116 matches found
Struts2 remote code execution vulnerability S2-0 3 3 technology analysis and protection solution-vulnerability warning-the black bar safety net
Apache Struts2 in open dynamic method invocation Dynamic Method Invocation case, the attacker using the REST plug-in calls a malicious expression can be remote code execution. This vulnerability number CVE-2 0 1 6-3 0 8 7, named S2-0 3 of 3. This article on the vulnerability of technical analysis...
BadLock vulnerability of technology to track and risk protection-vulnerability warning-the black bar safety net
Nsfocus continued focus on domestic security trends, as early as 3 months when first released BadLock threat warning notices. 4 on 1 on 2, Microsoft patch day schedule. At this time Microsoft released the patch, contains a BadLock vulnerability that can be on a windows System and the Samba servic...
Microsoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File
Microsoft Windows Media Center Library - Parsing Remote Code Execution aka self-executing MCL File Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file CVE-2015-6131 Software Vendor: Microsoft Software version : MS Windows Media Center latest version on any...
Microsoft Windows Media Center Library Parsing RCE Vulnerability aka "self-executing" MC
Exploit for windows platform in category remote exploits Title: Microsoft Windows Media Center Library Parsing RCE Vuln aka "self-executing" MCL file CVE-2015-6131 Software Vendor: Microsoft Software version : MS Windows Media Center latest version on any Windows OS. Software Vendor Homepage:...
PHP remote DoS vulnerability in-depth analysis and protection solution-vulnerability warning-the black bar safety net
5 month 1 4 day, domestic broke the php remote DoS vulnerability, the official number 6 9 3 6 4 in. Use the vulnerability to construct the poc to initiate a link, it is easy to cause the target host cpu utilization 1 0 0%, to PHP more version. Nsfocus Threat Response Center immediately launched t...
Microsoft Project Spartan bug bounty launched
Microsoft today kicked off a two-month bug hunt for vulnerabilities in Project Spartan, the company’s new browser set to launch alongside Windows 10 later this year, one of several announced additions to its various bounty programs. “Microsoft’s new browser will be the onramp to the Internet for...
High-Volume, High-Rate DDoS Attacks Persist
As expected, the numbers back up the continued proliferation of both high-volume and high-rate distributed denial of service attacks – like the ones executed via NTP amplification – over the last few months. NSFOCUS, a security firm that measures DDoS traffic, released its Mid-Year Threat Report...
Apache Struts includeParams Remote Code Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
In those years, those Apache Struts2 vulnerability-vulnerability warning-the black bar safety net
Each Apache Struts2 vulnerabilities the outbreak of the on the Internet set off a Reign of terror, we have compiled in recent years Apache Struts2 high-risk vulnerabilities in the information for your reference. For the Apache Struts2 vulnerability, nsfocus has provided an online checking tool to...
Microsoft Internet Explorer内存破坏漏洞(CVE-2014-0297)
BUGTRAQ ID: 66023 CVECAN ID: CVE-2014-0297 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 没有正确访问内存对象，在实现上存在远程代码执行漏洞，成功利用后可破坏内存，在当前用户权限下执行任意代码。 0 Microsoft Internet Explorer 6-11 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 设置互联网和内联网安全区域设置为“高” 配置IE在运行活动脚本之前提示或直接禁用。 应用Microsoft Fix...
Microsoft Internet Explorer内存破坏漏洞(CVE-2014-0298)
BUGTRAQ ID: 66025 CVECAN ID: CVE-2014-0298 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 没有正确访问内存对象，在实现上存在远程代码执行漏洞，成功利用后可破坏内存，在当前用户权限下执行任意代码。 0 Microsoft Internet Explorer 6-11 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 设置互联网和内联网安全区域设置为“高” 配置IE在运行活动脚本之前提示或直接禁用。 应用Microsoft Fix...
Microsoft Internet Explorer内存破坏漏洞(CVE-2014-0299)
BUGTRAQ ID: 66026 CVECAN ID: CVE-2014-0299 Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer 没有正确访问内存对象，在实现上存在远程代码执行漏洞，成功利用后可破坏内存，在当前用户权限下执行任意代码。 0 Microsoft Internet Explorer 6-11 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 设置互联网和内联网安全区域设置为“高” 配置IE在运行活动脚本之前提示或直接禁用。 应用Microsoft Fix...
