365 matches found
Spy Agencies Hijack Google Play Store to Install Spyware on Smartphones
I have an Android phone with a five different gmail accounts configured in it. But what if any one of them get compromised via phishing, malware or any other way? The Hacker would be able to access my Google account and obviously Google Play Store account too, which allows anyone to install any...
CVE-2015-0683
Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744...
Information disclosure
Cisco Unified Communications Domain Manager 8.14 allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744...
Facebook Launches Free Mobile Internet Service In India
Last year, the founder of the Social Network giant highlighted the future of universal Internet access, the dream that Facebook founder Mark Zuckerberg wants to fulfill — Making Internet access available to everyone across the world just like a service as essential as of 911 in the case of an...
知道key的情况下对ucserver进行注射
简要描述： 因为帮finger解决问题，无意中看到的漏洞。 怎么拿到key要问finger。 详细说明： 在/ucserver/control/feed.php内有一段代码： function onadd $this-load'misc'; $appid = intval$this-input'appid'; $icon = $this-input'icon'; $uid = intval$this-input'uid'; $username = $this-input'username'; $bodydata =...
CVE-2014-6691
The UC Browser HD aka com.uc.browser.hd application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The UC Browser HD aka com.uc.browser.hd application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6691
The vulnerability CVE-2014-6691 affects UC Browser HD (com.uc.browser.hd) for Android, version 3.3.1.469. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Impact is i...
CVE-2014-6691
The UC Browser HD aka com.uc.browser.hd application 3.3.1.469 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
UC Gateway Investment SiteEngine 5.0 'api.php' URI Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31888/info SiteEngine is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing-style attacks. SiteEngine 5.0 is...
C4B XPhone UC Web 4.1.890S R1 XSS Vulnerability
No description provided by source...
Discuz UC_Server 本地文件包含漏洞（有条件限制）
简要描述： 怀着忐忑的心情提交了这个漏洞，依旧相信wooyun是一个良好的平台 赌上了作为一个白帽子的节操，不要在让他碎一地 详细说明： 条件一： 需要UC管理员权限。 条件二： 前台可上传带有PHP代码的可控文件。 漏洞函数onping在文件ucserver\control\admin\app.php function onping $ip = getgpc'ip'; $url = getgpc'url'; $appid = intvalgetgpc'appid'; $app = $ENV'app'-getappbyappid$appid; $status = '';...
PHPEMS (在线考试系统) 设计缺陷 Getshell一枚(官网已shell)
简要描述： 号称是最好用的开源php考试系统? 果断来看看。 已拿下官网。 详细说明： PHPEMS整合了uc。 在api/config.inc.php中 define'UCCONNECT', 'mysql'; define'UCDBHOST', 'localhost'; define'UCDBUSER', 'root'; define'UCDBPW', 'root'; define'UCDBNAME', 'ucenter16'; define'UCDBCHARSET', 'utf8'; define'UCDBTABLEPRE', 'ucenter16.uc';...
OpenSSL null pointer dereference do_ssl3_write-vulnerability warning-the black bar safety net
Our UC – KEEL tool found dossl3write a null pointer dereference error in ssl/s3pkt. c for the reminder to hang SSLMODERELEASEBUFFERS flag. This bug affect the latest 1. 0. 1 branch. dossl3write in the code to detect whether the buffer is NULL 6 4 4 if wb-buf == NULL6 4 5 if ! ssl3setupwritebuffer...
kingcms the latest version sql injection vulnerability-vulnerability warning-the black bar safety net
Brief description: kingcms injection vulnerability Detailed description: api/uc.php UCKEY not initialized cause injection ? php define'UCCLIENTVERSION', '1.5.0'; //note UCenter version identifier define'UCCLIENTRELEASE', '2 0 0 9 0 5 0 2'; define'APIDELETEUSER', 1; //note the user to delete the A...
[Bluebox-ng] UC/VoIP Security Tool
Bluebox-ng is a next generation UC/VoIP security tool. It has been written in CoffeeScript using Node.js powers. This project is "our 2 cents" to help to improve information security practices in VoIP/UC environments. GitHub repo : https://github.com/jesusprubio/bluebox-ng IRCFreenode :...
CVE-2012-4970
Cross-site scripting XSS vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-4970
Cross-site scripting XSS vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1J, and commercial software before 3.0.5, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PHPDrive privilege elevation vulnerability and the Fix-vulnerability warning-the black bar safety net
PHPDrive is set to run in the PHP environment file management system, can be applied to a network disk, enterprise document management, schools, team management, software, file, CMS, etc. includes/user.lib.php Row 8 7 function getip ifisset$SERVER"HTTPXFORWARDEDFOR"&&$SERVER"HTTPXFORWARDEDFOR" $i...