After 3 6 0 Security Center to verify, when the Windows XP users use IE series browsers open hung it to the web, or playing“the infected”of the music file, the PC will automatically...
SQL injection vulnerability in 360 Web Manager
Vulnerability ID: HTB22378 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityin360webmanager.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiti...
XSS vulnerability in 360 Web Manager
Vulnerability ID: HTB22377 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityin360webmanager.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...
360 Web Manager 3.0 Cross Site Scripting
Vulnerability ID: HTB22377 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityin360webmanager.html Product: 360 Web Manager Vendor: 360 Web Manager Vulnerable Version: 3.0 Vendor Notification: 10 May 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...
360 Web Manager 3.0 - webpages-form-led-edit.php SQL Injection
360 Web Manager 3.0 - webpages-form-led-edit.php SQL Injection source: https://www.securityfocus.com/bid/40378/info 360 Web Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
Cross-site Scripting Vulnerability in 360 Web Manager
High-Tech Bridge SA Security Research Lab has discovered vulnerability in 360 Web Manager which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in 360 Web Manager The vulnerability exists due to input sanitation error in the "IDM" parameter in...
360保险箱SafeBoxKrnl.sys驱动本地权限提升和拒绝服务漏洞
BUGTRAQ ID: 39940 360保险箱是国内第一款完全免费的防盗号软件。 360保险箱所使用的SafeBoxKrnl.sys驱动在处理IOCTL时错误的向IoFreeMdl函数传送了用户空间指针，本地用户可以通过提交恶意IOCTL请求触发内核内存破坏，导致执行任意内核态代码；此外SafeBoxKrnl.sys驱动中的错误还允许本地用户终止指定的进程。 奇虎360 360保险箱 3.0.0.1010 厂商补丁： 奇虎360 ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.360.cn/...
360杀毒和360安全卫士内核驱动多个本地拒绝服务漏洞
BUGTRAQ ID: 39936 360杀毒和360安全卫士都是在中国广泛使用的免费杀毒软件。 360杀毒和360安全卫士所使用的profos.sys和360FkAdv.sys驱动没有正确地验证从用户空间所传送的进程对象指针，本地用户可以通过提交恶意的IOCTL请求导致内核崩溃。 奇虎360 360安全卫士 6.1.5.1010 奇虎360 360杀毒 1.1.0.1096 厂商补丁： 奇虎360 ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.360.cn/...
3 6 0 security guards bregdrv. sys and bregdll. dll file local privilege escalation exploit.-vulnerability warning-the black bar safety net
3 6 0 Security Defender is in China, the widely used free Internet security software. 3 6 0 security guards in the installation process on the user's system to install a registry operation program, the program can be used to bypass theoperating systemthe security check mechanism of any operation...
360安全卫士bregdrv.sys和bregdll.dll文件本地权限提升漏洞
360安全卫士是在中国广泛使用的免费上网安全软件。 360安全卫士会在安装过程中在用户系统上安装一个注册表操作程序，该程序可以被用来绕过操作系统的安全检查机制任意操作（设置、删除等）用户的注册表。由于该程序没有对调用者进行检查，导致任意程序（如各种木马程序等）可以通过该后门任意操作（设置、删除等）用户的注册表系统。 该程序包括两个文件： 1...
360 Security Guard breg device drivers Privilege Escalation Vulnerabilitie
Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Security Guard, which can be exploited by malicious, local users to gain escalated privileges. An error in the...
Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation
Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation / Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is ver...
Qihoo 360 Security Guard breg device drivers Privilege Escalation
Exploit for unknown platform in category local exploits =============================================================================== Qihoo 360 Security Guard breg device drivers Privilege Escalation Vulnerability =============================================================================== /...
Qihoo 360 Security Guard 6.1.5.1009 Privilege Escalation
Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Security Guard, which can be exploited by malicious, local users to gain escalated privileges. An error in the...
Qihoo 360 Security Guard privilege escalation
IOCTL privilege escalation...
Qihoo 360 Security Guard 6.1.5.1009 - breg device drivers Privilege Escalation
/ Software Link: http://sd.360.cn/sddownload1.html?src=360home Version: 6.1.5.1009 Tested on: Windows xp Vendor : Qihoo 360 Affected Software : 360 Security Guard 6.1.5.1009 Description: Qihoo 360 Security Guard is very famous in China. Some vulnerabilities have been reported in Qihoo 360 Securit...
openSUSE Security Update : python (python-360)
Integer Overflows in the python imageop module potentially allowed attackers to execute arbitrary code CVE-2008-4864. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update python-360. The text...
How to break the Xbox 360 security model
This Google Tech Talk features Michael Steil and Felix Domke discussing the security model of the Microsoft Xbox 360 and how to break it...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...