9745 matches found
Popular Encryption Software TrueCrypt Shuts Down Mysteriously
TrueCrypt, the popular and reputed open source file and disk encryption Software for Windows, OSX and Linux, has abruptly closed down Wednesday recommending its users to use Microsoft's Bitlocker. TrueCrypt is a free, open-source and cross-platform encryption program, thereby one of the world's...
74cms the latest through the kill injection vulnerability-vulnerability warning-the black bar safety net
A iconv raised pork The tested website didn't fill it. ! the md5 solution does not open, but can be used to proof a variety of information, you know. exp:http://demo. 74cms. com/plus/ajaxcommon. php? act=hotword&query=%E9%8C%A6%27union+/!...
Batch site DNS zone transfer vulnerability detection-bash shell implemented-vulnerability warning-the black bar safety net
0x00 background The following illustration of eecs. cc author self-built a machine with a private root DNS server, and open the zone transfer permissions, so the results: the cc zone transfer success. The figure is just an experimental verification, the following article started! ! 2 0 1 4 0 5 1 ...
Modern sky any order unauthorized modifications-vulnerability warning-the black bar safety net
I heard that modern sky sent the tickets, get to. Require the year tickets! Norman Jade on! Goddess! I'm coming! (Vulnerability demonstration using your own test account, the story is this, there once was a handsome than the and an ugly ratio. A handsome than buying a heavens laugh, the shipping...
BTC China operations improper random user plaintext password leak-vulnerability warning-the black bar safety net
OpenSSL“heartbleed”vulnerability https://vip.btcchina.com ! !...
China UnionPay maintenance improperly may lead to the presence of a random log on UnionPay account and the server to obtain sensitive information-vulnerability warning-the black bar safety net
China UnionPay there is the operation and maintenance improper vulnerability OpenSSL "heartbleed" security vulnerability sign.unionpay.com In heartbleed's official website related to the CVE-2 0 1 4-0 1 6 0 vulnerability details, This is about the OpenSSL information leak vulnerabilities to cause...
Sogou pass server operation and maintenance improper lead to information disclosure-vulnerability warning-the black bar safety net
Sogou pass server operation and maintenance improper Server sensitive information disclosure Recently broke the openssl heartbleed vulnerability, this evening there have been detailed articles and the use of tools, a detailed analysis of the articles can be seen below: https://account.sogou.com T...
The only product of operational misconduct lead to sensitive information disclosure-vulnerability warning-the black bar safety net
Subject to the openssl Heartbleed impacts, Vulnerability ID: CVE-2 0 1 4-0 1 6 0 ! https://passport.vip.com ! Repair solutions: Test of the party's time has come...
Grand network operation and maintenance improper lead to sensitive information disclosure-vulnerability warning-the black bar safety net
Test it OPENSSL that python /Users/apple/Desktop/ssltest.py www.snda.com ! ! Just want to test the next vulnerability...
A remote code execution vulnerability to get Yahoo, Microsoft, Orange-vulnerability warning-the black bar safety net
Write ahead: An Egyptian hacker through a file upload, scored several large manufacturers its web site. And this dude talking was funny, a Comedy effect. The English version look here. Body: Hello guys, today I will show you a“Unauthorized Admin Access” caused by the “Remote Code Injection” I was...
Write a ring3 program compromised Duba hard disk protection-vulnerability warning-the black bar safety net
Write a ring3 program compromised Duba hard disk protection The test system environment: win7 64bit Use in Kingsoft offers online latest download new virus Blaster(Goku) Run a detailed description of the program, you can break the hard drive protection, Another bonus function: direct delete...
Design/Logic Flaw
Eval injection vulnerability in the flagimportformvalidate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrators to execute arbitrary PHP code via the "Flag import code" text area to admin/structure/flags/import...
CVE-2014-3453
CVE-2014-3453 affects the Drupal Flag module (flag import) where the eval injection occurs in flag_import_form_validate inside includes/flag.export.inc for Drupal 7.x-3.0, 7.x-3.5 and earlier. This enables remote code execution via the Flag import code text area (admin/structure/flags/import) for...
CVE-2011-2514
The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warnin...
CVE-2011-2514
The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warnin...
DEBIAN-CVE-2011-2514
The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warnin...
Design/Logic Flaw
The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warnin...
CVE-2011-2514
The Java Network Launching Protocol JNLP implementation in IcedTea6 1.9.x before 1.9.9 and before 1.8.9, and IcedTea-Web 1.1.x before 1.1.1 and before 1.0.4, allows remote attackers to trick victims into granting access to local files by modifying the content of the Java Web Start Security Warnin...
STRUTS2 S2-0 2 0 patch bypass vulnerability-vulnerability warning-the black bar safety net
0×0 0 background Security researchers noted that the Apache Struts2 vulnerability Bulletin S2-0 2 0, in process repair CVE-2 0 1 4-0 0 9 4 bug fixes program vulnerability exists, resulting patch is completely bypassed. 0×0 1 Analysis Struts2 S2-0 2 0 was added .\.|^ class\.. to filter action...
For the recent Bosch global eye OAuth vulnerability analysis and preventive recommendations-vulnerability warning-the black bar safety net
According to CnetreportsSingapore Nanyang Technological University, a man named Wang Jing PhD student, found that the OAuth and OpenID open source login tools the“covert redirect”vulnerabilityCovert Redirect to. First of all need to clear point is that the vulnerability is not present in the OAut...