CVE-2014-6992

The Timeless Black aka com.apptive.android.apps.timeless application 2.10.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6992

The CVE-2014-6992 entry concerns the Timeless Black (com.apptive.android.apps.timeless) Android app (version 2.10.6) that does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificat...

Drupal 7.31 version of the explosion a serious SQL injection vulnerability-vulnerability warning-the black bar safety net

This morning a foreign security researchers on Twitter exposed a Drupal 7.31 version of the latestSQL injectionvulnerabilities and gives using a test of the EXP code, small local structures Drupal7. 3 1 environment, tested, found that the use of the code can be successfully executed and the...

wdlinux virtual host Management System File No Access authentication to establish a direct database user-vulnerability warning-the black bar safety net

Brief description: wdcpv2. 5. 1 0 file non-access authentication to establish a direct database account Detailed description: wdcpv2. 5. 1 0 file non-access authentication mysql/adduser. php to establish a direct account truncation of the modified data package to mount the default database to...

Sandworm APT Team Found Using Windows Zero Day Vulnerability

UPDATE–A cyberespionage team, possibly based in Russia, has been using a Windows zero day vulnerability to target a variety of organizations in several countries, including the United States, Poland, Ukraine and western Europe. The vulnerability, which will be patched today by Microsoft, is...

The researchers published BadUSB attack test exploit code-exploit warning-the black bar safety net

! The world's most evil USB peripherals – BadUSB In 2 0 1 4 in the United States in the black hat conference, Berlin SRLabs security researchers JakobLell and independent security researchers Karsten Nohl shows they called“BadUSB”according to the BadBIOS namedmethod of attack, this attack method ...

Wiretapping storm: the Android platform https sniffing hijacking vulnerability-vulnerability warning-the black bar safety net

0x0 Preface Last year 1 0 mid-May, Tencent Security Center in the daily terminal Safety audits found that, in the Android platform used in https communication of app the vast majority of are not safe to use the google API, a direct result of https communication of sensitive information leakage ev...

Threat Outbreak Alert RuleID11845: Email Messages Distributing Malicious Software on October 5, 2014

Medium Alert ID: 35947 First Published: 2014 October 6 14:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11845 may contain the following files: Name |...

Under Linux bash critical vulnerability fix upgrade method-vulnerability warning-the black bar safety net

By Linux official built-in Bash in the newly discovered a very serious security vulnerability, vulnerability reference: https://access. redhat. com/security/cve/CVE-2 0 1 4-6 2 7 1, a hacker can take advantage of the Bash vulnerabilities in complete control of the target system and attack, in ord...

ShellShock（BashDoor repair method-vulnerability warning-the black bar safety net

Check your system is not there to Bash the Door the vulnerability of the command: env-i X=' a=' bash-c 'echo date'; cat echo If vulnerability exists, the output result does not date the words, the following diagram is to repair success after the screenshots: ! shell shock, bash door, fix Cent OS...

Bash vulnerability again evolution: a buffer overflow resulting in remote arbitrary command execution-vulnerability warning-the black bar safety net

In recent days, the“Shellshock”Bash vulnerability appeared it is to the security industry Put a heavy bomb, more and more manufacturers and black and white hats have added to the analysis of the camp which, at the same time also one after another burst more for the Bash vulnerability, the apparen...

bash code injection security vulnerability-vulnerability warning-the black bar safety net

! bashbuga lot of people perhaps the upper half of the occurrence of the security issues of the“heart bleed”in Heartbleed Bug event memory is quite deep, this two days, there was also a“destruction level”of vulnerability-the Bash software security vulnerabilities. This vulnerability French...

Chkrootkit 0.49-local mention the right vulnerability-vulnerability warning-the black bar safety net

Chkrootkit =0.49 Local Root Vulnerability: less than or equal to 0. 4 9 version of chrootkit local mention the right vulnerability. The first to demonstrate it: You can view your own installation is not allow to the latest version, or download the vulnerable versions of the experiment: wget wget...

Mango cloud KODExlporer design flaws lead to arbitrary code execution-vulnerability warning-the black bar safety net

http://www.wooyun.org/bugs/wooyun-2014-066056 About the content: http://www.kalcaddle.com The test account permissions: default The problem is in the renaming. I upload. php file is not executed, ok, then change suffix to. ph After a successful upload, 改名.php, tips no limit. Well, 改名.php ,rename ...

Sogou browser 5. 0. 9. 13085HTTP204 fake website vulnerability-vulnerability warning-the black bar safety net

Brief description: Sogou browser 5. 0. 9. 13085HTTP204 fake website vulnerability Detailed description: ! Vulnerability proof: a the function d var k = window. open"java script:document. write4", "xx"; 1 2 next...

The host home can arbitrary modify other user's password vulnerability-vulnerability warning-the black bar safety net

First of all, we want to be in the host house on the register an account and bind the mailbox After came home to find forgotten password function ! 000.jpg In here to fill in our registered account Then click Next ! 2.jpg Then to the mailbox to receive the verification code and fill in here Now o...

As Bug Bounties Become the Norm, Challenges Remain

SEATTLE–For many years, Microsoft and other large software vendors resisted the idea of providing bug bounties or other financial incentives for researchers to report vulnerabilities. That changed when the landscape began to shift and more researchers began reporting vulnerabilities through broke...

The little red umbrella（Avira）exposed a serious vulnerability, hackers can hijack a user account-bug warning-the black bar safety net

! Famous antivirus red umbrella Avira is a free security software, however its secure backup service but there is a serious Web application vulnerabilities, so an attacker can hijack user accounts, millions of users could not accidentally become a“platter. of meat.” Avira the famous free security...

Twitter's latest exploit: a hacker can traverse account delete credit card-vulnerability warning-the black bar safety net

Just this month beginning of the month, with other social networks, twitter also started a new vulnerability reward program, bonus reached$1 4 0+/vulnerabilities, you can say the reward is still very lucrative. Compared to our domestic manufacturers to say, I personally think that this is a netwo...

Two recent IBM DB2 LUW vulnerability to mention the right analysis-vulnerability warning-the black bar safety net

IBM recently released two affected DB2 for linux, unix, windows, three versions of the security vulnerability patches. And this article will explore where these two vulnerabilities, CVE-2 0 1 4-0 9 0 7 and CVE-2 0 1 3-6 7 4 4 some of the technical details to help database administrators assess...