7620 matches found
Roundcube1. 2. 2 by email command execution vulnerability analysis-vulnerability warning-the black bar safety net
Foreword Roundcube is an open source web version of the email software, which are widely distributed, many of the world's organizations and companies are in use. From ScourceForge the mirror view, the past 1 years it has 26 million downloads, this is still just the actual user in a small part. As...
WordPress auto-update mechanism of the serious vulnerability: the global ultra-1/4 site can be hacker in one fell swoop rout-vulnerability warning-the black bar safety net
Wordfence recently disclosed an impact of a large range of security issues, a large number of WordPress sites are affected. This exploit is WordPress Auto-Update feature, this feature is enabled by default, but also because the entire on the Internet there are about 2 7% of the sites are using...
Hijacking NodeMCU Development Board-vulnerability warning-the black bar safety net
Long before the want to play the Board, The do nothing poor and can't afford it. Just the school issued a NodeMCU, although it is a cheap Board, play play is also good. This Board also let me play for several days, a start is to build a good car, in teacher to a Scratch on the play for a moment,...
CVE-2 0 1 6-4 2 7 1:Flash local file system sandbox bypass-vulnerability warning-the black bar safety net
2 0 1 6 9 on 1 3 April, Adobe closed the local file system sandbox sandbox. Local file system sandbox in existence for twenty years after, finally be Adobe is closed, so that almost all of the use of this function in the Flash file needs to be updated. We will specifically explain this change in...
Django CSRF Bypass (CVE-2 0 1 6-7 4 0 1) vulnerability analysis-vulnerability warning-the black bar safety net
Author: p0wd3r know Chong Yu 4 0 4 Security lab Date: 2016-09-28 0x00 vulnerability overview 1. Vulnerability description Djangois a Python written open source Web application framework. Two years ago researchers at hackerone on the submission of a use of Google Analytics to bypass Django's CSRF...
LastPass then exposed many pieces of high-risk vulnerabilities, the user account information being stolen risk-vulnerability warning-the black bar safety net
LastPass is the world's most popular cloud password management tool. This tool is the main user of the Internet account number and password management, and 1Pass very similar. On the PC side, the user can use the LastPass browser plug-in on their own account and password management, in the end of...
2.7 billion Gmail, Yahoo and Hotmail accounts were compromised-the vulnerability warning-the black bar safety net
Russian users of Gmail, Yahoo and Microsoft email Hotmail, etc. 2. 7 2 3 million accounts were compromised, and in the Russian underground black market trade. ! This time, Russian hackers successfully conducted a massive data leak accident. In this cyber attack, hackers stole 2. 7 2 3 million...
Attention! Struts 2 s2-0 3 2 remote code is again a wave of black rhythm-vulnerability warning-the black bar safety net
1. Description: Struts 2 is the Struts of the next generation of products, is in the struts 1 and WebWork technology based on a merge of the new Struts 2 framework. Its brand new Struts 2 architecture and Struts 1 architecture the difference is huge. Struts 2 with WebWork as the core, using the...
Technical analysis Potato provided the right principle-vulnerability warning-the black bar safety net
! Graphic unrelated 0×0 0 Preface A while ago included a Potato to mention the right tools, find the tools provide the right posture with the conventional tool are not the same, but with WPAD proxy related, so expand the test and analysis, primarily through the analysis of its network traffic to...
Teaching content management system ATutor 2.2.1 injection vulnerability-vulnerability warning-the black bar safety net
Atutor is an open source“content management system”Learning Content Management System, referred to as LCMS。 Using PHP, MySQL, HTTP Web server is recommended to use Apache. Teaching content management system ATutor 2.2.1 injection vulnerability Atutor in addition to teaching content management...
Cisco Jabbar chat client vulnerability to man in the middle attacks-vulnerability warning-the black bar safety net
Cisco released an official announcement that its chat clients Jabbar in the presence of security vulnerabilities, vulnerable to a middleman attack. The vulnerability exists on the Windows platform-Jabbar, an unauthorized remote attacker can exploit the vulnerability to implement STARTTLS downgrad...
Word type confusion vulnerability principle analysis of CVE-2 0 1 5-1 6 4 1-a vulnerability warning-the black bar safety net
The aforementioned word in parsing the docx document processing displacedByCustomXML attribute not customXML object for authentication, can be passed to other tags of the object to be processed, causing the type of Confusion, leading to arbitrary memory write, and ultimately through a carefully...
