Empire backup Wang(Empirebak)universal cookie and get shell-vulnerability warning-the black bar safety net

Forged cookie login systemactually,this step is unnecessary, most of the user even the password are not modified,is the default 1 2 3 4 5 6 The login is successful set 4 cookies,look at the code function login$lusername,$lpassword,$key,$lifetime=0 global...

OS X Spotlight vulnerability will reveal the IP address and other system details-vulnerability warning-the black bar safety net

! OS X mail users using the OS X Spotlight search function, it will display in the search results message. Spotlight ignores mail the application to the remote content of the prohibited load, and the remote mail file as the search process is loaded. When Spotlight finished loading can track The...

ASUS router aeration Root privileges command execution vulnerability-vulnerability warning-the black bar safety net

! 2 copya foreign security researchers the 6th of this month in the online disclosure, the ASUS router firmware there is a serious vulnerability that allows the execution of unauthorized commands, and may exist in all current versions of ASUS router firmware. Currently, there is already an exploi...

Phone to grab votes APP“train up”to the presence of high-risk vulnerabilities in the user's personal information and other data leaks-bug warning-the black bar safety net

Data 3 6 0 patch-day vulnerability response platform shows that the domestic popular mobile phone to grab votes APP“train up”to the presence of high-risk vulnerabilities, including millions of tickets, ticket orders user ID number, username, plaintext password, detailed ticket information and oth...

Android browser cross-domain data theft, and the Intent of the Scheme to attack-vulnerability warning-the black bar safety net

We next want to introduce this vulnerability, which affects versions of Android 4. 4 The following comes with the browser and some other specific Android browser, which allowed hackers to read the sqlite format of the cookie database file, thereby stealing cookies. Along with this problem, we hav...

Google found Windows 8.1 0day vulnerabilities and published vulnerabilities verify program PoC-the exploit-warning-the black bar safety net

Google security researcher found a Windows 8.1 privilege escalation vulnerability, the attacker can use the vulnerability to modify the system content and even completely control the victim computer. Currently Google has announced a vulnerability in the authentication program, the PoC Airport. Po...

Microsoft-Office-2007-and-2010---OLE-Arbitrary-Command-Execution

CVE-2014-6352 OLE Remote Code Execution Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Tested on win7 - office 2007 and 2010...

Tencent QQ browser IOS version of the URL spoofing vulnerability-vulnerability warning-the black bar safety net

QQ browser for ios will be in the page title of the body displayed on the address bar, that URL spoofing greatly reduce the cost, may indirectly cause the user to suffer from phishing attacks. First construct a and mail. qq. com approximate domain name, POC at the following address: code area...

Cool official silent install apk features background the presence of high-risk vulnerabilities(demo custom machine is how in your phone silently installed)-bug warning-the black bar safety net

Cool Demo junk software is how to through your mobile phone to silently install Suction fee software what is going on. You charge less? Detailed description: Cool a operation and maintenance improper shell. ! ! ! ok See under background: http://auth.coolyun.com ! Background PUSH features APK sile...

WSS is the latest version of any user of the password reset（official demo demo-the vulnerability warning-the black bar safety net

WSS latest version of the design flaws lead to arbitrary user password reset, including the administrator 文件 usereditpassword.php code area ? php $editFormAction = $SERVER'PHPSELF'; if isset$SERVER'QUERYSTRING' $editFormAction .= "?" . htmlentities$SERVER'QUERYSTRING'; $password = "-1"; if...

Bypass 3 6 0 core crystal engine again forced the end of the 3 6 0 process(x64)-vulnerability warning-the black bar safety net

Bypass 3 6 0 core crystal engine again forced the end of the 3 6 0 process, in the face of success, The morning presented a 6 4-bit lower kill360 small toys But it wasn't long before I was hit the face. 3 6 0 say that there is a core crystal engine. We first do not say this T coax coax contraptio...

JEECMS arbitrary File Download lead to sensitive information disclosure-vulnerability warning-the black bar safety net

Should be JEECMS old version inurl:download. jspx? path= Arbitrary File Download download. jspx? fpath=WEB-INF/web. xml&filename=WEB-INF/web.xml Case 1 www.xxczj.gov.cn/download.jspx?fpath=WEB-INF/web.xml&filename=WEB-INF/web.xml ! tick. png Case 2...

For patch NTP-Network Time Protocol vulnerabilities, Apple released the first Auto-Update Patch-vulnerability warning-the black bar safety net

Last night, Apple released its first automated patch, used to repair Appleoperating systemon the keyNetwork Time Protocol（NTP）vulnerabilitiesthe. The patch can be automatically patched, and does not require the user to restart the operation. NTP Network TimeProtocol, the Network Time Protocol, is...

From the source perspective on the ntpd stack buffer overflow vulnerability(CVE-2 0 1 4-9 2 9 5)analysis-vulnerability warning-the black bar safety net

Recently, the ntp's official website released a Update Patch: A total of 6 vulnerabilities 4 CVE number, both of Google Security Team found and submitted. Wherein the CVE-2 0 1 4-9 2 9 5 includes a 3 stack overflow: a This article from the source code perspective, these three stack overflow,...

About. git/config file leaked use-vulnerability warning-the black bar safety net

The beginning is also from the dark clouds that have such a vulnerability, many do not understand the might see on will feel a little confused, in fact, this vulnerability and svn leakage there is so little similar, can also according to the configuration file to restore the entire project proces...

An open source CMS to bypass the filtering XSS comfortably+getshell（viagra, the Shaolin Temple official website of the shots-the vulnerability warning-the black bar safety net

Brief description: I haven't at the front Desk too.。。。。 Powered by YIQICMS “Baidu for you to find relevant results about 1 7 2 0 0” Viagra official website shot Detailed description: The latest version 1. 8, The 首先 关注 /comment.php: code area if$action == "save" $msgtitle = $POST"msgtitle"; $msgna...

Delta is the aeration system vulnerabilities to others may access your boarding pass information-vulnerability warning-the black bar safety net

In recent years, the airline piloting through smartphone or tablet and other mobile devices to achieve boarding procedures, which is expected in the future to truly achieve the paperless. But in the project the initial stage of the natural presence of various problems, 1 2 November 1 6, one of th...

Vulnerability warning: doom cookie Misfortune Cookie vulnerability affects the global 1 2 0 0 million router-vulnerability warning-the black bar safety net

One called“doom cookie Misfortune Cookie”a serious vulnerability is affecting the global 1 2 0 0 million router security, D-Link, TP-Link, Huawei, ZTE and other brands are affected, the attacker can use a vulnerability of remote control devices and monitoring traffic. Learn about the“doom...

Hidden in the Share button in the attack: Blogger. com exposure of high-risk CSRF（cross-site request forgery）vulnerability-vulnerability warning-the black bar safety net

The Egyptian security expert Mazen shows Gamal Mesbah on Blogger. com found a high risk of CSRF（cross-site request forgery）vulnerabilities. The vulnerability can allow an attacker in blogger without the knowledge of writing and publishing blogs, while the private blog public. Blogger is Google's...

Woven dreams somewhere a design flaw resulting in a background address leak-vulnerability warning-the black bar safety net

Brief description: Somewhere a design flaw, the program for some of the things the filter is not strict, resulting in a background address the leakage, the test only had 5. 7 in. Visual other version of the same problem. Detailed description: ! QQ screenshot 2 0 1 4 0 9 1 8 2 1 4 4 2 6. png DEDEC...