Wiretapping storm: the Android platform https sniffing hijacking vulnerability-vulnerability warning-the black bar safety net

0x0 Preface Last year 1 0 mid-May, Tencent Security Center in the daily terminal Safety audits found that, in the Android platform used in https communication of app the vast majority of are not safe to use the google API, a direct result of https communication of sensitive information leakage ev...

Remember a simple social worker phone number for CASE-vulnerability warning-the black bar safety net

One day, ask the goddess phone number, the goddess told me is 150XXXX number of segments, and the remaining 4 bits let me guess, 1 0 0 0 0 species composition, excluding special numbers, there are also 9 0 0 0 a variety of combinations, this swollen guess Yeah, but in the present cock, the Stalke...

Cicada-known Enterprise Portal system v2. 5. 1 to bypass the patch to continue injection-vulnerability warning-the black bar safety net

/system/module/user/model.php public function update$account / If the user want to change his password. / if$this-post-password1 != false $this-checkPassword; ifdao::isError return false; $password = $this-createPassword$this-post-password1, $account; $this-post-set'password', $password; $user =...

ShellShock（BashDoor repair method-vulnerability warning-the black bar safety net

Check your system is not there to Bash the Door the vulnerability of the command: env-i X=' a=' bash-c 'echo date'; cat echo If vulnerability exists, the output result does not date the words, the following diagram is to repair success after the screenshots: ! shell shock, bash door, fix Cent OS...

HackerOne: homograph attack. IDNs displayed in unicode in bug reports and on external link warning page

the IDN: http://ebаy.com/ is a homograph for the latin ebay.com. if you click that first link, youm might think that you are going to ebay.com. in fact, you are going to a homograph url http://xn--eby-7cd.com/ more info http://www.chromium.org/developers/design-documents/idn-in-google-chrome more...

CVE-2014-5444

Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted certificate...

Code injection

Geary before 0.6.3 does not present the user with a warning when a TLS certificate error is detected, which makes it easier for remote attackers to conduct man-in-the-middle attacks via a crafted certificate...

Broken shell vulnerability, ShellShock emergency overview-vulnerability warning-the black bar safety net

| Key stage | public ---|--- Broken shell vulnerability, ShellShock emergency overview Third edition 2014/9/27 PM Know Chong Yu security research team 1. Updates Version | time | description ---|---|--- First edition | 2014/6/26 noon | first version completed. Second Edition | 2014/6/26 PM | 1...

Linux Bash find significant security vulnerabilities to modify the method-vulnerability warning-the black bar safety net

GMT 9 August 2 5, message, Linux users today and got a“surprise”it! The Red Hat security team on Linux in the widely used Bash shell, found a subtle but dangerous security vulnerabilities. The vulnerability called the“Bash Bug”or“Shellshock”is. When the user normal access, the vulnerability allow...

The use of“MS14-0 3 5”,the IE browser for malicious attacks-vulnerability warning-the black bar safety net

This vulnerability could cause Internet Explorer to crash, to version have ie8,9,1 0, Microsoft in 1 4 year 6 month 1 0 day release the Update Patch, So now the only attack there is no update this year 6 month 1 0 Number of IE browser. Details see here: http://www.exploit-db.com/exploits/33860/ A...

Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates

Overview Yahoo! Japan Box for Android provided by Yahoo Japan Corporation contains an issue where it fails to verify SSL server certificates. Yahoo Japan Corporation reported this vulnerability to JPCERT/CC to notify users of this issue through JVN. JPCERT/CC coordinated with Yahoo Japan...

Sogou browser 5. 0. 9. 13085HTTP204 fake website vulnerability-vulnerability warning-the black bar safety net

Brief description: Sogou browser 5. 0. 9. 13085HTTP204 fake website vulnerability Detailed description: ! Vulnerability proof: a the function d var k = window. open"java script:document. write4", "xx"; 1 2 next...

Ecmall Sql injection first watches. - Vulnerability warning-the black bar safety net

Brief description: Hit a patch try. Detailed description: In the app/message. app. php function drop $msgids = isset$GET'msgid' ? trim$GET'msgid' : "; if !$ msgids $this-showwarning'nosuchmessage'; return; $msgids = explode',',$msgids; $modmessage = &m'message'; foreach $msgids as $key=$msgid...

The latest bash vulnerability solution-exploits warning-the black bar safety net

Is today just broke the Bash security vulnerability, and SSH bash emergency security patches is very important. Test whether the presence of the vulnerability you Please execute the following command: root@keepalivenginxmaster / env x=' :;; echo vulnerable" bash-c "echo this is a test" 1 2 3 4 5 ...

Yahoo emergency fixes can lead to remote command execution SQL injection vulnerability-vulnerability warning-the black bar safety net

Yahoo emergency fixes can lead to remote command executionSQL injectionvulnerability ! Recently, due to the presence of serious SQL vulnerabilities, Yahoo's website had been penetrated by the big impact note: the site is not yahoo main station, but is affiliated with yahoo a India ideas collectio...

Twitter's latest exploit: a hacker can traverse account delete credit card-vulnerability warning-the black bar safety net

Just this month beginning of the month, with other social networks, twitter also started a new vulnerability reward program, bonus reached$1 4 0+/vulnerabilities, you can say the reward is still very lucrative. Compared to our domestic manufacturers to say, I personally think that this is a netwo...

sos: does not indicate data sent is potentially sensitive on Red Hat Enterprise Linux 5

sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux RHEL 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive...

Portable router storage 0 DAY vulnerability that hackers can steal the privacy-vulnerability warning-the black bar safety net

Tenda router 4G301 model the presence of memory-typeXSScross-site scripting vulnerability vulnerability number: RSV-2 0 1 4-0 0 1 River. Rising security experts, the vulnerability is currently no official patch, belonging to the 0 DAY vulnerability, an attacker can carefully construct a malicious...

Tenda portable router save 0DAY vulnerabilities hackers can steal the privacy-vulnerability warning-the black bar safety net

9 on 1 5 May, just on the line rising vulnerability platform to the following address: a http://loudong.rising.com.cn to exposed Tenda router 4G301 model the presence of memory-typeXSScross-site scripting vulnerability vulnerability number: RSV-2 0 1 4-0 0 1 River. Rising security experts, the...

CVE-2014-6392

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...