483 matches found
CVE-2017-2221
CVE-2017-2221 affects Baidu IME Installer (versions 3.6.1.6 and earlier). The vulnerability is an untrusted DLL search path that may allow arbitrary code execution with the privileges of the user invoking the installer when a malicious DLL is present in an unspecified directory. Documented impact...
CVE-2017-2221
Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Installer of Baidu IME may insecurely load Dynamic Link Libraries
Overview Installer of Baidu IME contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...
JVN#17788774: Installer of Baidu IME may insecurely load Dynamic Link Libraries
Installer of Baidu IME contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer Use the latest installer according...
baidu_analytics - Unsupported - SA-CONTRIB-2017-060
Update The maintainer has resolved this issue, please read the release notes for more information This module adds the Baidu Analytics web statistics tracking system to your website. The security team is marking this module unsupported. There is a known security issue with the module that has not...
Yuanbei Driving Exam Baidu Cloud BOS has credential leakage vulnerability
Yuanbei Driving Test is an internet and mobile internet product developed by Nanjing Yuanbei Information Technology Co. Ltd. specifically for driving beginners. Baidu cloud bos is a cloud storage service based on Baidu cloud system. A credential leakage vulnerability exists in Baidu Cloud bos of...
Foscam camera SetDNS buffer overflow vulnerability
Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. A buffer overflow vulnerability exists in Foscam camera ONVIF SetDNS. An unauthenticated attacker can trigger a stack buffer overflow via the 'devicemgmt' 'SetDNS' method...
Foscam camera firewall misconfiguration vulnerability
Foscam camera is a webcam that pushes messages to your phone and also enables video Baidu cloud storage directly through WIFI. There is a misconfiguration vulnerability in the Foscam camera firewall that allows an attacker to perform a brute force attack on credentials despite the presence of a...
JVN#31236539: [Simeji for Windows(β)] installer may insecurely load Dynamic Link Libraries
Simeji for Windowsβ installer provided by Baidu Japan Inc. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Do not use Simeji for...
massExpConsole - Collection of Tools and Exploits with a CLI UI
Collection of Tools and Exploits with a CLI UI What does it do? an easy-to-use user interface cli execute any adapted exploit with process-level concurrency crawler for baidu and zoomeye a simple webshell manager some built-in exploits automated more to come... Requirements GNU/Linux or MacOS, WS...
Baidu Browser suffers from dll hijacking vulnerability
Baidu Browser is a browser. Baidu Browser suffers from a dll hijacking vulnerability, which is caused by the baidubrowser.exe component in Baidu Browser loading library files insecurely, which can be exploited by constructing a malicious application and placing it in a specific path to maliciousl...
Baidu umeditor suffers from cross-site scripting vulnerability
UMeditor, or UM for short, is an online rich text editor. A cross-site scripting vulnerability exists in Baidu umeditor. The program fails to filter user-supplied input, allowing an attacker to construct a malicious web page and trick users into parsing it to execute arbitrary code...
Baidu kityminder suffers from cross-site scripting vulnerability
KityMinder is an online brain map editing tool developed by Baidu FEX team. A cross-site scripting vulnerability exists in Baidu kityminder. The program fails to filter user-supplied input, allowing an attacker to frame a malicious web page and trick the user into parsing it to execute arbitrary...
Baidu UEditor suffers from cross-site scripting vulnerability
UEditor is a web editor developed by Baidu web front-end research and development department. A cross-site scripting vulnerability exists in Baidu UEditor. The program fails to filter user-supplied input, allowing attackers to construct malicious web pages and trick users into parsing and executi...
iOS 10 iMessage character crash Bug again-vulnerability warning-the black bar safety net
! Recently, hacker@vincedes3 found a from iOS 8 to iOS 10.2.1 b2 universal iMessage character crash Bug, the Bug also utilizes the iOS 8 iMessage SMS Bug of a similar technique, a section of malicious code sent to the victims, the victims in receiving SMS, browse SMS can be caught, then the SMS...
New Android Malware Hijacks Router DNS from Smartphone
Another day, another creepy malware for Android users! Security Researchers have uncovered a new Android malware targeting your devices, but this time instead of attacking the device directly, the malware takes control over the WiFi router to which your device is connected to and then hijacks the...
Baidu Browser Has Design Logic Vulnerabilities
Baidu Browser is a simple, lightweight and intelligent browser that understands you. Relying on Baidu's powerful search platform, it integrates the advantages of Baidu's business system to bring users a more convenient way to browse and a more comfortable Baidu Internet experience on the basis of...
Multiple Vulnerabilities in Baidu Browser
Baidu Browser is a suite of browser software developed by Baidu, a Chinese company. Information disclosure vulnerabilities and arbitrary code execution vulnerabilities exist in Baidu Browser for Android version 6.2.18.0 and Baidu Browser for Windows version 7.6.100.2089, which can be exploited by...
wap.baidu.com Open Redirect vulnerability
Vulnerable URL: http://wap.baidu.com/tc?pn=7pagetype=0=0=2906910AB25DEE7334ED9B54DAD5557F=newstop=1847E5CC238C6F09F80CA41D2F9B80C7=0=www.openbugbounty.org/+=20=en=clnk Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect...
