7620 matches found
Foxit PDF reader there 2 at high-risk vulnerabilities, the vendor has refused to fix? - Vulnerability warning-the black bar safety net
Use Foxit Foxit PDF reader's user to pay special attention to the security researchers which discovered two serious 0day vulnerability, such as not the reader is configured in the secure read mode open file, it would let the attacker on the target computer to execute arbitrary code. Foxit company...
PWN2OWN 2017 the Linux kernel to mention the right vulnerability analysis-vulnerability warning-the black bar safety net
! 0. Foreword In 2017, the PWN2OWN contest, the long Pavilion security research lab Chaitin Security Research Lab successfully demonstrates Ubuntu 16.10 Desktop of the local extraction rights. This attack mainly use the linux kernel IPSEC frameworkfrom linux2. 6 Start supportin a memory bounds...
FLASH net horse quietly coming out of the Internet-vulnerability warning-the black bar safety net
ps:it is recommended that everyone upgrade as soon as possible flash plug-in. In recent days the interception to the use of the Adobe Flash Player SWF file vulnerability network horses, the net horse through the page loading a normal FLASH file, then in the FLASH file calls the embedded construct...
OXID eShop two vulnerability analysis-vulnerability warning-the black bar safety net
RIPS in the OXID eShop software was detected in a high-risk vulnerability, an unauthorized attacker could exploit the vulnerability in a few seconds the remote take over using the default configuration of the target site. In addition the admin panel there is also another vulnerability, an attacke...
DLINK DCS-5020L wireless cloud camera remote code execution vulnerability analysis-vulnerability warning-the black bar safety net
This article is mainly to demonstrate, how to find IOT device vulnerability. Look for the following commands of the injection process can be divided into 3 steps, somewhat similar to the 100 point CTF challenge: download the binary file, run the string, the tracking system calls to the origin of...
How to use JavaScript array extensions integer overflow vulnerabilities in WebKit-a vulnerability warning-the black bar safety net
I will be in this article to tell you about the vulnerability, CVE-2017-2536/ZDI-17-358, which is a typical plastic overflow vulnerability, when the system is in the calculation of the allocated space size, the vulnerability will likely lead to a heap buffer overflow. We not only give you...
Bluetooth App vulnerability series analysis II CVE-2017-0639-vulnerability warning-the black bar safety net
Author: heeeeen Belongs team: MS509Team 0x01 vulnerability profile Android this month's security Bulletin, the repair we discover another Bluetooth App information disclosure vulnerability that could allow an attacker to obtain the bluetooth owned by the user private files, bypassing the...
360Vulcan: the NSA Arsenal of Eternalromance (eternal romance) vulnerability analysis-vulnerability warning-the black bar safety net
In the Shadow Brokers disclosed the NSA's hacking Arsenal, Eternalromance eternal romance is the impact of Windows full platform SMBv1 vulnerability attack tool that has been Microsoft patch MS17-010 repair, Windows XP and 2003, etc. is not Microsoft support period of the system version without t...
Method crack Microsoft EFS encrypted files try-vulnerability warning-the black bar safety net
This article records The is I stumbled upon a hack EFS file encryption technology experience. This is only my accidental discovery of a method, not a hack technique, because in principle I can only speculate, and the use of the software are also others. I at Best be considered earlier than others...
Struts2 5 remote code execution exploit POC+batch+DEMO-vulnerability warning-the black bar safety net
Note: The use of the tool can be used in any language in fact, is to send the exploit code on the line. A request for a response, I try to use pure JS PHP JSP JavaSwing JavaFX now android version faster write better. I was going to send the video and the use of the tool however, or forget it, you...
TP-LINK Wi-Fi Repeater to a vulnerability that can be used for remote code execution-vulnerability warning-the black bar safety net
IBM X-Force researcher Grzegorz Wypych recently issued a warning that some of the TP-Link Wi-Fi Repeater devices there is a serious remote code execution vulnerability, the vulnerability can lead to external attackers access device privileges and execute arbitrary commands. ! IBM Security section...
Zabbix multiple high-risk vulnerabilities-vulnerability warning-the black bar safety net
About Zabbix zabbix is a WEB-based interface to provide distributed system monitoring and network monitoring capabilities of enterprise-class open source solutions. zabbix to monitor various network parameters, ensure that the server system of the security operations;and to provide flexible...
