QQ chat send files to each other directly to freeze the other QQ number-vulnerability warning-the black bar safety net

Vulnerability summary Vulnerability title: QQ friends to chat send files to each other directly to freeze the other QQ number Vulnerability author: honker pacifier YY-red Disclosure time: 2013-3-27 Hazard rating: medium Vulnerability status: not linked to vendors or manufacturers actively ignored...

[Black maternity Cape]recent massive QQ space phishing-script secure-the black bar safety net

! Little gossip under the Black production These days receive some friends the message that hope can science lower the Black output: the “String brother, can science lower the Black output now development to what stage? Regular users of what information was sold to who?” “Hello, can science some...

QQ bypass the main display account add vulnerability-vulnerability warning-the black bar safety net

Brief description: Should be QQ again and yet another to bypass the main display account add friends bug,you can add some set to:only by the main display account to find the user. But the condition is the need for space is set to a non-any people inside. But now most of the users in order to...

Mobile Malware Dubbed 'Bill Shocker' Targets Chinese Android Users

A new bit of malware is targeting popular apps on Android mobile devices to spew costly spam. Beijing- and Dallas-based NQ Mobile said at least 600,000 Chinese users have been hit with the malicious code named “Bill Shocker” a.expense.Extension.a because it runs up the bills of infected users whi...

WIN8系统QQ拼音输入法绕过认证获取访问漏洞

No description provided by source...

Win8 Remote Desktop vulnerabilities: the use of QQ Pinyin pure version achieve to mention the right-vulnerability warning-the black bar safety net

Foreword The discovery of this vulnerability, the author is the room class. Are looking to With 3 3 8 9 Remote Desktop to control the hostel computer all the time, because to redo the system to forget its own IP address, and therefore can readily scan a bit in the IP section of the opening 3 3 8 ...

Fedora Update for pidgin FEDORA-2012-10287

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-10287 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Scientific Linux Security Update : pidgin on SL3.x, SL4.x, SL5.x i386/x86_64

A buffer overflow flaw was found in the way Pidgin initiates file transfers when using the Extensible Messaging and Presence Protocol XMPP. If a Pidgin client initiates a file transfer, and the remote target sends a malformed response, it could cause Pidgin to crash or, potentially, execute...

[SECURITY] Fedora 16 Update: pidgin-2.10.5-1.fc16

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

Discuz X2.5 时区逻辑错误

简要描述： Discuz X2.5 时区逻辑错误，导致Discuz某些应用不能正常使用 详细说明： Discuz X2.5 时区逻辑错误，导致Discuz某些应用不能正常使用 比如QQ登陆 漏洞证明：...

Fedora Update for pidgin FEDORA-2012-8686

Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-8686 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 15 Update: pidgin-2.10.4-1.fc15

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

腾讯TM、QQ消息远程命令执行漏洞

当用户发送此类格式“网址”的时候： codewww.baidu.com..............\Windows\System32\cmd.exe/code 对方接收之后，点击鼠标左键打开该网址的时候，会被当成路径打开，从而可以恶意执行一些程序、系统命令，造成严重安全隐患。 漏洞原理很简单，不解释了……，条件如下： 1、不能 url 编码，只能明文，囧rz…… 2、不能使用中、英文空格，路径会被“打断”。（可以试试自定义发包构造一下，或者尝试一下 Web 端发送。） 3、不能存在 % 号等特殊字符，原因和第一条一样。...

Discuz云平台QQ互联接口问题

简要描述： Discuz云平台QQ互联接口存在问题，导致用户在开通QQ联通的时候会爆出云平台的路径地址。 详细说明： Discuz云平台QQ互联接口存在问题，导致用户在开通QQ联通的时候会爆出云平台的路径地址。 漏洞证明：...

Tencent(腾讯)QQ手机管家 for Android 权限许可和访问控制漏洞

CVE-2011-4863 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent QQPimSecure com.tencent.qqpimsecure应用程序3.0.2版本中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改SMS/MMS消息和联系人列表。 0 QQ手机管家 3.0.2 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://msm.qq.com/...

QQ2011会话密钥泄露漏洞

腾讯QQ是在中国非常广泛使用的即时聊天工具。 Windows平台上QQ的客户端（包括QQ2010/2011等版本）在实现上存在安全漏洞，在生成会话密钥相关的临时密钥时使用了不安全的随机密钥生成算法，导致攻击者可以通过监听用户登录得到会话密钥，进而可以添加、修改、查看所有的聊天记录。 Tencent QQ 2011 Tencent QQ 2010 厂商补丁： Tencent ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://im.qq.com/qq/dlqq.shtml...

Tencent 3. vulnerability is a combination of use and solution-vulnerability warning-the black bar safety net

Author: onlyguest Brief description: Permissions bypass+Cross Site+Service end of not verify the=night between 4 million users tragedy Detailed description: The first landing Have a cookie after you open the following page A class=keylink href="http://faxin.soso.com/JSONPageUserGetgold.a%20href= ...

Tencent WEB QQ file transfer a tasteless vulnerabilities and fixes-vulnerability warning-the black bar safety net

Brief description: In the file name special characters not carried out inspection and restrictions. Detailed description: 2011-04-12 2 2:4 0:5 8 The other side has agreed to receive"C:\fakepath\1.asa;. jpg",began to transfer files. 2011-04-12 2 2:4 1:0 2 File"1. asa"the transfer is successful...

[SECURITY] Fedora 15 Update: pidgin-2.7.11-1.fc15

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

QQ INTERNATIONAL v Bêta 3 DLL Hijacking Exploit (mfc80fra.dll)

Exploit for windows platform in category local exploits / Exploit Title: QQ INTERNATIONAL v Bêta 3 DLL Hijacking Exploit mfc80fra.dll Date: 18/03/2011 Author: Metropolis Url: http://metropolis.fr.cr Software Link: http://www.toocharger.com/fiches/windows/qq-international/61560.htm Version: V1.2...