SMT smart contract integer overflow vulnerability-vulnerability warning-the black bar safety net

! Vulnerability overview SmartMesh Token is based on the Ethereum contract tokens, referred to as SMT. Ethereum is an open source, public, distributed computing platform, SmartMesh tokens contract SmartMeshTokenContract based on ERC20Token standards. The vulnerability occurs in the transfer...

Struts2 S2-052(CVE-2017-9805)remote code execution vulnerability bug research-vulnerability warning-the black bar safety net

Struts2 S2-052 remote code perform vulnerability bug and the previous Struts2 vulnerability bug there is a difference, S2-052 operating the Java deserialization cracks, rather than reputation notorious ognl in. The flaws of the trigger point is the REST plug-in to parse begged in the xml file, ca...

The two did not repair the vulnerabilities affect the mainstream browser extension system-vulnerability warning-the black bar safety net

Security researchers found that the two did not fix the vulnerability embedded in many mainstream browsers in the expansion of the system, such as Firefox, Safari, and all with Chromium related browsers such as Chrome, Opera, etc. ! An attacker can exploit these vulnerabilities expose the user of...

Microsoft is the aeration Windows latest remote code execution vulnerability: extremely bad! Now the vulnerability details have been released-vulnerability warning-the black bar safety net

It is well known that Google has an internal Super hacker team-the“Project Zero”, according to securityaffairs 5 months 8 reported that Google Project Zero researcher in the Microsoft Windows OS found a remote code execution vulnerability RCE, but this is not a simple RCE, they put it characteriz...

Format string exploits I. Introduction-vulnerability warning-the black bar safety net

I. Introduction This article explains some phenomenon of nature, it has been in 2000 the second half of the year shocked the entire security community. It is a“format string vulnerability”, is a discovery of new vulnerabilities, and will lead to a series of can take advantage of the bug, which in...

Android security development of started private components of vulnerability talking about-vulnerability warning-the black bar safety net

! 0x00 the private component talking about android applications, if a component of foreign export, then this component is a the attack surface. Most likely there is a lot of problems, because the attacker can in various ways to the components of the test attack. But developers are not necessarily...

HEVD kernel vulnerability training of SMEP bypass-vulnerability warning-the black bar safety net

! 0x00 Preface This articles content comparison basis, but also more fun, of course, has been to see the yuan brother mentioned DVE bypass mitigation, on the DVE feel very magical, but I still do not quite understand, very want to learn. Two days before the in security client sent an article HEVD...

No Sockets remote overflow exploit methodology-vulnerability warning-the black bar safety net

In this article, I will introduce one in a vulnerable remote machine, get shell access to a simple technology this is just my personal viewpoint to. This is not my own creation of art, but I found it very interesting. So, the focus of this article is that this technology itself, rather than using...

PHP study notes and security vulnerabilities-vulnerability warning-the black bar safety net

System variables $POST // get the post data is a dictionary $GET // get get data, is a dictionary The error control operator PHP supports one error control operator:@the. When it is placed in a PHP expression, the expression may produce any error information is ignored. Variable default value Whe...

The Apple AppStore is now serious Bug: popular search be transferred to the lottery application-vulnerability warning-the black bar safety net

1 May 12, 23: 00 or so, the Apple App Store there is a major fault. Search for“Taobao”, the“Baidu”and“wechat”, and“Tencent”, the“live”and other popular keywords, drop-down the Association of the word all or the vast majority is with lottery tickets related to the website, such as“color-77”website...

NetGear lot of router remote command injection vulnerability analysis(Update Patch analysis)-vulnerability warning-the black bar safety net

0x01 introduction Two days before the NTP just doing the complete thing, the NetGear routerNETGEAR routerand to engage in things of T. T. The current CERT in the last week, five have issued a notice,“if the user comes to the router, it is recommended to stop use until the official release of the...

The NTP vulnerability can be caused by Windows System trigger DoS-vulnerability warning-the black bar safety net

! The researchers published for cve-2 0 1 6-9 3 1 1 vulnerability PoC of this vulnerability can cause the NTP daemon to crash, and trigger the Windows System to denial of service. The NTP Protocol can be used by hackers to exploit. NTP is a widely used Clock synchronization Protocol, this Protoco...

AndroidNative layer file parsing vulnerability mining guide-vulnerability warning-the black bar safety net

This article to hand Q A file parsing class vulnerability discovery, for example, describes the Android Native layer file parsing type of the vulnerability discovery process Hand Q this application from the function is very large, if the use similar to the MFFA framework to dig the file parsing...

