USN-3143-1: c-ares vulnerability

Gzob Qq discovered that c-ares incorrectly handled certain hostnames. A remote attacker could use this issue to cause applications using c-ares to crash, resulting in a denial of service, or possibly execute arbitrary code...

On QQ browser and other applications“WormBrowser”vulnerability briefings-vulnerability warning-the black bar safety net

Recently, the national information security vulnerabilities library CNNVD received Pangu team on“WormBrowser”vulnerability of the relevant circumstances of the message sent, the vulnerability exists in the Android version of the QQ browser and QQ hot two applications. Due to the above products, a...

[SECURITY] [DSA 3682-1] c-ares security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3682-1 [email protected] https://www.debian.org/security/ Florian Weimer September 30, 2016 https://www.debian.org/security/faq -...

DSA-3682-1 c-ares - security update

Bulletin has no description...

QQ browser Wormable Browser vulnerability

Source link: http://blog.pangu.io/wormable-browser/ Vulnerability description Android QQ browser, QQ hot spots and other applications on the local wifi started, it will monitor local 8786 port, and listens to all local ip addresses. When the attacking party and the attacked party is on the same L...

Tencent QQ group system has design logic loopholes

Tencent QQ is an Internet-based instant messaging IM software. There is a design logic vulnerability in the Tencent QQ group system that allows an attacker to modify form information to lower the QQ group level...

Security Bypass Vulnerability in QQ Browser for Android

QQ Browser is a web browser developed by Tencent. A security bypass vulnerability exists in the Android version of QQ Browser. Since QQ Browser and QQ Hotspot for Android are in a local wifi LAN environment, they listen to local port 8786 and all local ip addresses. An attacker can use the...

Old versions of the libupnp library security risk analysis-vulnerability warning-the black bar safety net

0x1 libupnp description libupnp is a Portable, Portable UPnP C language development package, UPnP is a network Protocol that allows the device to automatically search for and set. Libupnp to the latest version is 1. 6. 2 0, the compile time for 2 0 1 6 7 May 7, last version of 1. 6. 1 9, The...

QQ browser privacy disclosure report-vulnerability warning-the black bar safety net

0x00 description QQ browser is Tencent development of a web browser, for Android, Windows, Mac and iOS and other platforms. Compared to the built-in browser, QQ browser provides richer functionality, for example, increase the tag window, and integrating the chat platform, etc. In the report a...

QQ HD - Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application QQ HD published at the 'play' market has multiple vulnerabilities...

QQ International - Chat & Call - Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application QQ International - Chat & Call published at the 'play' market has multiple vulnerabilities...

See how I withdraw your QQ message, not fix-bug warning-the black bar safety net

0x01 Specific ideas: In with the PC end of windows chat, First you need to put the QQ chat friends window using colorful bubbles off, Then you send each other a message,right click your message, There will be a withdraw option,don't worry. point, Waiting for the other to send a message to come ov...

Saved the day: QQ music“wormhole”adventures-vulnerability warning-the black bar safety net

0x00 background A weekend afternoon, the terminal security team of little friends at the seaside mission built to roast meat and drink wine, TSRC vulnerability report mailbox receive Trend Micro's classmates sent the vulnerability report, the report referred to the mobile phone QQ music using the...

xpshop商城管理系统储存型XSS，可盲打后台（demo演示+浏览器通杀）

简要描述： xss 详细说明： WooYun: xpshop商城管理系统储存型XSS，可盲打后台 继续来 首先来到demo演示地址注册个账号：http://etp.xpshop.cn/ 然后随便选个东西加入购物车 这里有个订单附言，我们插入XSS语句："/ 然后提交，提示提交成功 接下来点击查看订单后，成功弹窗 https://images.seebug.org/upload/201503/15212340546e8f2f021b77...

Tencent QQ browser IOS version of the URL spoofing vulnerability-vulnerability warning-the black bar safety net

QQ browser for ios will be in the page title of the body displayed on the address bar, that URL spoofing greatly reduce the cost, may indirectly cause the user to suffer from phishing attacks. First construct a and mail. qq. com approximate domain name, POC at the following address: code area...

致远公司某QQ邮箱泄漏导致公司内部人员联系方式信息泄漏（包含手机，QQ，邮箱等）

简要描述： 致远公司某QQ邮箱泄漏导致公司内部人员联系方式信息泄漏（包含手机，QQ，邮箱等） 详细说明： 为什么取这个名字呢 事情还要从这说起 WooYun: 都都宝某系统弱口令涉及公司内部个人信息 由于都都宝的OA不善 导致里面的配置邮箱帐号以及泄漏 后确认是致远内部人员的 而这两天没事又试试看 结果还可以登 这里顺便吐槽一句都都宝 这个弱口令漏洞 都提交了 你们还不修复啊？刚登了下 人还不少 邮箱帐号：[email protected] 密码：lee841126 登录进这个邮箱后··· https://images.seebug...

[SECURITY] Fedora 20 Update: pidgin-2.10.10-1.fc20

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 21 Update: pidgin-2.10.10-2.fc21

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

PHPYUN multiple SQL injection and rapid positioning disregard 3 6 0 defense-a vulnerability warning-the black bar safety net

Other local estimates are little friends are digging done, we see not often is attention of place In the QQ log in here qqconnect. class. php file We take a look qq landing, will bind the qq of the relevant information: code area function qqbindaction if$GET'usertype'=='1' || $GET'usertype'=='2' ...

CVE-2014-5605

The QQ Copy aka com.digimobistudio.qqcopy application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...