Microsoft Windows FastFAT.sys FAT partition denial of service vulnerability reproduce-bug warning-the black bar safety net
Remember last year'sMS14-0 6 3 FAT32 drive kernel overflow vulnerability? Today the sequel, but this one is in the FAT12 partition. Analysis - The affected system From Windows NT to Windows 7 SP1 - I test models Windows XP SP3 x86 Windows 7 SP1 x86/x64 BUG reproduction: create a FAT12 partition...
Joomla CMS 3.2-3.4.4 SQL injection vulnerability analysis-vulnerability warning-the black bar safety net
Yesterday, the Joomla CMS released a new version 3. 4. 5, This version fixes a high-riskSQL injectionvulnerabilities, 3. 2 to 3. 4. 4 versions are affected. The attacker via the exploit you can get a direct access to the database of sensitive information, and can even get logged in the...
Wordpress4. 2. 3. rights and SQL injection vulnerabilities(CVE-2 0 1 5-5 6 2 3)analysis-vulnerability warning-the black bar safety net
First, explain the background. wordpress user permissions are divided into subscribers, contributors, authors, editors and administrators. Permission the lowest is the Subscriber, the Subscriber only Subscribe to the articles of permissions, wordpress open registration the default registration of...
American telecommunications giant Verizon aeration have significant security vulnerabilities, leakage of customer information-vulnerability warning-the black bar safety net
The United States largest wireless communications provider Verizon to 4 4 billion USD acquisition of Aol AOL message Board this week to foreign media news headlines. However, BuzzFeed's latest report shows that Verizon in the design of a major security vulnerability could allow the...
iOS 8 vulnerability can be caused by the wifi coverage range of any iPhone iPad constantly restarts-bug warning-the black bar safety net
On Tuesday, San Francisco's RSA Security Conference, researchers presented their latest research results-iOS 8 of 0day vulnerabilities“non-iOS”. As the name suggests, to be able to make a WiFi range of Apple iPhones, iPads, iPods devices to constantly restart, the victim caught after can do only...
About SSL/TLS the latest vulnerability the“ordination ceremony”preliminary report-vulnerability warning-the black bar safety net
A, vulnerability analysis The event causes 2 0 1 5 year 3 month 2 6 day, foreign data security company Imperva researcher Itsik Mantin at BLACK HAT ASIA 2 0 1 5 published papers the default settings for SSL when using RC4 elaborates the use of the presence of the 1 3 years of RC4 vulnerability-th...
New Oriental OA system patches timely thinkphp vulnerability to execute arbitrary system commands(getshell)-vulnerability warning-the black bar safety net
Brief description: New Oriental OA system patch is not timely, the thinkphp vulnerability to execute arbitrary system commandsgetshell Detailed description: ! https://. xdf. cn/mapp/index. php/module/action/param1/$%7B@printvardumpDAdmin-%3Eselect%7D The results are as follows: --------- array1 0...
wordpress 3.0-3.9.2 XSS Getshell Payload(Getshell the current template it can be all plug-in template)-vulnerability warning-the black bar safety net
If combat with remember to put the console. lnfo that line The to send Oh.... and Password: HackLeLe This getshell js has getshell the current template with the getshell all of the template features The default is getshell the current template StartGetshell = 0 If you want to getshell all of the...
Discuz! 6. x/7. x a global variable Defense bypass lead to command execution-vulnerability warning-the black bar safety net
Vulnerability overview: Due to php5. 3. x version php. ini settings requestorder the default value for the GP, resulting in Discuz! 6. x/7. x a global variable Defense bypass vulnerability. Vulnerability analysis: | 1 2 3 4 5 6 7 8 9 1 0 1 1 1 2 1 3 1 4 1 5 1 6 1 7 1 8 1 9 2 0 | include/global...
A General campus of the system to the presence of multiple high-risk vulnerabilities(registration logic&getshell)-vulnerability warning-the black bar safety net
About Beijing Chong star weiye software Technology Co., Ltd. development of the education system vulnerability report 1. A large cattle submitted to such a vulnerability : the versatility of the SQL injection vulnerability of 1influence of Beijing, all kindergarten schools, etc., a SQL injection...
WordPress XML-RPC PingBack vulnerability analysis-vulnerability warning-the black bar safety net
! Screen Shot 2014-03-12 at 9.47.56 AM A recent article outlines how to use the WordPress XML-RPC pingback functionDDosattack. This article will be on the attack for analysis, while for the site administrator to provide information to protect their website. This is not a new vulnerability WordPre...