IPS Community Suite PHP remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

“IPS Community Suite “is a widely used in foreign countries the establishment of the station system. Recent is exposed in 4. 1. 1 2. 3 version and the following version there is a code injection vulnerability. This vulnerability via the control contentclass parameters submit the request to inject...

The Linux kernel through kill to mention the right vulnerability alerts-a vulnerability alert-the black bar safety net

The Linux kernel in the processing memory write copies Copy-on-Write when the existence conditions of competitive vulnerability, the result can be destruction of private read-only memory mapping. A low-privileged local user can exploit this vulnerability to obtain additional read-only memory-mapp...

Talk about how Python development is rejected SSRF vulnerability-vulnerability warning-the black bar safety net

0x01 SSRF vulnerability common Defense techniques and bypass methods SSRF is a common Web vulnerability, usually present in the need to request external content, such as localized network images, XML parsing when the external entity injection, software offline download. When the attacker passed a...

Vulnerability is a combination punch--attack of distributed nodes-the vulnerability of early warning-the black bar safety net

Distributed systems mostly rely on the message queue middleware to solve the asynchronous processing, the application of coupled problems such as Message Queuing middleware of choice in turn depends on the overall system design and implementation, message packaging, transmission, processing throu...

D-Link router firmware the back door that leads within the network domain name hijacking-vulnerability warning-the black bar safety net

This Backdoor can lead to a domain being hijacked, hijacking of domain names is available in the remote server control, with the back door of the firmware: DI7001-15.07. 15A1. trx DI7001W-15.07. 15A1. trx DI7002-15.07. 15A1. trx DI7002W-15.07. 15A1. trx DI7008W-14.10. 11A1. trx DI7100-15.07. 15A1...

D-Link cloud camera more than 1 2 0 product gaps, about 4 0 million devices affected-vulnerability warning-the black bar safety net

! Before the camera there is a security vulnerability, privacy is leaked out of the event. This event is the protagonist of turn A D-Link cloud camera. A woman named Stephen Ridley of the security researcher found that the D-Link cloud camera vulnerabilities exist, and he also found more than 1 2...

phpwind9. x Md5 Padding Extension vulnerability analysis-vulnerability warning-the black bar safety net

0x00 Preface This is one of the more interesting vulnerabilities, exploits already in the clouds online submitted http://www.wooyun.org/bugs/wooyun-2016-0210850 that official has also released a patch（http://www.phpwind.net/read/3709549 that 并且 安全 研究员 phithon 也 第一时间 发出 了 他 的 漏洞 分析...

The use of SSRF vulnerability to take over the APP server-the vulnerabilities and early warning-the black bar safety net

SSRF attack refers to an attacker forcibly control the presence of vulnerabilities of the server,thereby sending a malicious request to a third party server or internal resources. And then use the vulnerability to launch specific attacks,such as cross-site port attacks,service enumeration, and a...

Microsoft OAuth interface XSS, affecting user account security-vulnerability warning-the black bar safety net

One day, while I was browsing on Twitter information, I found a very interesting article, Wesley Wineberg in the Microsoft OAuth authentication interface found a CSRF vulnerability. This article makes me curious at the same time also provoked I can be in this place and then find a loophole of fai...

Microsoft Office Excel remote code execution vulnerability, CVE-2 0 1 6-0 0 3 5 analysis-vulnerability warning-the black bar safety net

Recently I found Excel programs all version in processing of the special structure of the excel file, there is a Use-After-Free vulnerability. The vulnerability is successfully exploited can allow remote code execution. However Microsoft refuses to patch the vulnerability, saying that...

Java deserialization vulnerability of the weblogic local use to achieve article-vulnerability warning-the black bar safety net

weblogic in the domestic scope of application more widely, supporting many of the company's core business, it has not put the weblogic to use the tool to publish it. However, many recent Party a friend asked me if I had a convenient tool to detect their companies deployed in the network of...

Flash is too dangerous, the report said the hack attack front 1 0 vulnerabilities Flash representing 8-vulnerability warning-the black bar safety net

! Hacking tools the use of Pre 1 0 vulnerabilities in Flash accounted for 8 According to technology news site Network World reports that cyber Threat Intelligence research firm, Recorded Future issued the latest report shows that in the hacking toolEKthe use of the top 1 0 largest vulnerability,...

