Chain of 11 Bugs Takes Down Galaxy S8 at Mobile Pwn2Own

The mobile version of the annual Pwn2Own contest wrapped up today in Tokyo with an unprecedented attack chain leveling the Samsung Galaxy S8. Researchers from MWR Labs used 11 vulnerabilities across six different mobile applications to execute code on Samsung’s flagship device and exfiltrate data...

Null Pointer Reference Vulnerability in QQ Video

QQ Video is a local player from Tencent that supports movie and music files in any format. A null pointer reference vulnerability exists in the QQ AV player when parsing MP4 files of a specific format, which can be exploited by an attacker to cause a denial of service...

Memory Corruption Vulnerability in QQVideo Mp4Splitter Module

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the Mp4Splitter module of QQ Video Player when parsing MP4 files of a specific format, which can be exploited by an attacker to cause a denial of service...

OpenJPEG - mqc.c Heap-Based Buffer Overflow Exploit

Exploit for linux platform in category dos / poc DESCRIPTION An Out-of-Bounds Write issue can be occurred in function opjmqcbyteout of mqc.c during executing opjcompress. This issue was caused by a malformed BMP file. CREDIT This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB...

Memory Override Access Vulnerability in QQ Music Client

QQ Music client is Tencent's music playback software. A memory override access vulnerability exists in the qmpmp3.dll module of the QQ Music client when parsing a specific mp3, which can be exploited by an attacker to cause a denial of service...

Watch: Hackers take over Tesla Model X; control brakes and doors

By Waqas The hackers from Keen Security Labs, a part of Chinese Internet giant Tencent This is a post from HackRead.com Read the original post: Watch: Hackers take over Tesla Model X; control brakes and doors...

Directory Traversal

Overview Affected versions of tencent-server resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable...

MyBB Directory Traversal

Description: ============ product:MyBB Homepage:https://mybb.com/ vulnerable version:input'pathfolder'; Line 327 $dir = @opendirMYBBROOT.$path; if we input "pathfolder" to "../../bypass/smile",Directory Traversal success! ============ Fixed: ============ This vulnerability was fixed in version...

Design Flaw Vulnerability in Tencent PC Butler's Synchronized Objects for Marking Protection Status

Tencent PC Manager Tencent PC Manager/formerly known as QQ PC Manager is a free security software from Tencent. A design flaw exists in the synchronization object used by Tencent PC Manager to mark the protection state, which is caused by not properly setting the access control of the...

VMSA-2017-0006 : VMware ESXi, Workstation and Fusion updates address critical and moderate security issues

a. ESXi, Workstation, Fusion SVGA memory corruption ESXi, Workstation, Fusion have a heap buffer overflow and uninitialized stack memory usage in SVGA. These issues may allow a guest to execute code on the host. VMware would like to thank ZDI and Team 360 Security from Qihoo for reporting these...

Hackers Using Fake Cellphone Towers to Spread Android Banking Trojan

Chinese Hackers have taken Smishing attack to the next level, using rogue cell phone towers to distribute Android banking malware via spoofed SMS messages. SMiShing — phishing attacks sent via SMS — is a type of attack wherein fraudsters use number spoofing attack to send convincing bogus message...

About the security content of iCloud for Windows 6.1.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Exponent CMS 2.4.0 Blind SQL Injection

Document Title: =============== Blind SQL Injection Vulnerability in Exponent CMS 2.4.0 References Source: ==================== https://exponentcms.lighthouseapp.com/projects/61783/tickets/1394-blind-sql-injection-vulnerability-in-exponent-cms-240-4...

Keen Lab Takes Down iPhone 6S, Nexus 6P, at Mobile Pwn2Own

Hackers identified a series of vulnerabilities in Android and iOS to take down a Google Nexus 6P and an Apple iPhone 6S this week at Mobile Pwn2Own. The mobile version of the popular hacking challenge, put on by Trend Micro and Tipping Point’s Zero Day Initiative, was held in tandem with the...

Tencent Video Super Long Character Overflow Vulnerability

Tencent Video Player is the video player client product of Tencent Video. An overflow vulnerability exists in Tencent Video when opening qlv media files by failing to place a length limit on the characters added at the end of the file. An attacker is allowed to exploit this vulnerability to...

Tencent Video Memory Corruption Vulnerability

Tencent Video Player is the video player client product of Tencent Video. Tencent Video fails to properly determine the existence of a memory overflow vulnerability in the application when processing qlv media files, allowing attackers to exploit the vulnerability to launch denial of service...

On QQ browser and other applications“WormBrowser”vulnerability briefings-vulnerability warning-the black bar safety net

Recently, the national information security vulnerabilities library CNNVD received Pangu team on“WormBrowser”vulnerability of the relevant circumstances of the message sent, the vulnerability exists in the Android version of the QQ browser and QQ hot two applications. Due to the above products, a...

imagemagick mogrify global buffer overflow Vulnerability

Exploit for windows platform in category remote exploits imagemagick identify suffers of a global buffer overflow issue, which I reported and has been patched, you can find a reproducer in the github bug tracker issue link issue: https://github.com/ImageMagick/ImageMagick/issues/280 patch:...

Hackers to implement remote control of Model S car Tesla emergency repair software vulnerabilities-vulnerability warning-the black bar safety net

Beijing Time 9 on 2 1 September morning news, Tesla released this week, the electric car software system security patches. Earlier, the Chinese information security researcher found a Tesla car software vulnerabilities. Through these vulnerabilities, hackers can The Model S car to initiate a remo...

Internet Bug Bounty: CVE-2016-7418 PHP Out-Of-Bounds Read in php_wddx_push_element

CVE-2016-7418 PHP Out-Of-Bounds Read in phpwddxpushelement 1. Affected Version + PHP 7.0.10 + PHP 5.6.25 2. Credit This vulnerability was discovered by Ke Liu of Tencent's Xuanwu LAB. 3. Testing Environments + OS: Ubuntu + PHP: 7.0.10 + Compiler: Clang + CFLAGS: -g -O0 -fsanitize=address 4. PoC...