用友某CRM某页面SQL注入（无需登录)

简要描述： sql 盲注 详细说明： 用友turbocrm 。根据搜索引起的结果得知多为中小企业使用。数量还不少。 其找回密码的接口存在sql 注入。 比如http://118.122.126.76:7788/login/forgetpswd.php?loginsys=3&orgcode=111&loginname=1111 GET 不需要登录可以直接注入，不过是时间盲注，比较慢，其后端数据库使用sql server。多数没有设置良好的安全基线，可以直接执行命令。 经过测试发现并不是所有的turiocrm版本都存在，存在该链接的版本基本都有漏洞。...

Hacker Puts Hosting Service Code Spaces Out of Business

Code Spaces, a code-hosting and software collaboration platform, has been put out of business by an attacker who deleted the company’s data and backups. Officials wrote a lengthy explanation and apology on the company’s website, promising to spend its current resources helping customers recover...

CVE-2014-4191

The TLS implementation in EMC RSA BSAFE-C Toolkits aka Share for C and C++ sends a long series of random bytes during use of the DualECDRBG algorithm, which makes it easier for remote attackers to obtain plaintext from TLS sessions by recovering the algorithm's inner state, a different issue than...

openSUSE Security Update : postgresql91 (openSUSE-SU-2013:0318-1)

PostgreSQL was updated to version 9.1.8 bnc802679 : - Prevent execution of enumrecv from SQL CVE-2013-0255. - Fix multiple problems in detection of when a consistent database state has been reached during WAL replay - Update minimum recovery point when truncating a relation file - Fix recycling o...

openSUSE Security Update : libopenssl-devel (openSUSE-SU-2012:0083-1)

Various security vulnerabilities have been fixed in openssl : - DTLS plaintext recovery attack CVE-2011-4108 - uninitialized SSL 3.0 padding CVE-2011-4576 - malformed RFC 3779 data can cause assertion failures CVE-2011-4577 - SGC restart DoS attack CVE-2011-4619 - invalid GOST parameters DoS atta...

openSUSE Security Update : gnutls (openSUSE-2012-121)

Fix GnuTLS DTLS plaintext recovery attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-121. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc'...

openSUSE Security Update : xtrabackup (openSUSE-SU-2014:0245-1)

This update fixes the following security and non-security issues with xtrabackup : - update to 2.1.7 bnc860488 - general changes : - rebased on MySQL versions 5.5.35 and 5.6.15 - now uses libgcrypt randomization functions for setting the IV lp1255300 bnc852224 CVE-2013-6394 - bugs fixed : - After...

openSUSE Security Update : openssl (openSUSE-2012-52)

openssl was prone to several security issues : - DTLS Plaintext Recovery Attack CVE-2011-4108 - Uninitialized SSL 3.0 Padding CVE-2011-4576 - Malformed RFC 3779 Data Can Cause Assertion Failures CVE-2011-4577 - SGC Restart DoS Attack CVE-2011-4619 - Invalid GOST parameters DoS Attack CVE-2012-002...

Hackers behind iPhone Ransom Attacks Arrested in Russia

A cyber campaign that was targeting iPhone and iPad owners with a sophisticated Ransomware in Australia and New Zealand last month, drawn special attention of online media and security analysts. Russian Authorities have arrested two young hackers from Moscow for their alleged involvement in...

OpenSSL security vulnerabilities

Information leakage, key recovery. This vulnerability is actively used in-the-wild...

ProduKey - Recover lost Windows product key (CD-Key) and Office 2003/2007 product key

ProduKey is a small utility that displays the ProductID and the CD-Key of Microsoft Office Microsoft Office 2003, Microsoft Office 2007, Windows Including Windows 7 and Windows Vista, Exchange Server, and SQL Server installed on your computer. You can view this information for your current runnin...

Apple Devices Hacked by 'Oleg Pliss', held to Ransom

From last few years Ransomware malwares are targeting Windows users Worldwide and experts predicted that it was just a matter of time until ransomware would hit mobile devices and other Desktop operating systems like Mac, iOS, Android etc. A Few weeks back we reported about a Ransomware malware...

[SECURITY] Fedora 19 Update: srm-1.2.13-1.fc19

srm is a secure replacement for rm1. Unlike the standard rm, it overwrites the data in the target files before unlinkg them. This prevents command-line recovery of the data by examining the raw block device. It may also help frustrate physical examination of the disk, although it's unlikely that...

FineCMS任意用户密码重置

简要描述： FineCMS任意用户密码重置 详细说明： finecms最新版2.3.0，官方2014年4月18号更新。 finecms在密码找回功能处存在设计缺陷，导致可重置任意用户密码。 来看看密码找回的代码： / 找回密码 / public function find $step = max1, int$this-input-get'step'; $error = ''; if ISPOST switch $step case 1: if $uid = getcookie'find' $this-membermsg lang'm-093',...

CVE-2014-3139

CVE-2014-3139 affects Unitrends Enterprise Backup 7.3.0, where recoveryconsole/bpl/snmpd.php allows remote authentication bypass by sending the auth parameter as a certain string. This is a remote, unauthenticated bypass with potential partial confidentiality, integrity, and availability impact a...

CVE-2014-2391

The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain...

Input validation

The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain...

Hash Kracker v2.5 - All-in-one Hash Password Recovery Software

Hash Kracker is the free all-in-one tool to recover the hash password for multiple hash types. Currently it supports password recovery from following popular Hash types MD5 SHA1 SHA256 SHA384 SHA512 It uses dictionary based cracking method which makes the cracking operation simple and easier...

SQL Log Files (LDF) Not Smaller After Truncation

Challenge After Veeam Backup & Replication or Veeam Agent for Microsoft Windows successfully truncates a SQL Server Database with Application-Aware Processing enabled, the SQL Log File .ldf does not become smaller. Cause This is due to the fact that the LDF file itself is a container, when...

CVE-2014-2391

The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain...