py-tflite -- denial of service vulnerability

Yakun Zhang of Baidu Security reports: An attacker can craft a TFLite model that would trigger a null pointer dereference, which would result in a crash and denial of service...

extjs Arbitrary File Read

Hi all£º Baidu Security Team found a vulnerability in extjs,with this vulnerability we can read arbitrary file and request internal http services File: /examples/feed-viewer/feed-proxy.php line:3-line:6 $feed = $REQUEST'feed'; if$feed != '' && strpos$feed, 'http' === 0 header'Content-Type:...

ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net

Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...

Fixed in Apache Tomcat 6.0.44

Low: Denial of Service CVE-2014-0230 When a response for a request with a request body is returned to the user agent before the request body is fully read, by default Tomcat swallows the remaining request body so that the next request on the connection may be processed. There was no limit to the...

Fixed in Apache Tomcat 7.0.55

Important: Request Smuggling CVE-2014-0227 It was possible to craft a malformed chunk as part of a chunked request that caused Tomcat to read part of the request body as a new request. This was fixed in revision 1601333. This issue was identified by the Tomcat security team on 30 May 2014 and mad...

Baidu Security Center memory corruption

FireFoxProxy ActiveX memory corruption...

Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht to keep your user safe,you can use 360safe instead.I guess I will join your team and play games together one day...

Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC

No description provided by source. Exploit Title: Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://an.baidu.com/ Version: 2.0 Tested on: xpsp3 ie6 Greeting to all the guys of Baidu Security Center,please dont use Kingsoft sht t...

Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC

Exploit for unknown platform in category dos / poc =============================================================== Baidu Security Center FireFoxProxy ActiveX Remote Exec 0day POC =============================================================== Exploit Title: Baidu Security Center FireFoxProxy...

KingSoft UpdateOcx2.dll SetUninstallName() Heap Overflow Exploit

金山在线杀毒,百度安全中心在线杀毒,雅虎助手等使用的在线杀毒引擎均受影响. PoC代码: ----------------------------------------------------------------------------------- object classid='clsid:D82303B7-A754-4DCB-8AFC-8CF99435AACE' id='target1'/object object classid='clsid:D82303B7-A754-4DCB-8AFC-8CF99435AACE' id='target2'/object script v...