Using QQ panel login authentication is not strictly+Arp sniffing to login within the network of the other QQ space,Weibo, etc free password-vulnerability warning-the black bar safety net

This can be said that there is no technical content,just saying an idea,first simple demo. 1. Open burp set up the browser proxy and then under the QQ panel, QQ space fast landing you can see the burp intercept,is the intercept of this segment of the RUL ! 2. Put this URL copy the following down ...

IBM DB2 < 9.5 pack 3a - Data Stream Denial of Service Exploit

No description provided by source. Discovered by Dennis Yurichev [email protected] DB2TEST database should be present on target system GUEST account with QQ password shoule be present on target system from sys import from socket import sockobj = socketAFINET, SOCKSTREAM sockobj.connect argv1, 500...

Tencent QQ 2006 LaunchP2PShare Multiple Stack Buffer Overflow Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26613/info Tencent QQ is prone to multiple stack-based buffer-overflow vulnerabilities because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting these issues allows...

74CMS最新版SQL注入（同一文件多处）

简要描述： 74CMS最新版SQL注入（同一文件多处） 详细说明： user/personal/personalresume.php文件： 第一处SQL注入： //创建简历 -保存基本信息 elseif $act=='make1save' $captcha=getcache'captcha'; $postcaptcha = trim$POST'postcaptcha'; if$captcha'verifyresume'=='1' && empty$postcaptcha && intval$REQUEST'pid'===0 showmsg"请填写验证码",1; if...

Tencent QQ explosion large vulnerability a hacker can log on QQ mailbox, and other services-vulnerability warning-the black bar safety net

Recently exposed by Tencent QQ, a very serious vulnerability, called Tencent QQ client there is a serious Safety defect-Tencent an interface is not a strict validation access source IP, resulting in ClientKEY Access Protection is bypassed, the hacker could just obtain the user's ClientKEY, you ca...

[SECURITY] Fedora 19 Update: pidgin-2.10.9-1.fc19

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Friends network queries QQ number of vulnerability-vulnerability warning-the black bar safety net

Brief description: By fixing the code friends network seconds check the QQ number. Detailed description: By extracting the friends network feature code, plus a string of fixed code. Both can seconds to detect each other's QQ space. That QQ number of natural to be informed. Criminals if through th...

欧朋网数据库可被直接下载导致大量用户信息泄露

简要描述： 欧朋网数据库被直接下载，用户信息泄露，有用户名、邮箱、手机号，密码（已破解了一些），QQ号等。 详细说明： 下载地址： http://r.oupeng.com/tmp/users.sql 下载后不想麻烦建个表了，用记事本将就着看： 表结构： CREATE TABLE users uid int10 unsigned NOT NULL AUTOINCREMENT, username char20 NOT NULL, password char64 NOT NULL, email char125 NOT NULL, emailstate tinyint1 NOT NULL...

V5shop数据库弱口令导致内部更多敏感数据可被社工（已证明）

简要描述： http://www.wooyun.org/bugs/wooyun-2013-027611 大家看我发的上一个漏洞！ 我社工了一下下..... 详细说明： 不打码了，白帽子也要被尊重！ wooyun-2013-027611这个漏洞引发的... 你们从图片看到什么了吗？ lvw马赛克08.net 对了，这就是亮点，目测QQ企业邮箱的 解密了！刚刚充了1000条，呵呵 lvw马赛克08.net Lvw马赛克996 看看企业邮箱！ 好吧！成功了................. 漏洞证明： 好多信息泄漏！...

Oracle Linux 4 : pidgin (ELSA-2009-1060)

From Red Hat Security Advisory 2009:1060 : Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program...

Discuz!某处功能缺陷可导致特定情况下无视安全提问直接登录

简要描述： 详细说明： Discuz!X云平台有QQ互联功能，可使用QQ账号绑定论坛账户登陆论坛。但是，如果论坛账户设置了安全提问的情况下，使用关联的QQ账号登陆依然不需要安全提问，造成安全问题。 漏洞证明： 0x01.我在一次安全测试中拿下了某小型领主站的数据库，并把它还原到了我的phpmyadmin中。经过查找，其中有5d6d某版主的密码hash。（此处有一个提示，precommonmember表中保存的并不是真实的密码md5，真正的hash在preucentermembers表中，算法为md5md5$pass.$hash 0x02.把hash拿去cmd5解密...

QQ chat send files to each other directly to freeze the other QQ number-vulnerability warning-the black bar safety net

Vulnerability summary Vulnerability title: QQ friends to chat send files to each other directly to freeze the other QQ number Vulnerability author: honker pacifier YY-red Disclosure time: 2013-3-27 Hazard rating: medium Vulnerability status: not linked to vendors or manufacturers actively ignored...

[Black maternity Cape]recent massive QQ space phishing-script secure-the black bar safety net

! Little gossip under the Black production These days receive some friends the message that hope can science lower the Black output: the “String brother, can science lower the Black output now development to what stage? Regular users of what information was sold to who?” “Hello, can science some...

QQ bypass the main display account add vulnerability-vulnerability warning-the black bar safety net

Brief description: Should be QQ again and yet another to bypass the main display account add friends bug,you can add some set to:only by the main display account to find the user. But the condition is the need for space is set to a non-any people inside. But now most of the users in order to...

Mobile Malware Dubbed 'Bill Shocker' Targets Chinese Android Users

A new bit of malware is targeting popular apps on Android mobile devices to spew costly spam. Beijing- and Dallas-based NQ Mobile said at least 600,000 Chinese users have been hit with the malicious code named “Bill Shocker” a.expense.Extension.a because it runs up the bills of infected users whi...

WIN8系统QQ拼音输入法绕过认证获取访问漏洞

No description provided by source...

Win8 Remote Desktop vulnerabilities: the use of QQ Pinyin pure version achieve to mention the right-vulnerability warning-the black bar safety net

Foreword The discovery of this vulnerability, the author is the room class. Are looking to With 3 3 8 9 Remote Desktop to control the hostel computer all the time, because to redo the system to forget its own IP address, and therefore can readily scan a bit in the IP section of the opening 3 3 8 ...

Fedora Update for pidgin FEDORA-2012-10287

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-10287 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Scientific Linux Security Update : pidgin on SL3.x, SL4.x, SL5.x i386/x86_64

A buffer overflow flaw was found in the way Pidgin initiates file transfers when using the Extensible Messaging and Presence Protocol XMPP. If a Pidgin client initiates a file transfer, and the remote target sends a malformed response, it could cause Pidgin to crash or, potentially, execute...

[SECURITY] Fedora 16 Update: pidgin-2.10.5-1.fc16

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...