Cloud Security Series: 360GearTeam again found QEMU multiple vulnerabilities-vulnerability warning-the black bar safety net

! 2 0 1 6 years and 8 months or so, the odd Tiger 3 6 0 to the QEMU official report a number of QEMU vulnerabilities in. They allow an attacker to attack a virtual machine or the host machine itself, causing a denial of service or arbitrary code execution. 360GearTeamoriginal 3 6 0 cloud security...

NSA USA NSA）leakage of the document depth analysis PART 1-the vulnerability warning-the black bar safety net

One, Foreword The firewall is protect the network the machine is not affected by the network attacker against the first track is also very core of the Defense, the most basic function is that external parties cannot access to the internal network of the machine, the internal staff can normally...

8 on 1 9: The Shadow-Brokers the leaked file description, technical analysis on-the vulnerability warning-the black bar safety net

! 0x01 exposure data with the equation and NSA relationship From the leaked data packet with the decompressed content to see, specifically for the firewall device attack and penetration action when the use of the tool set. According to the data exposed persons Shadow Brokers described, this packe...

Warning — Bitcoin Users Could Be Targeted by State-Sponsored Hackers

Another day, another bad news for Bitcoin users. A leading Bitcoin information site is warning users that an upcoming version of the Blockchain consolidation software and Bitcoin wallets could most likely be targeted by "state-sponsored attackers." Recently, one of the world's most popular...

Cisco repair Shadow Brokers announced the vulnerability and released technical analysis-vulnerability warning-the black bar safety net

A, event summary 2 0 1 6 years 8 on 1 5 December, a named“The Shadow Brokers”the shadow broker-hacking group claims to Own the intrusion of the Equation Group equation organization of hacking an organization's computer system, and successfully steal a lot of confidential information and hacker...

Samsung pay gaps can lead to a hack trade hijacking-vulnerability warning-the black bar safety net

! Spanish security researcher Salvador Mendoza found Samsung Pay a security vulnerability, this vulnerability once exploited, hackers will be able to use another device to the victims of the trade hijacking. Based on a contactless payment system, is many of the newer Samsung phones with the...

php code audits preg_replace throw phpmyadmin(4.3.0-4.6.2)command execution vulnerability-vulnerability warning-the black bar safety net

Days thaw letter Alpha lab Li Zhe Here take the cve-2 0 1 6-5 7 3 4 talk about pregreplace triggered command execution vulnerability, the vulnerability in exploit-db, to help with the script, after the test no problem. Here on this vulnerability is about back tracking to explain the pregreplace...

HTTP2. 0 Protocol is aeration 4 high-risk vulnerabilities can cause server to crash-bug warning-the black bar safety net

! If you think that HTTP2. 0 Protocol than the standard HTTP Hypertext Transfer Protocol more secure, then you're wrong. Researchers spent 4 months in HTTP2. 0 Protocol found 4 vulnerabilities that! Last 2 month, Google put their SPDY project bundled into HTTP2. 0, intended to strengthen the page...

Firefox local file disclosure and same-origin policy bypass-vulnerability warning-the black bar safety net

Security research experts found that an attacker can use the Firefox browser offers“page Save as”function to read the target user's computer stored in any file. In addition, the attacker can also use this mechanism to get external web server in the data content. This kind of thing occurs, is...

Millet bracelet memory vulnerability hackers can get private data-vulnerability warning-the black bar safety net

According to the Open Effect analysis, a common wearable devices in theory, there is an attack or data being intercepted possibilities. ! We have no concerns over wearable devices, the network security? From the Open Effect of the researchers conclusions may not be too optimistic. According to th...

LastPass Password Manager exposed a major vulnerability please upgrade your Firefox add-ons-bug warning-the black bar safety net

Focus on finding vulnerabilities a security researcher, has discovered well-known online Password Manager LastPass is a potential risk that an attacker can take the contact to the user's online account. Fortunately, LastPass has fixed this allow an attacker remote access to the millions of accoun...

KeySniffer Lets Hackers Steal Keystrokes from Wireless Keyboards

Radio-based wireless keyboards and mice that use a special USB dongle to communicate with your PC can expose all your secrets – your passwords, credit card numbers and everything you type. Back in February, researchers from the Internet of things security firm Bastille Networks demonstrated how...

Using free http proxy IP for the network scanning-vulnerability warning-the black bar safety net

How from free proxy IP, find a vulnerability, here is my definition of discovered vulnerabilities, is because I personally feel that this vulnerability is a technical comparison of the difference, the more likely is the discovery, analysis, and summary. As a Information Security for the novice, b...

Fujian four create disaster early warning system/Disaster/OutGBExcel. aspx file queryvalue parameter SQL injection vulnerability

No description provided by source...

Gratipay: User Supplied links on profile page is not validated and redirected via gratipay.

User Supplied links on profile page is not validated and redirected via gratipay. ==================== Description --------------------- The user profiles on gratipay has a profile statement section which is supported by markdown. An adversary can update the profile section with a hyper link URL ...

Jenkins RCE 2(CVE-2 0 1 6-0 7 8 8)analysis and use-vulnerability and early warning-the black bar safety net

Foreign security researchers Moritz Bechler in 2 months found a Jenkins remote command execution vulnerability the vulnerability without having to login you can use, that is, the CVE-2 0 1 6-0 7 8 8 is. The official announcement is such description of this vulnerability: A vulnerability in the...

Fiat Chrysler Launches Bug Bounty with $1.5K Payout Cap

Hacking Jeeps is about to get a lot more competitive. That’s because Jeep maker Fiat Chrysler Automobiles has launched a bug bounty program in conjunction with Bugcrowd that will payout as much as $1,500 per bug. Fiat Chrysler, the world’s No. 7 automaker, claims it will be the first Detroit...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 7 Extended Update Support. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

The Web in conditions of competitive Race conditions）vulnerability-vulnerability warning-the black bar safety net

In order to improve developer and network security personnel on the conditions of the competitive attacks of vigilance,I wrote this blog. I think not many people know about this problem,to this end, I researched some of the points system is susceptible to conditions of competition to attack the C...

Malicious Pokémon Go Features Backdoor, RAT

Researchers are warning would-be Pokémon Trainers that a malicious, backdoored version of the massively popular game Pokémon Go could be making the rounds soon. An APK Android application package file of the game has been rigged with a remote access tool RAT called Droidjack that if installed,...