28 matches found
CVE-2017-9805: Analysis of Apache Struts RCE Vulnerability in REST Plugin
Just two months ago we published an analysis of a critical remote code execution RCE security vulnerability in Apache Struts. Now Apache Struts has published a new version fixing yet another critical RCE vulnerability September 5, 2017. CVE-2017-9805 is a vulnerability in Apache Struts related to...
Microsoft Excel内存破坏漏洞(CVE-2013-1315)(MS13-073)
BUGTRAQ ID: 62167 CVECAN ID: CVE-2013-1315 Excel是微软公司的办公软件的试算表软件组件。 Microsoft Excel 分析 Excel 文件中的内容的方式中存在一个远程执行代码漏洞。成功利用此漏洞的攻击者可以完全控制受影响的系统。 0 Microsoft Office 2013 Microsoft Office 2010 Microsoft Office 2007 Microsoft Office 2003 临时解决方法： 如果您不能立刻安装补丁或者升级，Sebug建议您采取以下措施以降低威胁： 使用 Microsoft Office...
HDFC Bank website vulnerable to ID Theft and Account Blockade
Indian Security Researcher Jiten Jain from Xebia Architects today revealed that one of the Largest Private Banks in India, HDFC Bank's e-Banking website could be easy target of Unique type of Denial of Service Attack which could result in blocking of e-banking accounts of all its customers. Here ...
HDFC Bank website vulnerable to ID Theft and Account Blockade
Indian Security Researcher Jiten Jain from Xebia Architects today revealed that one of the Largest Private Banks in India, HDFC Bank’s e-Banking website could be easy target of Unique type of Denial of Service Attack which could result in blocking of e-banking accounts of all its customers. Here ...
SOPA in US and Censorship in India: A cocktail to destroy Internet Freedom !
SOPA in US and Censorship in India : A cocktail to destroy Internet Freedom ! As US senators mull over the SOPAStopping Online Piracy Act and PIPAProtecting Intellectual Property Act bills, the world stands witness to a historic moment. Almost all big IT companies like Google, Wikipedia, Facebook...
Israeli Military, Intelligence Sites Down After Threat by Anonymous
The Websites of Israel’s Mossad and Shinbet intelligence services as well as the Israel Defense Forces IDF site were knocked offline today following a Nov. 4 threat by Anonymous. However, members of the group may not be to blame. On Nov. 4, members of Anonymous threatened a cyber-attack in...
Openfire多个输入验证漏洞
BUGTRAQ ID: 32189 Openfire（原名为Wildfire）是一个采用Java开发的跨平台开源实时协作（RTC）服务器。 Openfire服务器中的多个安全漏洞可能允许攻击者在操作系统上执行任意代码，具体取决于特定的运行时环境。 1 绕过认证 在对openfire管理接口的认证中，Tomcat应用服务器中的过滤器org.jivesoftware.admin.AuthCheckFilter确保仅有通过认证的用户才可以访问管理接口，否则将会被重新定向到登录页面。Openfire中的一个错误可能导致无需管理用户凭据便访问内部功能。...