Linux vulnerability analysis-MP3Info 0.8.5 a code execution vulnerability, CVE-2006-2465-a vulnerability warning-the black bar safety net
Author: k0shl reprint please indicate the source: http://whereisk0shl.top Vulnerability description Software download: https://www.exploit-db.com/apps/cb7b619a10a40aaac2113b87bb2b2ea2-mp3info-0.8.5a.tgz PoC: junk = "\x90\x90\x90\x90"8 shellcode = "\x31\xc0\x50\x68/\x68/bin\x89\the...
TP-link TL-WR840N router series there is a CSRF vulnerability, you can modify any of the configuration containing the POC-the exploit-warning-the black bar safety net
TP-Link routers in the domestic volume of users is very large, the recent foreign security researchers found that the TP-Link a series of routers there is a CSRF vulnerability, an attacker can modify the router in any configuration, including DNS, etc. Vulnerability TP-Link TL-WR840N router...
5 on Microsoft patch KB2871997 and KB2928120 exploit analysis-exploit warning-the black bar safety net
5 month, Microsoft in 1 3, released monthly security update, which has KB2871997 and KB2928120 two Knowledge Base articles Knowledgeased and KB2871997 is not even a Security Bulletin to. For either as the attack of the penetration tester or as a defense of the Administrators ignore these two...
Easy WP SMTP v1. 3. 9）0 day vulnerability is being attacked in the process and reproducibility-vulnerability warning-the black bar safety net
Foreword Your own blog site with wordpres hosting, last month found some abnormalities. 3.12 days, the mailbox explosion, received more than 100 letter on the site is the blasting of the notification mail. ! Day to see also not strange, because before it appeared such a situation, every day there...
360 Code Guard help D-LINK to fix multiple high-risk vulnerability brief technical analysis-vulnerability warning-the black bar safety net
Recently, the 360 Enterprise Security Group Code Guard team of security researchers found that the Friends newsD-LINKthe company's product line DIR-619, THE DIR-605 series routers and two high-risk security vulnerabilityCVE-2018-20056 and CVE-2018-20057, and the first time to the Friends of the...
The latest Office 0day vulnerabilities flaws bug(CVE-2017-11826)in the wild attack warning-vulnerability warning-the black bar safety net
! 2017 9 May 28, 360 the focus of the Network Security Business Unit upscale intimidating response team to capture an application Office 0day vulnerabilities flaws bug（CVE-2017-11826 the Korean invasion attack. The vulnerability flaws bug nearly affect the Microsoft currently support all office...
Using the CTS for vulnerability detection and principles of analysis-vulnerability warning-the black bar safety net
360 Vulpecker team Membership 360 Information Security Department, committed to the Android application and the system-layer vulnerability discovery as well as other Android security research. We passed on the CTS frame of the research, the preparation of a vulnerability detection aspect of the...
freeshell fix side-channel attack vulnerabilities-vulnerability warning-the black bar safety net
Vulnerability science Side-channel attacksside channel attack referred to as SCA, also known as side-channel attacks:for the encryption of electronic devices during the run time consumption, power consumption or electromagnetic radiation or the like of the side-channel information leakage and...
Android LaunchAnyWhere (Google Bug 7 6 9 9 0 4 8)vulnerability explanation and Defense measures-vulnerability warning-the black bar safety net
Start Recently, Google repair a component of the security vulnerability LaunchAnyWhere Google Bug 7 6 9 9 0 4 8 in. This vulnerability belongs to the Intend Based extraction vulnerability, an attacker exploit this vulnerability, you can break the Inter-application permission isolation, reach to...
In-depth exploration found in the wild iOS exploit chain VII-vulnerability warning-the black bar safety net
In a previous article, we studied how could an attacker on the iPhone as root for a sandbox escape code execution. In each chain at the end you can see the attacker calls posixspawn, the path passed to the/ tmp directory, the malicious binary file. Implanted code in the background to run as root,...
In-depth analysis of the thread and process handle leak vulnerability on-vulnerability warning-the black bar safety net
Over the years, the author had to encounter and use some handle disclosure vulnerability. Of course, these processes are also particularly interesting, because not all handles have been awardedPROCESSALLACCESSorTHREADALLACCESSpermissions, so you want to successfully use, or to use their brains in...
HTTP/2 denial of service attack vulnerability alerts-a vulnerability alert-the black bar safety net
2019 08 on 13 the evening,the Netflix security team Google, the CERT / CC to Internet disclosure of the HTTP/2 Protocol in each of the middleware service implementation process appears in the DDoSdistributed-denial of service attackvulnerability issues. 0x01 vulnerability details HTTP/2in the RFC...
Subaru car software vulnerability analysis—never a failure of token-vulnerability warning-the black bar safety net
Not long ago, one from California car, information security researcher Aaron Guzman, in Australia, held a computer security conference to introduce a black into the Subaru car of the method. In his own 2017 Subaru WRX STI was found in a surprising number of software vulnerabilities, through these...