JEECMS website content management system remote code execution vulnerability-vulnerability warning-the black bar safety net
Brief description: JEECMS website content management system there is a new remote code execution vulnerability Detailed description: JEECMS website content management system there is a new remote code execution vulnerability Test code:? redirect:$%23a%3d%28new%20java. lang...
Gbbs micro Forum v3. 1. 4 injection vulnerability-vulnerability warning-the black bar safety net
Official address: http://www.softatm.com Vulnerability to prove:/css/ss.txt Program download: http://down.chinaz.com/soft/33484.htm Vulnerability files /userinfo. asp 7 2 row 7 row 4 Vulnerability type: character type injection Vulnerability information: p%yhm = request"yhm" set rs=server...
Unsafe is the user rather than the system-then talk about QQ input method vulnerability-vulnerability warning-the black bar safety net
In Win8 Remote Desktop vulnerabilities: the use of QQ Pinyin pure version achieve provided the right of this article, The authors found through a"Remote Desktop input method loophole". right, so as to achieve control Winows 8 The remote machine method. Here is what principle? When we see the Remo...
Will Bo CMS(JumboTCMS)_V6 code audit summary-vulnerability warning-the black bar safety net
Author: Seay Blog: http://seay.sinaapp.com/ I learn software testing Professional, the most recent school to prepare for this aspect of the course, so want to find a set ASP. NET open source CMS play, Baidu the next, saw the Bo CMS, popularity is also quite high, went to the official website to...
RulingSite-S system a plurality of defect and repair-vulnerability warning-the black bar safety net
A background --------------------- “IIS is aWeb serverapplication and a set of Created by Microsoft for use with Microsoft Windows the function Expansion Module. IIS is the third most popular server in the world.“ （Wikipedia） the. Overview --------------------- Vulnerability research team...
Shoot off piikee auction website system injection vulnerability and fix-vulnerability warning-the black bar safety net
Because there are no manufacturers, just write a bidding system to it, came out good to With this system webmasters mind you. The system is called: shoot off piikee auction website system Why say 2B? The reception is all the files the parameter values are such, we see this code newsarc.php ? php...
Empire(EmpireCMS)cms 6.6 the background to get shell-vulnerability warning-the black bar safety net
Previous 6. 5http://www.badguest.cn/Article/201011/78510.htmlsomeone hair of the method is that the background---system setup---the management data table---management system models---import new module,directly put the modified php shell was renamed the shell. php. mod uploaded, the new version us...
WordPress plugin BackWPup remote and local code execution vulnerability and fix-vulnerability warning-the black bar safety net
Brief Description: a vulnerability was discovered in the WordPress plugin BackWPup 1.6.1 can be used on web pages to perform local or remote code Server. Input passed to the Assembly“wpxmlexport.php”by “wpabs”variable to allow the inclusion and execution of local or remote PHP file, as long as...
W78cms website management system 0day-vulnerability warning-the black bar safety net
The vulnerability is simple, appear in the editor above, the prawns should all know: Keywords: inurl:ShopMore. asp? id Visit this address http://hackqing.com/nbwebshell/admin/Editor/asp/upload.asp?action=save&type=image&style=popup&cusdir=Hack. the asp Visit this address can build a Hack. ASP...
SHOPEX Cross Station and CSRF vulnerabilities-vulnerability warning-the black bar safety net
Cross-site request forgerycross-site request forgeryis usually abbreviated as CSRF/XSRF, the literal translation for cross-site request forgery, i.e. an attacker by invoking third-party web site the malicious script or use the program to forge a request, of course, not need to the user end disgui...
BBSMAX Forum program login any user, obtain the user password information vulnerability-vulnerability warning-the black bar safety net
BBSMAX is the domestic development of the earliest is based on the. net technology to build the bbs, in leobbs unrivaled in the world, Microsoft. net just the birth when BBSMAX began development of the then known as nowboard, and after years of development, from personal development to team...
Mice(finding the policy）CMS V4. 2 XDAY-vulnerability warning-the black bar safety net
Mice V4. 2 is currently the latest version. No nonsense, first look at the backend, the admin back-end home page with a login IP, the use of this vulnerability can be IP modify any of the Characters, including the HTML and JS. Yes, so that you can cross out the administrator password. ! Use metho...
Discuz! v7. 2 injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net
Vulnerability analysis: 文件 ./manyou/sources/notice.php The relevant code: if$option == 'del' $appid = intval$GET'appid'; $db-query"DELETE FROM $tablepremyinvite WHERE appid='$appid' AND touid='$discuzuid'"; showmessage'manyou:done', 'userapp. php? script=notice&action=invite'; elseif$option ==...
