Windows Remote Desktop vulnerability Esteemaudit（CVE-2017-9073 patch brief analysis-vulnerability warning-the black bar safety net

In the last month, we have for the equation of the tissue is the leakage of ESTEEMAUDIT vulnerability, wrote a brief analysis, and until we found this exploit only applies to join the Windows domain the computer front, we are trying to reproduce this issue, but relatively speaking, writing the...

CVE-2017-0199: in-depth analysis of the Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

0x00 Preface Recently, researchers also found a number of CVE-2017-0199 vulnerability of the sample. Although the Microsoft in this year 4 month has been released for the vulnerability the patch, but since its use is relatively simple, worldwide usage is still very high, here to share some of the...

CVE-2017-0199: in-depth analysis of the Microsoft Office RTF vulnerability-vulnerability warning-the black bar safety net

Recently, researchers also found a number of CVE-2017-0199 vulnerability of the sample. Although the Microsoft in this year 4 month has been released for the vulnerability the patch, but since its use is relatively simple, worldwide usage is still very high, here to share some of the phishing...

From the patch compare to the PoC to reproduce it MS16-0 3 0-vulnerability warning-the black bar safety net

MS16-0 3 0 vulnerability MS16-0 3 0 vulnerabilities Windows OLE remote code execution vulnerability, since OLE does not have the correct validation of user input, causing by the special structure of the file or the program can trigger the vulnerability, causing the user to click on after the remo...

BinDiff Now Free, To Delight of Security Researchers

BinDiff is a constant presence inside a security researcher’s toolbox, ideal for patch and malware analysis or reverse engineering of code. The Google-owned software allows researchers to conduct side-by-side comparisons of binary files in disassembled code looking for differences in the samples...

WordPress 4.2. 2 fix 4. 2. 1 in the truncated Xss patch analysis-vulnerability warning-the black bar safety net

Vulnerability analysis In the patch description, wherein a bar is fixed at 4. 2. 1 version of the patch bypass afterxssissues, take the opportunity the following analysis in response toxssgenerated during the use of different truncation methods multiple times to repair after currently specific...

[CVE-2 0 1 4-8 9 5 9] phpmyadmin arbitrary file include vulnerability analysis with presentation-vulnerability warning-the black bar safety net

0x01 vulnerability description phpmyadmin is a widely used mysql database management software, based on PHP development. Latest CVE-2 0 1 4-8 9 5 9 announcement, mentioned the program several versions exist of any of the files containing the vulnerability, affected versions are as follows:...

Struts2 latest remote code execution vulnerability S2-0 1 6 official patch analysis-vulnerability warning-the black bar safety net

Contrast a bit stucts svn, in fact, only modified one file ! For the action of the prefix, an increase cleanactionname function, filtering the ognl implementation, For the redirect and redirectaction prefix, the direct removal. !...

Overflow vulnerability scan technique method and implementation-vulnerability warning-the black bar safety net

First, Windows under the commonly used overflow vulnerability scan method For vulnerability scanning, we commonly used methods are the following: 1． Testing services the port is open or not. This is the most basic, but also the accuracy rate is the lowest kind of way. Directly to the target machi...

Read the new procedure-based on the open source code to update the vulnerability discovery techniques-vulnerability warning-the black bar safety net

Author: FireFoxF. s. T Article submission in 0 9 year 2 hacking client manual The editors agreed to release the object is for everyone to have better communication more exciting content, see the hacker Handbook Background: The so-called patch or update, it has been is the research and development...

Windows kernel vulnerability ms08025 analysis-vulnerability warning-the black bar safety net

Source:security focus Author: Polymorphours Email: [email protected] Homepage:http://www.whitecell.org Date: 2008-04-10 After internal discussion, it was decided to publish the analysis results. 4 on No. 8, microsoft again released a kernel patchKB941693, Microsoft the vulnerability is...