779 matches found
FoxMail Version Detection
This script finds the installed FoxMail Version and saves in KB. OpenVAS Vulnerability Test $Id: gbfoxmaildetect.nasl 7287 2017-09-27 06:56:51Z cfischer $ FoxMail Version Detection Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is...
QQ Mail跨站脚本漏洞
QQ Mail是Tencent公司提供的webmail服务，你可以使用你的QQ帐户来登陆使用Mail服务，具体的信息可以访问 http://mail.qq.com/。但是80sec团队成员在QQ Mail里发现存在跨站脚本漏洞，恶意用户可以通过该漏洞在邮件里伪造登陆表单窃取目标用户的密码以及偷取Cookie以取得其他用户的身份，或者使用 ajax等技术读取用户的敏感信息。 QQ Mail的Javascript...
Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities
Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities / source: https://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied dat...
Tencent QQ 2006 LaunchP2PShare - Multiple Stack Buffer Overflow Vulnerabilities
/ source: https://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows remote attackers to execute...
With SockOnline software easily break the port restriction-vulnerability warning-the black bar safety net
Fiis divided into the Sock, HTTP, FTP, and other types, respectively suitable for different applications. However, sometimes the network is only open 8 0 port for HTTP web browsing. Faced with this situation, we must do nothing? Of course not, in SockOnline this special agent software help, we ca...
Tencent QQ scene vulnerability to the hack of the law-vulnerability and early warning-the black bar safety net
According to analysys international released the 2 0 0 7 in the first 2 quarters of China im market quarterly monitoring report shows, Chinese active IM software account has reached 3. 7 6 million, which has 2. 9 million active user accounts for Tencent QQ is well deserved IM the king. But did yo...
QQ 0day-vulnerability warning-the black bar safety net
Put that 3 files to\Tencent\QQ\IMScene\Scene\ Use Notepad to open the VBScript. qqs The bottom has that code. Then in the scene to someone else Download: qq.rar Related information sources: carved brand's blog） About that QQ 0day little information, and now the specific process written out, we lo...
QQ Traveler vulnerability analysis and exploit(0day)-vulnerability warning-the black bar safety net
Vulnerability overview Tencent TTQQ Traveleris a multi-page browser has a friendly user interface, offers a variety of skin for the user based on personal preferences, in addition TT is a new more user-friendly features that make surfing the Internet more easily and freely, saving time and effort...
Tencent's online security check controls the overflow analysis(not running it)-vulnerability warning-the black bar safety net
Software files: TSOBase. ocxUPX shell Software name: Tencent Online Safety Center Software description: Tencent's online security check controls Software version: 2 0 0 6, 1 2, 2 0, 4 Test platform: VC6+xp sp1 Affirm: This article is only for learning and exchange with,all the consequences of the...
Tencent's online security check controls the overflow analysis(not running it)-vulnerability warning-the black bar safety net
Title: 【original】Tencent online security check controls the overflow analysisnot running. Author: ashucang Time: 2007-05-06,1 7:4 7 Links: http://bbs.pediy.com/showthread.php?t=44002 Software files: TSOBase. ocxUPX shell Software name: Tencent Online Safety Center Software description: Tencent's...
QQ Traveler vulnerability analysis and exploit(0day)-vulnerability warning-the black bar safety net
failwest shineast Vulnerability overview Tencent TTQQ Traveleris a multi-page browser has a friendly user interface, offers a variety of skin for the user based on personal preferences, in addition TT is a new more user-friendly features that make surfing the Internet more easily and freely, savi...
Tencent QQ GIF图形解析堆溢出漏洞
QQ是由Tencent公司开发的一个IM软件，在中国有着非常广泛的用户。在解析畸形GIF图形组件时存在缓冲区溢出漏洞，攻击者可能利用此漏洞在用户机器使QQ崩溃造成拒绝服务。 QQ在解析GIF图形时使用的是Riched20.dll,在解析GIF格式时，对其读入的Image Block宽度未做边界检查，当设置为0时，会分配比指定大小要小的内存块，但之后会将颜色表的1个字节覆盖到大小不足的内存块中,造成一个基于堆的溢出。溢出会导致多个指针破坏，之后的操作至少引用了其中的一个，因此可能导致执行任意代码。 QQ2007beta1以前的QQ版本 删除QQ目录下的riched20.dll,或升级厂商补...
Tencent QQ QQzone WebCtrl Activex空指针引用漏洞
QQ是由Tencent公司开发的一个IM软件，在中国有着非常广泛的用户。幻影旅团的axis发现了一个QQZone的activex漏洞。在使用WebCtrl 方法时，将引用一个空指针，造成ie崩溃。由于该activex没有标记为safe，故会出现安全提示。 在\Tencent\QQ\QZone\TWebCtrl.dll中，使用Navigate方法时，将造成一个空指针引用 051024C0 8B4424 04 MOV EAX,DWORD PTR SS:ESP+4 051024C4 8B5424 08 MOV EDX,DWORD PTR SS:ESP+8 051024C8 6A 00 PUSH...
Tencent QQ multiple remote overflow vulnerabilities demo-vulnerability warning-the black bar safety net
The following is demo ! /Article/UploadPic/2007-1/200714105438199.jpg ! /Article/UploadPic/2007-1/200714105532691.jpg ! /Article/UploadPic/2007-1/20071410560783.jpg ! /Article/UploadPic/2007-1/200714105631232.jpg...
QQ漏洞（远程可执行）Tencent QQ VQQPlayer.ocx
No description provided by source. ---------------------------------------------------------------------------------------- / ----------------------------------------------------------------------- Tencent QQ VQQPlayer.ocx all version 0day Author: axis Date: 2006-12-27 Mail: [email protected]...
Tencent QQ SuperVideo Remote Denial of Service Vulnerability
QQ is a very popular IM in China developed by Tencent.There exists a remote denial of service vulnerability in QQ when using the SuperVideo chat.Current study showed that the attacker who successfully exploited the vulnerability would cause the remote client crash. There is an attack packet as...
With QQ file sharing vulnerabilities to completely compromise Windows2003 sturdy fortress-bug warning-the black bar safety net
On the server running the third party software historically, it is the attacker who is regarded as the invasion of the target system shortcut. Now, the famous Tencent QQ has been included in these shortcut list, but the QQ is not the server the necessary software, so that will not cause a wide...