[CVE-2 0 1 5-0 0 9 6]Microsoft Windows Shell SMB LNK Code Execution Exploit-vulnerability warning-the black bar safety net
require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::EXE include Msf::Exploit::FILEFORMAT include Msf::Exploit::Remote::SMB::Server::Share attraccessor :exploitdllname def initializeinfo = superupdateinfoinfo, 'Name' = 'Microsoft Windows Shell LN...
Than imagined more terror! OpenSSL“effort”vulnerability in-depth analysis-vulnerability warning-the black bar safety net
Author: yaoxi original source http://blog.wangzhan.360.cn/ Recently, OpenSSL broke this year's most serious security vulnerability in the hacker community is named“heart bleed”vulnerability. 3 6 0 site Guard security team of the vulnerability analysis, the vulnerability is not only related to htt...
MetInfo 3.0 PHP code injection vulnerability(getshell)-vulnerability warning-the black bar safety net
Official website: http://www.metinfo.cn/ Keyword:"Powered by MetInfo 3.0" Description: In the file/include/common. inc. php 6 line 7: evalbase64decode$allclass0; $allclass0 variable is not initialized, so we can control its value, the code injection use. POC: the...
Pwn2own vulnerabilities share the series: the use of the macOS kernel vulnerability to escape the Safari sandbox-vulnerability warning-the black bar safety net
In the Pwn2own 2017 game, Apple macOS Sierra and Safari 10 become is attack up one of the goals. In this competition process, although there are multi-branched clan successfully/semi-successfully completed on macOS + Safari target compromised, however 360 security team use exploits the minimum...
The firmware binary code of the simulation and exploit technology-vulnerability warning-the black bar safety net
In a previous article, we introduced a firmware analysis and extraction of the file system method. In this article we will further introduce how to in-depth analysis of firmware binaries, and then use its common security vulnerabilities. In this paper, we will relate to the following as shown in...
S2-0 2 9 Struts2 tag remote code execution analysis with POC-the exploit-warning-the black bar safety net
Struts2 tag library provides themes, templates support, which greatly simplifies the view of a page of writing, and, struts2 theme, the template provides a good scalability. To achieve a better code reuse. Struts2 allows the page to use a custom component, which can fully meet the project page...
wild copy-exploits-vulnerability warning-the black bar safety net
0x00 Preface This is Project Zero on the articles, the original text of the Taming the wild copy: Parallel Thread Corruption of Links: http://googleprojectzero.blogspot.com/2015/03/taming-wild-copy-parallel-thread.html 2 0 0 2 year, Apache Web serverfound and fixed a very fun bug. The server...
Linux Kernel ReiserFS file system implementation to bypass security restrictions vulnerability-vulnerability warning-the black bar safety net
Affected version: Linux kernel 2.6. x vulnerability description: The Linux Kernel is open sourceOSLinux the kernel. Linux Kernel ReiserFS file system implementation does not properly restrict. reiserfspriv Directory Access, the local user can modify the ACL or extended attributes get root access...
“Cross-site”I see the vulnerability warning-the black bar safety net
Don't know what people think of cross-site attacks, really is a tasteless question? In fact, across the station is not only stealing the COOKIES so simple! See GET and POST two submission allow an external submission. Look at the following codeGET is: iframe...
URGENT/11: VxWorks RTOS 11 0 day vulnerabilities affect 20 million device-bug warning-the black bar safety net
Armis Labs security researchers recently in the currently most widely used embedded devices in real timeoperating system real-time operating systems, RTOS）VxWorks found 11 a 0 day vulnerability, theoperating systemis widely used in aerospace, defense, industrial, medical, electronic, network, and...
TP-Link SR20 router 0 day vulnerability-a vulnerability warning-the black bar safety net
Google security developer Matthew Garrett found the TP-Link SR20 smart home router There 0 day arbitrary code execution vulnerability in the same network an attacker can exploit the vulnerability to root access to execute arbitrary commands. Garrett said public vulnerability is due from him to th...
PHP garbage collection mechanism UAF vulnerability analysis-vulnerability warning-the black bar safety net
First, the PHP garbage collection mechanism introduction Because PHP is among the presence of circular references, only the refcount of the counter as a garbage collection mechanism is not enough, so in PHP5. 3 introduced a new garbage collection mechanism. $a = array'one'; $a = &$a; unset$a; ?&...
