UBUNTU-CVE-2015-2808

The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic...

SSL/TLS Suffers ‘Bar Mitzvah Attack’vulnerability detection method and repair recommendations-vulnerability warning-the black bar safety net

0x01 introduction April Fool's Day is coming, and SSL again due to the Bar Mitzvah Attack vulnerability to get everyone to not mind. Held in Singapore's Black Hat Asia Security Conference, the Imperva security Director Itsik Mantin detailed description of how to use the attack principle,the...

By the commandment of the ritual attack: - SSL/TLS and exposure of new vulnerabilities, plaintext read data transmission-vulnerability warning-the black bar safety net

! The SSL/TLS Protocol is a widely used encryption Protocol, and researchers recently have exposed a section called“by the commandment of ritual”new means of attack, to steal through the SSL and TLS Protocol of the transmission of confidential data such as Bank card numbers, passwords and other...

Tipask question Answering System 1 2 injection package-vulnerability warning-the black bar safety net

Participate in a period of public test of the time, manufacturers use this system, download down looked, found injected into a large heap. Since the program after the end of the sql statement in many places without using the single quotes the parameter is enclosed, so the user input of the check...

Cool Dog PC client remote JS code injection vulnerability(impact of the National cool Dog the user can hung it)-vulnerability warning-the black bar safety net

Mainly using the three vulnerability completed 1 cool Dog Radio backgroundxssvulnerability 2 cool Dog Radio personal background override vulnerability 3 cool Dog Radio home storage-typexssvulnerability 一 :http://www.kugou.com/fm2/app/musicshow/admin/njadmin/index.php Cool Dog Radio personal...

13-year-old SSL/TLS Weakness Exposing Sensitive Data in Plain Text

The most popular and widely used encryption scheme has been found to be weaker with the disclosure of a new attack that could allow attackers to steal credit card numbers, passwords and other sensitive data from transmissions protected by SSL secure sockets layer and TLS transport layer security...

Hackers use PDF generator to steal the WEB files on the server-the vulnerabilities and early warning-the black bar safety net

TCPDF PDF generator is the most popular today for creating a PDF document the PHP library one of today's most popular open source projects. It every day with millions of user usage, the carrier generally is a CMS program or other WEB application. However, the hacker using TCPDF's a loophole that...

Sina micro-activities there is fishing exploits user information for fear of disclosure-vulnerability warning-the black bar safety net

Through the vulnerability enables the system to automatically send the information to tell you have winning increasing confidence in! ! This is sent after the event within 3 minutes the recruitment of the user ! In ten minutes I'll gather up 3 0 0 name of the user information! Liar proof: 1 2 nex...

Betster SQL injection vulnerability-vulnerability warning-the black bar safety net

Betster, also known as the PHP Betoffice is a set used to create the based on PHP, MySQL, and JavaScript online casino software. Betster 1.0.4 version in the presence ofSQL injectionvulnerability stems from the showprofile. php or categoryedit. the php script does not adequately...

Mastery oa at the secondary injection vulnerability-vulnerability warning-the black bar safety net

Brief description: Paralysis of the software Detailed description: ! QQ 图片 20141215110029.jpg Add the attention of the people, many functions rely on the data code area POST http://121.40.134.14/general/personinfo/concernuser/update.php HTTP/1.1 Host: 121.40.134.14 Connection: keep-alive...

Google could be forged domain mailbox fishing-vulnerability warning-the black bar safety net

! Recently Google Apps for Work exposed a vulnerability that an attacker can use the vulnerability to falsification of any of the site's domain name mailbox, posing as company employees to the victims, sending phishing mail. Google domain mail service 如果 你 想 弄 一 个 类似 [email protected] 的 DIY 邮箱 来 代替...

CVE-2015-2239

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

CVE-2015-2239

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

Cross site scripting

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

UBUNTU-CVE-2015-2239

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

CVE-2015-2239

Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the "1993 search" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveragin...

CVE-2015-2239

Chrome before 41.0.2272.76 is affected by CVE-2015-2239, where the browser’s interaction between the 1993 search features and restore-from-disk RELOAD transitions can be abused to spoof the address bar on a search-results page via a compromised search engine or a search-engine XSS vulnerability. ...

CVE-2015-2239

Removed by vendor...

Kingsoft enterprise terminal protection optimization system Web Console without having to log any file deleted-bug warning-the black bar safety net

Kingsoft enterprise terminal protection optimization system Web Console without having to log arbitrary file deletion Arbitrary file deletion: File:/tools/manage/deletetools.php code area children; $i++ if $xml-tool$i-id == $id @unlink"../".$ xml-tool$i-name; if$xml-tool$i-image != "test. png"...

Tencent's wechat is shaking vulnerability, the use of the phone number cause account lost can't get back in!-- Theory of of personal information security and protection-vulnerability warning-the black bar safety net

This article was written today at 2 p.m. much, did not immediately issued because the cock to the clouds first feedback about the cock always felt the clouds are very T, it is desirable to have an account, but the cock is too water, but did not pass the audit, it may present cock of the expressio...