Phone to grab votes APP“train up”to the presence of high-risk vulnerabilities in the user's personal information and other data leaks-bug warning-the black bar safety net

Data 3 6 0 patch-day vulnerability response platform shows that the domestic popular mobile phone to grab votes APP“train up”to the presence of high-risk vulnerabilities, including millions of tickets, ticket orders user ID number, username, plaintext password, detailed ticket information and oth...

About. git/config file leaked use-vulnerability warning-the black bar safety net

The beginning is also from the dark clouds that have such a vulnerability, many do not understand the might see on will feel a little confused, in fact, this vulnerability and svn leakage there is so little similar, can also according to the configuration file to restore the entire project proces...

From the source perspective on the ntpd stack buffer overflow vulnerability(CVE-2 0 1 4-9 2 9 5)analysis-vulnerability warning-the black bar safety net

Recently, the ntp's official website released a Update Patch: A total of 6 vulnerabilities 4 CVE number, both of Google Security Team found and submitted. Wherein the CVE-2 0 1 4-9 2 9 5 includes a 3 stack overflow: a This article from the source code perspective, these three stack overflow,...

An open source CMS to bypass the filtering XSS comfortably+getshell（viagra, the Shaolin Temple official website of the shots-the vulnerability warning-the black bar safety net

Brief description: I haven't at the front Desk too.。。。。 Powered by YIQICMS “Baidu for you to find relevant results about 1 7 2 0 0” Viagra official website shot Detailed description: The latest version 1. 8, The 首先 关注 /comment.php: code area if$action == "save" $msgtitle = $POST"msgtitle"; $msgna...

Hidden in the Share button in the attack: Blogger. com exposure of high-risk CSRF（cross-site request forgery）vulnerability-vulnerability warning-the black bar safety net

The Egyptian security expert Mazen shows Gamal Mesbah on Blogger. com found a high risk of CSRF（cross-site request forgery）vulnerabilities. The vulnerability can allow an attacker in blogger without the knowledge of writing and publishing blogs, while the private blog public. Blogger is Google's...

Mango cloud KODExlporer information leak+arbitrary command execution getshell(a-vulnerability warning-the black bar safety net

Do you want to blast your entire chrysanthemum it??? I take it slow and... Don't be afraid to hurt it. Give up Detailed description: Code I from official website next. Dog brother, waiting for the Universal rewards. I don't have how analysis, own download sets of source code to build it! I don't...

OHOCMS exposed 0day vulnerabilities-government system faced a serious threat-vulnerability warning-the black bar safety net

Recently, the Ann constant information security researcher found that the current in the domestic government, education, public security, healthcare and other sectors using a very high rate of government system“OHOCMS”multiple vulnerabilities, including arbitrary file upload, arbitrary file...

The sword refers to the Android and iOS system DoubleDirect middle attack-vulnerability warning-the black bar safety net

A security researcher found a new man in the middle attack technique, it targets mostly run of the Android system and iOS system of smartphone and tablets. This is called DoubleDirect of art belonging to the middleman（MITM attack. An attacker can use this technique to put the victim to visit...

CVE-2 0 1 4-1 8 0 6 . NET Remoting Services vulnerability analysis-vulnerability warning-the black bar safety net

0x00 description Microsoft . NET Remoting is a distributed processing manner, there is provided a method that allows the object by the application domain with the other objects to interact with the framework. A few days ago James Forshaw posted a CVE-2 0 1 4-1 8 0 6 . NET Remoting Services exploi...

Free open source photo album Piwigo <= v2. 6. 0 SQL injection vulnerability 0day-a vulnerability warning-the black bar safety net

Piwigo is the world's most famous free open source photo album system by PHP+MySQL architecture. Since the framework build easy, by domestic and foreign developers favor recently, Piwigo = v2. 6. 0 burst critical 0day vulnerability. Vulnerability causes,Piwigo photo album system/piwigo/picture. p...