Huawei CPE devices there is a remote arbitrary file reading vulnerability reference EXP-a vulnerability warning-the black bar safety net
The CPE is what CPE is a high-speed 4G signal is converted into tablets, smartphones, laptops and other mobile devices universal WiFi signal of the device, can simultaneously support multi-terminal access, the size of a book, in a 4G signal coverage place, plug in the power it can use, without...
CGI vulnerability highlights-vulnerability warning-the black bar safety net
CGI vulnerability highlights For the following list of CGI vulnerabilities,simply speaking,you can directly delete the program or rewrite the program to reach the safety of the mesh The Below is not completely reprinted from the green Forumvia a Supplement A. phf vulnerability The phf vulnerabili...
There are Upload file the file name at the time of discovery of the delay injection vulnerability-vulnerability warning-the black bar safety net
! The It is author in invited to test items found in the Upload File name the filename of a time delay blind injection vulnerabilities, this position is relatively rare, Share this in hopes of everyone starting to learn a role. The following is the author of the discovery process. Earlier this...
CVE-2 0 1 5-6 9 7 4 vulnerability analysis-vulnerability warning-the black bar safety net
0x00: iOS9. 1 released, Pangu previously made a topic about the They escape using the loopholes and the use of means. Then follow up to do a little analysis. 0x01: The problem is in the Apple IOHIDFamily this driving the code inside,this drive Apple is open source. In iOS, this driver provides...
See how I found Bol. com website the XXE vulnerability and successfully exploited-vulnerability warning-the black bar safety net
In a previous report, we learned a lot about in the visitor's browser to execute code knowledge; reflection typeXSSand a storage typeXSS. In addition, we also quickly see the error configuration of the server settings and Open Redirect open-type redirect to. Today, we will explore how from the...
Chrome by opening the pdf file information disclosure 0day warning-vulnerability warning-the black bar safety net
0x00 vulnerability background GMT 2 May 28, 360CERT monitoring to edgepot. io published a blog post publicly disclosing the Chrome by opening the pdf file leaked information of 0day vulnerabilities, the vulnerability is successfully exploited can lead to the target user IP address and other...
The use of the macOS kernel vulnerability to escape the Safari sandbox-vulnerability warning-the black bar safety net
In the Pwn2own 2017 game, Apple macOS Sierra and Safari 10 become is attack up one of the goals. In this competition process, although there are multi-branched clan successfully/semi-successfully completed on macOS + Safari target compromised, however 360 security team use exploits the minimum...
Using the memory corruption vulnerability in the Python sandbox escape-vulnerability warning-the black bar safety net
Simply skip the text the author's README, we directly enter into the technical details. The Python environment using a custom whitelist/blacklist programs to prevent access to dangerous built-in functions, modules, functions, etc. Based on theoperating systemthe isolation provides some additional...
Lurking in 11 years of Linux kernel to mention the right vulnerability-exposure-vulnerability warning-the black bar safety net
Vulnerability number CVE-2017-6074 Vulnerability overview The Linux kernel recently also exposed a privilege escalation vulnerability that can be traced back to 2005, the vulnerabilities affect the Linux operating system major releases, including Redhat, Debian, OpenSUSE and Ubuntu. Using this...
Facebook chat history stealing vulnerability, the impact of the billion Messenger users-vulnerability warning-the black bar safety net
In this article, we describe in detail A in Facebook on find Server security vulnerabilities, this vulnerability might affect millions of CORScross-origin resource sharingin the Origin header to allow“NULL”value of the site, the vulnerability will threat the privacy of the user, the malicious...
Technology share: how to use Python and PyInstaller to write a Windows malicious code-vulnerability warning-the black bar safety net
Disclaimer: This article is intended to share, not for malicious use! This article mainly shows is through the use of python and PyInstaller to build the malicious software of some poc. ! Known to all, malicious software and more will continued to target of the attack. And this is on windows ther...
EggAvatar for vBulletin 3.8. x SQL injection vulnerability-vulnerability warning-the black bar safety net
vBulletin is a famous commercial Forum app for vBulletin 3.8. x EggAvatar plug-ins existSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: EggAvatar for vBulletin 3.8. x SQL Injection Vulnerability +poc: view source print? | 0 1 | !/ usr/bin/env perl ---|--- ...
Important vulnerabilities early warning: the Windows DNS client in the broke multiple heap buffer overflow flaws vulnerabilities in bug-bug warning-the black bar safety net
Microsoft has in the 2017 year 10 months official fix for the vulnerability CVE-2017-11779, the vulnerability includes the Windows DNS client in the plurality of memory corruption vulnerabilities, running Windows 8/Server 2012 and an updated version ofOSthe computer will be affected by this...