Nexus Security Bulletin - February 2016Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49G or later and Android M with Security Patch Level o...

Three years ago the libupnp library vulnerabilities, Tencent QQ music finally fix it-vulnerability warning-the black bar safety net

Since 3 years ago of a vulnerability, today there is still 6 1 0 million units of the device may be remote code execution, including smartphones, routers, Smart TV, etc., and this vulnerability as early as 3 years ago has been fixed. The vulnerability exists in the UPnP™device is a portable SDK,...

The old hole new:Tencent location and presence of the vulnerability can be remotely shut down each other phone and QQ-vulnerability warning-the black bar safety net

! ! The last two pictures is there TSRC watermark, because the before picture is not, directly paste TSRC inside...

Technology uncovered“QQ space”to automatically forward adverse information-vulnerability warning-the black bar safety net

We often see the QQ space to automatically forward some of the included links to bad information, even if we QQ password has not been stolen. The recent adoption of a QQ space automatically forwarding the link for analysis, found that the automatic forwarding mechanism through the use of the...

Tencent's wechat is shaking vulnerability, the use of the phone number cause account lost can't get back in!-- Theory of of personal information security and protection-vulnerability warning-the black bar safety net

This article was written today at 2 p.m. much, did not immediately issued because the cock to the clouds first feedback about the cock always felt the clouds are very T, it is desirable to have an account, but the cock is too water, but did not pass the audit, it may present cock of the expressio...

Tencent QQ browser IOS version of the URL spoofing vulnerability-vulnerability warning-the black bar safety net

QQ browser for ios will be in the page title of the body displayed on the address bar, that URL spoofing greatly reduce the cost, may indirectly cause the user to suffer from phishing attacks. First construct a and mail. qq. com approximate domain name, POC at the following address: code area...

社工kesionCMS新网域名管理,腾讯企业邮箱

简要描述： 话不多说,看图 详细说明： 漏洞证明：...

Wechat exposed two vulnerabilities: not authorized to login others account-vulnerability warning-the black bar safety net

Recently the black bar safety net vulnerability announcements section of the public Tencent wechat are two of the vulnerabilities. According to the vulnerability of the author described by the two vulnerability a hacker may not be authorized to access and log in directly to their wechat account...

TENCENT Cloud Service Detection

Binary data 8525.prm...

Tencent QQ 2006 LaunchP2PShare Multiple Stack Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows...

Tencent a certain activity a leak a large number of user address information-bug warning-the black bar safety net

Friends through QQ sent me to one of the activities:“there is no free lunch, but for Breakfast you can have! I was participating in yinlu good porridge road free good Breakfast apply for activities, the same address apply for the number up to 2 0 people, Homo habilis hand is a free good Breakfast...

Tencent Client Detection

Binary data 8298.prm...

Tencent QQ explosion large vulnerability a hacker can log on QQ mailbox, and other services-vulnerability warning-the black bar safety net

Recently exposed by Tencent QQ, a very serious vulnerability, called Tencent QQ client there is a serious Safety defect-Tencent an interface is not a strict validation access source IP, resulting in ClientKEY Access Protection is bypassed, the hacker could just obtain the user's ClientKEY, you ca...

APPLE-SA-2014-02-25-3 QuickTime 7.7.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-02-25-3 QuickTime 7.7.5 QuickTime 7.7.5 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Playing a maliciously crafted movie file may lead to an unexpected application...

Disaster date: the Internet in China was tragically Struts2 high-risk vulnerabilities-torn-vulnerability warning-the black bar safety net

Struts is the Apache Foundation's Jakarta project team an open source project, Struts by using Java Servlet/JSP technology, the Java EE-based Web applications Model-View-Controller（MVC design pattern application framework, MVC is a classic design pattern in a classic product. Currently, the Strut...

Tencent Weibo CSRF brush fan of vulnerability-3-vulnerability warning-the black bar safety net

Cloud Wang says Tencent is the GDP from manufacturing. Detailed description: Was accidentally found, well, LOOK! 1）registered a clean account, visit the following POC example; the the the document. se55i0n. submit; 2 See run the POC effect; ! 3 refresh Twitter success your own clouds official...

Stolen Winnti Certificates Used in Watering Hole Attack Against Tibet Orphans Site

The assault against Free Tibet and Uyghur supporters is unrelenting as another watering hole attack has been uncovered, this time against a caregiver site supporting Tibetan refugee children. The non-governmental organization NGO Tibetan Homes Foundation site remains compromised and is hosting a...

Mobile Malware Dubbed 'Bill Shocker' Targets Chinese Android Users

A new bit of malware is targeting popular apps on Android mobile devices to spew costly spam. Beijing- and Dallas-based NQ Mobile said at least 600,000 Chinese users have been hit with the malicious code named “Bill Shocker” a.expense.Extension.a because it runs up the bills of infected users whi...

About Tencent customer service open platform of the 2 vulnerability+subsidiary vulnerabilities 1-vulnerability warning-the black bar safety net

Vulnerability name: Tencent customer service open platform backend bypass A, detailed description: The login section by noPermissjs http://347.kf.ieodopen.qq.com/admin/js/index.js?v=20121007 Because. kf. ieodopen. qq. com domain name the opening number represents the application number so I think...

Tencent products exchange platform a js leak, resulting in sensitive information leakage-vulnerability warning-the black bar safety net

Vulnerability title: Tencent product communication platform of a js leak, resulting in sensitive information leakage Vulnerability type: sensitive information disclosure Harm level: high Brief description: Little information leakage, may also bring serious problems. This article from Tencent is o...