248 matches found
Discuz X2.5 时区逻辑错误
简要描述： Discuz X2.5 时区逻辑错误，导致Discuz某些应用不能正常使用 详细说明： Discuz X2.5 时区逻辑错误，导致Discuz某些应用不能正常使用 比如QQ登陆 漏洞证明：...
Fedora Update for pidgin FEDORA-2012-8686
Check for the Version of pidgin OpenVAS Vulnerability Test Fedora Update for pidgin FEDORA-2012-8686 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
[SECURITY] Fedora 15 Update: pidgin-2.10.4-1.fc15
Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...
腾讯TM、QQ消息远程命令执行漏洞
当用户发送此类格式“网址”的时候： codewww.baidu.com..............\Windows\System32\cmd.exe/code 对方接收之后，点击鼠标左键打开该网址的时候，会被当成路径打开，从而可以恶意执行一些程序、系统命令，造成严重安全隐患。 漏洞原理很简单，不解释了……，条件如下： 1、不能 url 编码，只能明文，囧rz…… 2、不能使用中、英文空格，路径会被“打断”。（可以试试自定义发包构造一下，或者尝试一下 Web 端发送。） 3、不能存在 % 号等特殊字符，原因和第一条一样。...
Discuz云平台QQ互联接口问题
简要描述： Discuz云平台QQ互联接口存在问题，导致用户在开通QQ联通的时候会爆出云平台的路径地址。 详细说明： Discuz云平台QQ互联接口存在问题，导致用户在开通QQ联通的时候会爆出云平台的路径地址。 漏洞证明：...
Tencent(腾讯)QQ手机管家 for Android 权限许可和访问控制漏洞
CVE-2011-4863 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent QQPimSecure com.tencent.qqpimsecure应用程序3.0.2版本中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改SMS/MMS消息和联系人列表。 0 QQ手机管家 3.0.2 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://msm.qq.com/...
QQ2011会话密钥泄露漏洞
腾讯QQ是在中国非常广泛使用的即时聊天工具。 Windows平台上QQ的客户端（包括QQ2010/2011等版本）在实现上存在安全漏洞，在生成会话密钥相关的临时密钥时使用了不安全的随机密钥生成算法，导致攻击者可以通过监听用户登录得到会话密钥，进而可以添加、修改、查看所有的聊天记录。 Tencent QQ 2011 Tencent QQ 2010 厂商补丁： Tencent ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://im.qq.com/qq/dlqq.shtml...
Tencent 3. vulnerability is a combination of use and solution-vulnerability warning-the black bar safety net
Author: onlyguest Brief description: Permissions bypass+Cross Site+Service end of not verify the=night between 4 million users tragedy Detailed description: The first landing Have a cookie after you open the following page A class=keylink href="http://faxin.soso.com/JSONPageUserGetgold.a%20href= ...
Tencent WEB QQ file transfer a tasteless vulnerabilities and fixes-vulnerability warning-the black bar safety net
Brief description: In the file name special characters not carried out inspection and restrictions. Detailed description: 2011-04-12 2 2:4 0:5 8 The other side has agreed to receive"C:\fakepath\1.asa;. jpg",began to transfer files. 2011-04-12 2 2:4 1:0 2 File"1. asa"the transfer is successful...
[SECURITY] Fedora 15 Update: pidgin-2.7.11-1.fc15
Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...
QQ INTERNATIONAL v Bêta 3 DLL Hijacking Exploit (mfc80fra.dll)
Exploit for windows platform in category local exploits / Exploit Title: QQ INTERNATIONAL v Bêta 3 DLL Hijacking Exploit mfc80fra.dll Date: 18/03/2011 Author: Metropolis Url: http://metropolis.fr.cr Software Link: http://www.toocharger.com/fiches/windows/qq-international/61560.htm Version: V1.2...
[SECURITY] Fedora 14 Update: pidgin-2.7.11-1.fc14
Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...
SuSE 10 Security Update : pidgin (ZYPP Patch Number 6709)
This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...
腾讯QQ 2010 SP1消息记录远程代码注入漏洞
腾讯QQ是一款在中国非常广泛使用的即时聊天工具。 腾讯QQ 2010 SP1在处理消息记录时，没有对会话消息中的Javascript和Html标签进行正确转义，攻击者可以发送恶意消息注入脚本代码并执行。 Tencent QQ 2010 SP1 最新版本的腾讯QQ已经修复此漏洞，建议用户下载使用： http://im.qq.com/qq/dlqq.shtml input onclick="window.location=' x68x74x74x70x3ax2fx2fx77x77x77x2ex62x6fx77x6fx73x2ex63x6fx6d'"/ img src='tetet'...
QQ电脑管家TSKsp.sys驱动本地拒绝服务漏洞
QQ电脑管家是QQ医生3.3的升级版本，主要功能包括安全防护、系统优化和软件管理。 QQ电脑管家所安装的TSKsp.sys驱动没有正确地验证用户所提交的调用参数，本地用户可以通过提交恶意的IOCTL请求导致内核崩溃。 Tencent QQ电脑管家 4.0 Beta1 厂商补丁： Tencent ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://pcmgr.qq.com/ !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of...
QQ Computer Manager TSKsp.sys Driver Denial Of Service
QQ Computer Manager TSKsp.sys Driver Local Denial of Service Vulnerability By Lufeng Li of Neusoft Corporation Vulnerable: QQpcmgr=v4.0Beta1 Vendor: Tencent Inc 1 Software Description: QQ doctors more than three years after the development and operation, and finally ushered in the fourth generati...
QQ Computer Manager TSKsp.sys Local Denial of Service Exploit
No description provided by source. !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform: Windows XPSP3 Chinese...
QQ Computer Manager - TSKsp.sys Local Denial of Service
QQ Computer Manager - TSKsp.sys Local Denial of Service !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local Denial of Service Exploit Author: Lufeng Li of Neusoft Corporation Vendor: http://pcmgr.qq.com Vulnerable App: http://dldir2.qq.com/invc/qqmaster/setup/QQPCMgrSetup.exe Platform:...
QQ Computer Manager TSKsp.sys Local Denial of Service Exploit
Exploit for windows platform in category dos / poc ============================================================= QQ Computer Manager TSKsp.sys Local Denial of Service Exploit ============================================================= !/usr/bin/python Title: QQ Computer Manager TSKsp.sys Local...