Let the top of the Bash broken shell vulnerability is no longer difficult to understand under-the vulnerability warning-the black bar safety net

On the security of popular science: let the top of the Bash broken shell vulnerability is no longer difficult to understand onwe describe a lot of the basics, now it's time for us to build an environment of actual combat. Required environment description Virtual machine: Recommended to use...

CVE-2 0 1 4-0 0 3 8 kernel vulnerability principle and the local provide the right to use code analysis-vulnerability warning-the black bar safety net

2 0 1 4 1 3 No. 1, solar in the oss-sec mailing list published in the CVE（cve-2 0 1 4-0 0 3 8-in. This CVE relates to the X32 ABI. X32 ABI in the kernel linux3. 4 are merged in, but RHEL/fedora and other distributions and do not turn on the compile option, and therefore not affected by the CVE...

Yahoo emergency fixes can lead to remote command execution SQL injection vulnerability-vulnerability warning-the black bar safety net

Yahoo emergency fixes can lead to remote command executionSQL injectionvulnerability ! Recently, due to the presence of serious SQL vulnerabilities, Yahoo's website had been penetrated by the big impact note: the site is not yahoo main station, but is affiliated with yahoo a India ideas collectio...

Tenda portable router save 0DAY vulnerabilities hackers can steal the privacy-vulnerability warning-the black bar safety net

9 on 1 5 May, just on the line rising vulnerability platform to the following address: a http://loudong.rising.com.cn to exposed Tenda router 4G301 model the presence of memory-typeXSScross-site scripting vulnerability vulnerability number: RSV-2 0 1 4-0 0 1 River. Rising security experts, the...

Sudi Webplus 3 EX website group Content Management System any user password-reset-vulnerability warning-the black bar safety net

Sudi technology Webplus 3 EX website group content management system, the user password retrieve function design flaws lead to arbitrary user password reset. Test operation is as follows: 1. Since we don't have test account, so you need to register an account: the registered address by default is...

ProFTPd Local pr_ctrls_connect Vulnerability - ftpdctl vulnerability and exploit code analysis-vulnerability warning-the black bar safety net

Exploit code URL: http://www.exploit-db.com/exploits/394/ ! 1, Operating environment: 1, The ProFTPD 1.3.0/1.3.0 a 2, the compiled ProFTPD,--enable-ctrls option must be open ./ configure --enable-ctrls 2, The Run parameters: root@kali: gcc 3 9 4. c-o 3 9 4 root@kali: ./ 3 9 4 –s option -p...

Popular Hackforums Website Defaced by Egyptian Hacker

Hackforums - one of the popular hacking forum in the world - has been hacked and defaced by the famous Egyptian hacker with the online handle Eg-R1z. HackForums is popular among both whitehats and blackhats. On one end of the spectrum, HackForums helps over 110,000 hacking community members to...

MS IE 5/6,Outlook 2000/2002/5.5,Word 2000/2002 VBScript ActiveX Word Object DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4463/info A vulnerability has been discovered which is reported to affect Microsoft Internet Explorer, Outlook and Word. Other Office components may also be affected by this issue. It is possible to misuse VBScript Active...

ThinkPHP the Ubb tag vulnerability to read arbitrary contents of the-vulnerability warning-the black bar safety net

Brief description: ThinkPHP the Ubb tags, there is a code highlighting function, that satisfies: xxx/c odeorp hpxxx/p hpwhen it comes to the middle of the xxx to read, and highlight, the xxx is the path, and the non-specific code, as in Figure 1,The input path, when the file exists, the return is...

openSUSE Security Update : icedtea-web (openSUSE-SU-2011:0829-1)

This update of icedtea/icedtea-web fixes two issues : - CVE-2011-2513: CVSS v2 Base Score: 4.3: An information leak allows unsigned Web Start applications to determine the path to the cache directory used to store downloaded class and jar files. - CVE-2011-2514: CVSS v2 Base Score: 5.1 An unsigne...