Firefox local file disclosure and same-origin policy bypass-vulnerability warning-the black bar safety net

Security research experts found that an attacker can use the Firefox browser offers“page Save as”function to read the target user's computer stored in any file. In addition, the attacker can also use this mechanism to get external web server in the data content. This kind of thing occurs, is...

Millet bracelet memory vulnerability hackers can get private data-vulnerability warning-the black bar safety net

According to the Open Effect analysis, a common wearable devices in theory, there is an attack or data being intercepted possibilities. ! We have no concerns over wearable devices, the network security? From the Open Effect of the researchers conclusions may not be too optimistic. According to th...

LastPass Password Manager exposed a major vulnerability please upgrade your Firefox add-ons-bug warning-the black bar safety net

Focus on finding vulnerabilities a security researcher, has discovered well-known online Password Manager LastPass is a potential risk that an attacker can take the contact to the user's online account. Fortunately, LastPass has fixed this allow an attacker remote access to the millions of accoun...

KeySniffer Lets Hackers Steal Keystrokes from Wireless Keyboards

Radio-based wireless keyboards and mice that use a special USB dongle to communicate with your PC can expose all your secrets – your passwords, credit card numbers and everything you type. Back in February, researchers from the Internet of things security firm Bastille Networks demonstrated how...

Using free http proxy IP for the network scanning-vulnerability warning-the black bar safety net

How from free proxy IP, find a vulnerability, here is my definition of discovered vulnerabilities, is because I personally feel that this vulnerability is a technical comparison of the difference, the more likely is the discovery, analysis, and summary. As a Information Security for the novice, b...

Fujian four create disaster early warning system/Disaster/OutGBExcel. aspx file queryvalue parameter SQL injection vulnerability

No description provided by source...

Gratipay: User Supplied links on profile page is not validated and redirected via gratipay.

User Supplied links on profile page is not validated and redirected via gratipay. ==================== Description --------------------- The user profiles on gratipay has a profile statement section which is supported by markdown. An adversary can update the profile section with a hyper link URL ...

Jenkins RCE 2(CVE-2 0 1 6-0 7 8 8)analysis and use-vulnerability and early warning-the black bar safety net

Foreign security researchers Moritz Bechler in 2 months found a Jenkins remote command execution vulnerability the vulnerability without having to login you can use, that is, the CVE-2 0 1 6-0 7 8 8 is. The official announcement is such description of this vulnerability: A vulnerability in the...

Fiat Chrysler Launches Bug Bounty with $1.5K Payout Cap

Hacking Jeeps is about to get a lot more competitive. That’s because Jeep maker Fiat Chrysler Automobiles has launched a bug bounty program in conjunction with Bugcrowd that will payout as much as $1,500 per bug. Fiat Chrysler, the world’s No. 7 automaker, claims it will be the first Detroit...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7 Extended Update Support. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

The Web in conditions of competitive Race conditions）vulnerability-vulnerability warning-the black bar safety net

In order to improve developer and network security personnel on the conditions of the competitive attacks of vigilance,I wrote this blog. I think not many people know about this problem,to this end, I researched some of the points system is susceptible to conditions of competition to attack the C...

Malicious Pokémon Go Features Backdoor, RAT

Researchers are warning would-be Pokémon Trainers that a malicious, backdoored version of the massively popular game Pokémon Go could be making the rounds soon. An APK Android application package file of the game has been rigged with a remote access tool RAT called Droidjack that if installed,...

Free SSL tools have vulnerabilities hackers can get any domain name of the SSL certificate-vulnerability warning-the black bar safety net

! 0 0 0 0 The Dutch security companyCompuTestsecurity researcherThijs Alkemadein Israel the companyStarCom, poweredcreate publish freeSSLcertificate toolStartEncryptfound in a number of design and implementation defects. StarCom, powered by the Let's Encrypt project, inspired, in 6 on 4, launch...

Browser exploits Getting Started-vulnerability warning-the black bar safety net

0x00 cve-2 0 1 2-1 8 8 9 IE This article is mainly want to record myself from the small white begin to contact under windows IE vulnerability debugging process, but also to think of is give more newbies a reference of the tutorial. Large cow light spray! The beginning is want to do this hole in x...

Radancy: Application error message

Attack details HTTP Header input X-Forwarded-For was set to 12345'"'";|%00%0d%0a%bf%27'??? Error message found: Warning: inetpton function.inet-pton: Unrecognized address 12345'"\'\";|%00%0d%0a%00%bf%27' in...

Multiple Hikari Denwa routers vulnerable to cross-site request forgery

Overview Multiple Hikari Denwa routers contain a cross-site request forgery vulnerability CWE-352. Ryoya Tsukasaki of Urawa Commercial High School reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user...

Wget Vulnerability CVE-2 0 1 6-4 9 7 1-way analysis-vulnerability warning-the black bar safety net

Vulnerability description Recently, the CVE-2 0 1 6-4 9 7 1 bug was officially disclosed, the vulnerabilities affect all older versions of wget, a hacker can exploit this vulnerability to programmers and operations engineers for fishing, so as to obtain its host authority or implant rootkits...

"Hotpatch"potential security risks-vulnerability warning-the black bar safety net

IOS App developers often occur such problems: when a new version launched after the discovery of the presence of a serious bug, likely because of a logic problem resulting in the payment interface there is is pulling the wool of the risk, this time can do only is to get the repair complete securi...

PKAV found Struts2 latest remote command execution vulnerability S2-0 3 7-the vulnerability warning-the black bar safety net

0x00 Preface Just after children's Day back found that struts2 shows the S033, so put down the hands of the Lollipop quickly analyze. ! 0x01 S2-0 3 3 vulnerability review First recall S033 According to the official description ! Obviously there are two key points: the first is the REST Plugin,the...

Struts2 then exposed a remote code execution vulnerability S2-0 3 7 （CVE-2 0 1 6-4 4 3 8-a vulnerability warning-the black bar safety net

! This year 4 month, Apache Struts 2 above found that the S2-0 3 3 remote code execution vulnerabilities, with lightning speed swept. Its use of code very quickly in a short period of time quickly spread. And official for this high-risk vulnerabilities repair program or invalid. The tragic thing...