Discuz Forum auto-blasting tools principles of analysis-vulnerability warning-the black bar safety net

Recently broke about the use of social work library blasting Discuz Forum user name and password of the tool, causing a lot of Forum user information leakage, the analysis works as follows. Here Discuz determines whether the access IP of main with the following logic: private function getclientip...

Android Factory Reset Improper Sanitization Exposes Data

The churn of Android devices, whether older smartphones being traded in or sold online, makes device sanitization imperative. The native feature in the OS, however, may not be doing as thorough a job as advertised. A paper, “Security Analysis of Android Factory Resets” pdf, published by Ross...

Flawed Android Factory Reset Failed to Clear Private Data from Smartphones

If you’re planning to sell your old Android smartphone then you need to think again because there is a weakness in the Android Factory Reset option that could be exploited to recover your login credentials, text messages, emails and pictures even if you have wiped its memory clean. Computer...

MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service

This module will check if scanned hosts are vulnerable to CVE-2015-1635 MS15-034, a vulnerability in the HTTP protocol stack HTTP.sys that could result in arbitrary code execution. This module will try to cause a denial-of-service. This module requires Metasploit: https://metasploit.com/download...

WP Super Cache <=1.4.2 stored XSS vulnerability analysis-vulnerability warning-the black bar safety net

Foreword Just not expectations, HEE HEE busy busy, North-South without a home, steps from Recalling the beginning of the Arcana, coincided with the addict for heat mapping it. Then he moment, like at this very moment, beloved more than the autumn wood, the trees and grass love return home, rememb...

Tcpdump - Dump Traffic on a Network

Tcpdump allows you to dump the traffic on a network. It can be used to print out the headers and/or contents of packets on a network interface that matches a given expression. You can use this tool to track down network problems, to detect many attacks, or to monitor the network activities. Tcpdu...

Malware cleanup to Gravity Forms arbitrary file upload-vulnerability warning-the black bar safety net

Regular malware detection cleanup process, we encountered one case of infection, caused our attention. Our environment does not have any special or fancy stuff, just updated wordpress and 3 expired plug-in; this situation is quite reasonable. The processing process ends, the environment is clean...

Tracking Malware That Uses DNS for Exfiltration

CANCUN–Attackers have long used distributed denial of service attacks to knock domain-name servers offline but over the last several months malware creators have taken to using DNS requests to tunnel stolen data. Jaime Blasco, vice president and chief scientist at AlienVault, showed a handful of...

Microsoft-Excel-0x5D-record

This is an exploit for MS10-038/CVE-2010-0822 Everything is hardcoded! winxp sp3 webDEViL import binascii wD="d0cf11e0a1b11ae1000000000000000000000000000000003e000300feff0900060000" wD+="000000000000000000030000000100000000000000001000000200000004000000feff"...

MyBB unset_globals()function is bypassed leading to remote code execution analysis-vulnerability warning-the black bar safety net

Yesterday in the exploit-db see Ryat cow made a MyBB remote code execution vulnerability, the analysis is very detailed, unfortunately it is written in English, where the simple translation. When registerglobals=On, MyBB will call unsetglobalsfunction to achieve registerglobals=Off. | 1 2 3 4 5 6...

RobotStats 1.0 - &#039;robot&#039; SQL Injection

Title : RobotStats v1.0 robot param SQL Injection Vulnerability Author : ZoRLu / [email protected] / [email protected] Home : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Date : 22.11.2014 Demo : http://alpesoiseaux.free.fr/robotstats/ Download :...

CVE-2 0 1 4-1 7 7 2 – Internet Explorer Use After Free vulnerability detailed analysis-vulnerability warning-the black bar safety net

http://blog.trendmicro.com/trendlabs-security-intelligence/root-cause-analysis-of-cve-2014-1772-an-internet-explorer-use-after-free-vulnerability/ Translated from TrendLabs ! /Article/UploadPic/2014-11/2014111310206615.jpg We often see a wide variety of vulnerabilities, from the user-after-free...

Domain Analyzer Security Tool - Finds all the security information for a given domain name

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way. Features It creates a directory with all the information, including nmap output files. It uses colors to remark...

Oops... Popular Password Managers Are Not As Secure As You Think

Just few days ago, we reported about two critical vulnerability in mobile version of the most popular password manager application from a popular Password management company RoboForm, which manages your passwords for different websites. Now, researchers have published a detailed explanation on th...

elektropost episerver 3/4 - Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9223/info Multiple vulnerabilities were reported in EPIServer that include directory traversal, information disclosure, and denial of service. These issue result from insufficient sanitization of user-supplied input...

Winamp stack overflow analysis and use-vulnerability and early warning-the black bar safety net

Winamp is a relatively old player, here is mainly through winamp a poc analysis, to construct a exp. 主 程序 见 附件 winamp.exe poc see Annex poc. m3u. A Poc analysis View the first poc below. Found in addition to the front 1 0 more bytes of the m3u File format to specify the contents, the other parts...

TLS 1.3 Has Consensus to Deprectate RSA Key Transport

The IETF working group responsible for the TLS 1.3 standard is closing in on a decision to remove RSA key transport cipher suites from the protocol. Decades-old RSA-based handshakes don’t cut it anymore, according to experts, who are anxious to put a modern protocol in place, one that can fend of...

Struts2 S2-0 2 0 in Tomcat 8 under command to perform the analysis-vulnerability warning-the black bar safety net

The Struts S2-0 2 0 this notice has been published for some time. Now we all know this vulnerability can cause a DOS, file downloads and other hazards, believe that the major manufacturers also have taken appropriate security measures. Today is to share with you about this vulnerability a little...

Adobe Flash CVE-2 0 1 4-0 4 9 7 vulnerability analysis-vulnerability warning-the black bar safety net

?? During the Spring Festival Adobe Flash Player is burst 0Day vulnerabilitiesnumbers: CVE-2 0 1 4-0 4 9 7, the vulnerability hazards Flash 12.0.0.38, as well as the previous version. The official Adobe has launched a repair patch. The vulnerability is due to the SWF in the embed AS3 code parsing...

MediaWiki 1.22.1 PdfHandler - Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MediaWiki images/xnz.php 3. access to php-backdoor! http://vulnerable-site/images/xnz.php?1=rm%20-rf%20%2f%20--no-preserve-root 4. happy pwning!! Related files: thumb.php -- extract all GET array to params /extensions/PdfHandler/PdfHandlerbody.php --...