IP. Board to take the SHELL summary-vulnerability warning-the black bar safety net
Find domestic little discussion in this regard from a foreign Station reproduces some summary together Which of the 6 methods VI - CODE EXECUTION The ACP allows admins to manage languages, they can choose the default language, import a new one, and edit them. Let's take a look in the file...
XXX shop management system 9. 0------0DOY-vulnerability warning-the black bar safety net
by:MenSi Since the local did not install IIS official not this cms ..so to the Internet for a few this program the site test..results are exciting.. The other I didn't see..one to get to the cms the first is to see it combined with something to upload like..such as fckeditor ewebeditor upload...
ASP code encrypt hide webshell-vulnerability warning-the black bar safety net
In order to your webshell and more covert! The following will tell you how the ASP code encryption! First of all ASP code is generally plain text, very few encryption, MS have a tool Script Encoder can be encrypted, this stuff can be the official Microsoft site for free download, and there are...
Section Rezin(Kesion)CMS V5. 5 filename parsing vulnerability-vulnerability warning-the black bar safety net
Section flood cms,eshop system to build the station brand. Professional open source cms projects customized services and card system, online output, online printing, advertising production, online photo ordering system provider. In the file upload process on a problem. Upload the file that is in...
Simple to crack router username and password-vulnerability warning-the black bar safety net
For how to hack Internet cafe router username and password, although in my previous article have also introduced some methods, but still on the Forum will see many rookie friend asked: the router password should how to hack? Gray pigeons on-line how to on the router make port mapping? Then this...
New new cloud-0DAY releases-vulnerability warning-the black bar safety net
Reproduced indicate from: www.hacktc.com Keywords:inurl:/soft/show. asp? id= See what others throw out, and I also do not hide, throw out everyone playing. Vulnerability is simply to plug sentence to ASK the database, register. asp Direct access to ask, and then register the user, the password...
Hack attack:use sslstrip for MiTM attack(Bypass https)-bug warning-the black bar safety net
Everyone knows, including the network for MiTM attacks can allow an attacker to more efficiently intercepted within the network the user's password and secret information. In BackTrack use EtterCap or ArpSpoof tool. But Ettercap supports the Protocol, only HTTP, FTP, Telnet, SMTP, etc. in clear...
Hack the network to achieve the overload attack to the process of parsing-vulnerability warning-the black bar safety net
In network overload attack, a shared resource or service due to the need to process large amounts of request that cannot be met from other users of the arrival of the request. For example, a user generates a lot of processes, then other users cannot run own processes. If a user uses a lot of disk...
To decrypt WPA/WPA2 encrypted high-speed crack of the truth-vulnerability warning-the black bar safety net
For wireless WPA encryption environment, in access to the WPA Handshake Authentication package, the attacker will through brute force mode for WPA password cracking, but also by the prior establishment of a targeted dictionary, then dictionary crackattack. For most wireless access point AP, this...
Case combat: the switch password is lost how to restore? - Vulnerability warning-the black bar safety net
Editor's note: the computer password is lost, we can use a password remove the disc and other tools to solve, but a switch, a router password is lost, you cannot use the CD and other tools, and requirements Does not change the original configuration files in case it how to do it? As the Internet...
Bypass Kaspersky Proactive Defense system of the method of discussion-vulnerability warning-the black bar safety net
==Ph4nt0m Security Team== Issue 0x02, Phile 0x08 of 0x0A |=---------------------------------------------------------------------------=| |=-----------------= Bypass Kaspersky Proactive Defense system method discussions=----------------=|...
The instance profile“cross-site intrusion” watch out for MSN account lost-vulnerability warning-the black bar safety net
Last time we introducedwhat is thecross-site attacksCross Site Scripting, today we look at a specific example, and describes how to avoid suffering cross-site attacks. “Cross-site intrusion”crime reduction: cross-site intrusion MSN hacking We according to users provide clues to his MSN account is...
The illustrated freezing point reduction 6. 0 works and crack-vulnerability warning-the black bar safety net
Deep Freeze & How to crack Deep Freeze 6.0 The author of the article:old yellow article source:CNOOC gas One, first the way freezing works. Without the patience of friends can jump directly to the second part to see how to crack the freezing point reduction 6. 0 in. Probably a lot of people have...
Ttplayer med File format stack overflow-vulnerability warning-the black bar safety net
author: dummy e-mail: [email protected] date: 2008/02/25 Ttplayer using libmod to the mod class file format processing, this library in ReadMed function, no check File description length, if passed a maliciously constructed value, will result in a heap overflow. Now using the libmod software many...