Microsoft Mitigation Bypass Bug Bounty Winner Yang Yu
Yang Yu is no stranger to writing mitigation bypasses for Microsoft Windows products. A year ago at the CanSecWest conference in Vancouver, the 35-year-old security researcher from Beijing did an extensive presentation on bypassing Address Space Layout Randomization ASLR and Data Execution...
Microsoft Windows Print Spooler打印作业处理漏洞（MS13-001)
CVECAN ID: CVE-2013-0011 Microsoft Windows是微软公司推出的一系列操作系统。 Microsoft Windows Print Spooler服务没有正确处理特制的打印作业，在实现上存在远程代码执行漏洞，可导致任意代码执行。 0 Microsoft Windows Server 2008 Microsoft Windows 7 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 禁用Print Spooler服务 厂商补丁： Microsoft ---------...
Microsoft XML Core Services XSLT解析漏洞（MS13-002)
CVECAN ID: CVE-2013-0007 Microsoft Windows是微软公司推出的一系列操作系统。 Microsoft XML Core Services在解析 XSLT 内容时存在不明细节错误，可被利用导致内存破坏,甚至执行任意代码。 0 Microsoft Office 2007 Microsoft Office Office 2003 Professional Edi Microsoft Office 2003 Student and Teacher Edi Microsoft Office 2003 Standard Edition Microsoft Offi...
Oracle JAVA JRE 7 Update 9 'MidiDevice.Info' 类远程代码执行漏洞
BUGTRAQ ID: 56706 Oracle Java Runtime Environment JRE是一款为JAVA应用程序提供可靠运行环境的解决方案。 Oracle JRE 1.7.0 Update 9内MidiDevice.Info的java类存在安全漏洞，远程攻击者可利用此漏洞在受影响应用的上下文中执行任意代码。 0 Oracle Java Runtime Environment 7 Update 9 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 禁用java插件 厂商补丁： Oracle ------...
Microsoft Word PAPX节破坏远程代码执行漏洞（MS12-064）
BUGTRAQ ID: 55781 CVECAN ID: CVE-2012-0182 Microsoft Word属于办公软件是微软公司的一个文字处理器应用程序。 Microsoft Office处理特制Word文件时存在远程代码执行漏洞，成功利用此漏洞的攻击者可完全控制受影响系统。 0 Microsoft Word 2007 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 使用Microsoft Office File Block策略阻止打开来自未知或可疑源和位置的Office 2003 及更早版本文档。...
Microsoft System Center Configuration Manager跨站脚本执行漏洞（MS12-062)
BUGTRAQ ID: 55430 CVE ID: CVE-2012-2536 系统中心配置管理器2007 R2（System Center Configuration Manager 2007 R2）—以前被称为 Systems Management Server SMS —是在物理、虚拟、分布以及移动环境之间综合评估、配置和升级服务器、客户端和设备的解决方案。 System Center Configuration Manager中存在XSS漏洞，代码可被反注入到用户的结果页面，导致单击后执行攻击者控制的代码。 0 Microsoft Systems Management Serve...
Microsoft Visual Studio Team Foundation Server跨站脚本执行漏洞（MS12-061)
BUGTRAQ ID: 55409 CVE ID: CVE-2012-1892 Microsoft Visual Studio Team Foundation Server是微软应用生命周期管理解决方案的核心协作平台，可实现软件递送流程自动化，包括有效管理软件开发项目的工具。 Microsoft Visual Studio Team Foundation Server存在反射XSS漏洞,可允许攻击者注入客户端脚本到IE的用户实例中或所有通过Team Foundation Server Web访问的Web浏览器中。该脚本可欺骗内容、泄露信息、以目标用户权限执行任意操作。 0 Microso...
Microsoft IE属性移除远程代码执行漏洞 (MS12-044)
CVE ID: CVE-2012-1524 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer访问已经删除的对象时存在安全漏洞，可通过执行任意代码破坏内存。 0 Microsoft Internet Explorer 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 将互联网和本地内联网安全区域设置为“高”阻止这些区域中的ActiveX控件和活动脚本。 将IE配置为运行活动脚本之前提示或禁止。 厂商补丁： Microsoft ---------...