HAZ E-Paper - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application HAZ E-Paper published at the 'play' market has multiple vulnerabilities...

LVZ E-Paper - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LVZ E-Paper published at the 'play' market has multiple vulnerabilities...

Schwäbische Zeitung E-Paper - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Schwäbische Zeitung E-Paper published at the 'play' market has multiple vulnerabilities...

DIE ZEIT E-Paper App - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DIE ZEIT E-Paper App published at the 'play' market has multiple vulnerabilities...

How to Make Paper Airplanes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application How to Make Paper Airplanes published at the 'play' market has multiple vulnerabilities...

zhonghua-paper.com XSS vulnerability

Vulnerable URL: http://www.zhonghua-paper.com/service/yy.asp?myname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16264361 Google...

Hacker-Friendly Search Engine that Lists Every Internet-Connected Device

Meet an all-new Hacker’s Search Engine similar to Shodan – Censys. At the end of last month, security researchers from SEC Consult found that the lazy manufacturers of home routers and Internet of Things IoT devices have been re-using the same set of hard-coded cryptographic keys, leaving around ...

artonpaper.co.za XSS vulnerability

Vulnerable URL: http://www.artonpaper.co.za/view.asp?pg=oidviewimage=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Microsoft Considers Earlier SHA-1 Deprecation Deadline

Tech companies continue to back away from SHA-1 like it’s an infectious disease. Microsoft, which already had plans to deprecate the crusty cryptographic algorithm by the start of 2017, decided this week to move up that deadline six months. The company said it’s considering whether it will start...

Mike Mimoso and Chris Brook Discuss the Latest Xen Vulnerability, CISA Passing the Senate, and More

Mike Mimoso and Chris Brook discuss the news of the week: The latest Xen vulnerability, CISA passing the Senate, a researcher challenging that Weak DH paper, and more. Download: newswrap10-30-15.mp3 Music by Chris Gonsalves...

Fewer IPsec VPN Connections at Risk to Weak Diffie-Hellman

A challenge has been made against one of the conclusions in a potentially blockbuster academic paper on cryptographic weaknesses that may be the open door through which intelligence agencies are breaking encrypted connections. The paper, “Imperfect Forward Secrecy: How Diffie-Hellman Fails in...

NSA Exploiting Weak Diffie-Hellman Primes to Break Crypto

The great mystery since the NSA and other intelligence agencies’ cyber-spying capabilities became watercooler fodder has not been the why of their actions, but the how? For example, how are they breaking crypto to decode secure Internet communication? A team of cryptographers and computer...

某论文系统三处注入打包(全部提交)

简要描述： rt 详细说明： rt 漏洞证明： 谷歌搜索：论文授权提交系统 第一处: http://202.120.121.200/tasi/admin/convert/convert.asp?action=querylist http://202.195.243.37/tasi/admin/convert/convert.asp?action=querylist http://202.116.50.25/tasi/admin/convert/convert.asp?action=querylist...

Flawed Android Factory Reset Failed to Clear Private Data from Smartphones

If you’re planning to sell your old Android smartphone then you need to think again because there is a weakness in the Android Factory Reset option that could be exploited to recover your login credentials, text messages, emails and pictures even if you have wiped its memory clean. Computer...

HackerOne: Reflected File Download

Info: Reflected File Download is a new web attack vector. It allows an attacker to craft a malicious file and present it to a victim, but there is no file present at the server. It was recently published at the BlackHat Eupore 2014 by Oren Hafif. Link to his presentation is given at the end...

Paper: NetFlow Data De-Anonymizes Tor Users

Tor Project leaders are trying to rein in concerns about an academic paper describing an end-to-end traffic correlation attack that could be used by a well-funded attacker such as a nation state to de-anonymize traffic on Tor. Executive director Roger Dingledine points out that the researchers...

某论文授权提交系统万能密码直接进行后台（影响很大）

简要描述： 论文授权提交系统 这个影响危害性我不用多说。。 google 百度 一大推（很多案例 好多重点大学） 可对论文进行操作 危害性很大了 详细说明： google 或者百度 论文授权提交系统 可以看到很多案例 软件产家 北京方正阿帕比技术有限公司 我们提出几个案例进行证明验证 http://pss.uestc.edu.cn/tasi/admin/ 账号跟密码都为 admin' or '1'='1 就可以登录了 案例二 http://202.120.121.200/tasi/admin/ 账号名跟密码都是 admin' or '1'='1 登录了 案例三...

CoreGraphics Information Disclosure - CVE-2014-4378

This article explores the exploitability of MobileSafari on IOS 7.1.x. Using a crafted PDF file as an HTML image makes it possible to leak information about the memory layout to the browser Javascript interpreter. Apple CoreGraphics library fails to validate input when parsing the colorspace...

Joomla com_jnewspaper (cid) SQL Injection Vulnerability

No description provided by source. / ! Joomla comjnewspaper cid SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://indonesiancoder.com ! Date : Tue, April 20, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...

MS Windows 2000/NT 4/XP Window Message Subsystem Design Error Vulnerability (7)

No description provided by source. source: http://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based...