搜狗输入法绕过锁屏保护漏洞

搜狗输入法是在中国广泛使用的拼音输入法。 当用户登录到Windows系统并加载了搜狗输入法后，锁屏（cltr+alt+del）再切换到该输入法，在输入法的工具栏中输入任意内容后点击“搜索”就会调用iexplorer.exe。如果登录账号属于管理员组，就可以直接在IE地址栏中进入system32目录并运行cmd。 SOGOU.COM 搜狗输入法 4.3 - Microsoft Windows 7 ultimate 厂商补丁： SOGOU.COM --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Symantec Norton Firewall NBNS response Remote Heap Corruption (CVE-2004-0444)

When Symantec firewalls allow incoming UDP datagrams to port 137, any inbound UDP datagrams with a source port of 137 will be treated as NetBIOS Name Service messages and will be validated and parsed. The Symantec firewall product line is vulnerable to a remote heap corruption attack in the...

DEBIAN-CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

CVE-2010-0014

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...

PcAnyWhere connection on after the black screen issue-bug warning-the black bar safety net

The reason is the previous even people not normally disconnected. In this case first use the PCANYWHERE connection on, although can't see the screen, but other management operations can still be done. In the master-end management inside look at the process 找到 awhost32.exe end off. Then re-connect...

Joomla MemoryBook 1.2 SQL Injection / RFI

SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found on View Events page Remote File...

Joomla Component MemoryBook 1.2 Multiple Vulnerabilities

No description provided by source. SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found o...

Joomla Component MemoryBook 1.2 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Joomla Component MemoryBook 1.2 Multiple Vulnerabilities ======================================================== SQL Injection ------------- requires: magic quotes OFF, user account...

Joomla! Component memorybook 1.2 - Multiple Vulnerabilities

SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found on View Events page Remote File...

Ubuntu 9.10 : gnome-screensaver vulnerability (USN-866-1)

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

USN-866-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

Black Screen of Death Not Related to Microsoft Patch

The mysterious black screen of death problem that some Windows users have been experiencing in the last few days turns out not to be related to the latest round of Microsoft patches after all. Microsoft spent several days investigating claims by security vendor PrevX that the company’s latest...

Latest MS Patches Causing Black Screen of Death

The IDG News Service is reporting that Microsoft’s latest round of security patches appears to be causing some PCs to seize up and display a black screen, rendering the computer useless. The problem affects Microsoft products including Windows 7, Vista and XP operating systems. From the article:...

Memory corruption

Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2009-2839

Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...

CVE-2009-2839

CVE-2009-2839 affects Apple Mac OS X 10.5.8, where the Screen Sharing client is vulnerable to memory corruption when connecting to a remote VNC server via the vnc:// URL. This can allow remote execution of arbitrary code or cause a denial of service (application crash) according to the CVE descri...

CVE-2009-2839: Undefined Security Weakness

Screen Sharing in Apple Mac OS X 10.5.8 allows remote VNC servers to execute arbitrary code or cause a denial of service memory corruption and application crash via unspecified vectors...