Takeaway O2O App security analysis: the App vulnerability assessment platform technical details-vulnerability warning-the black bar safety net

In the mobile Internet and O2O tide swept under, the takeaway market is gradually entering the white-collar field, at BAT three giants throwing money to cultivate the market, white-collar workers have to change eating habits. As long as it is imprisoned in the white collar does not substantially ...

vmware multiple products privilege escalation vulnerability-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-7/201571916117864.jpg Description This article briefly describes our findings and our most recent in the three main VMware Windows products find a vulnerability. The affected products include the‘VMware Workstation’, ‘Horizon Client’ with Local Mode Option, and Player’on...

Technical analysis: Femtocell home base station to a communication to intercept, fake arbitrary SMS vulnerability-vulnerability warning-the black bar safety net

Ali mobile security team with the Chinese Thiel Laboratory of wireless technology Ministry of communication experts together, the combination of domestic operator a type of Femtocell base station for the security analysis, found that the more pieces of the major vulnerabilities that can lead to...

Mac computer and then the explosion of security vulnerabilities hackers can obtain device control-vulnerability warning-the black bar safety net

! Mac PC re-proof security vulnerabilities hackers can obtain device control Foreign a security researcher recently found a can control the portion of the running OS X system Mac devices for security vulnerabilities. It is reported that the vulnerability allows hackers to remotely re-write the Ma...

Eraseme Backdoor analysis-vulnerability warning-the black bar safety net

0×0 0 summary This is@neteagle capture a sample of this, curious to ask to come and see, a simple analysis for a moment; this is one with the infection function of backdoors. Due to its propagation name eraseme%d%d%d%d%d.exe so we called Eraseme the back door. This is my first analysis report,...

Threat warning: a lot of ubnt devices is Backdoor-vulnerability warning-the black bar safety net

This article elaborated: the discovery of a hacker attack, intrusion analysis, counter hack Server, successfully obtain permission and complete evidence of the whole process. Such an invasion is now also very much, especially for a specific system of orientation, but“blind scan”in the attack...

A common Site Management System any user login/SQL injection/GetShell vulnerabilities source code analysis-vulnerability warning-the black bar safety net

Brief description: This system is not open source, most of the universities in use, turn the source off at the next Detailed description: 0x00 General case: code area Manufacturer: Rio Tinto tech Official website: http://www.ltpower.net/ The main is to do the educational products of the...

IE sandbox elevation of privilege vulnerability, CVE-2 0 1 5-0 0 1 6 analysis-vulnerability warning-the black bar safety net

This month, Microsoft's“Tuesday patch”coming out, includingMS15-0 0 4patch, repair a could cause elevation of Privilege vulnerabilities CVE-2 0 1 5-0 0 1 6，This is a very rare for IE sandbox vulnerability, Trend Micro researchers about this vulnerability for a detailed analysis. Patch details...

The Ghost vulnerability the GHOST affects a large number of Linux operating system and its release version update repair programme-vulnerability warning-the black bar safety net

Security researchers have recently exposed a named Ghost（GHOST）a serious security vulnerability, this vulnerability may allow an attacker remote accessoperating systemis the highest control authority, the impact of the market on a large number of Linux operating system and its release version. Th...

CVE-2 0 1 5-0 3 9 3: Oracle released a serious security vulnerability alerts-a vulnerability alert-the black bar safety net

Oracle on Tuesday released this year's first security patches upgrade the CPU for the announcement, the attendant, there are some disturbing vulnerability warning. Maybe this two-day operation and maintenance of the students need to give their company the Oracle products on the newly released 1 6...

Combined with the middleman attack, the Pidgin tasteless vulnerability becomes waste into treasure-vulnerability warning-the black bar safety net

The latest version of the open source instant messaging clientPidgin 2.10.10 all this time to fix a series of vulnerabilities, wherein the SSL/TLS certificate validation issue can be exploited by hackers to make MiTM attacks. As a result, some slightly tasteless the vulnerability with man in the...

Etiko CMS index.php cross-site scripting vulnerability-vulnerability warning-the black bar safety net

Affected system: Etiko Etiko CMS Description: CVECAN ID: CVE-2 0 1 4-8 5 0 5 Etiko CMS is a content management system. Etiko CMS did not effectively verify the index. php script input, in the realization on the presence of cross-site scripting vulnerability, a remote attacker with the structure o...

High risk warning: the Bash environment variables remote code insertion vulnerability-vulnerability warning-the black bar safety net

A few months ago around the high-profile OpenSSL heartbleed information disclosure vulnerability only in the past did not take long, the Internet also broke a than bleeding heart more fierce vulnerability: Bash environment variables remote code insertion vulnerability. The server of the cgi...

Discuz! X A XSS-vulnerability warning-the black bar safety net

Self XSS + Click Jacking == storage type XSS http://hi.baidu.com/hacklele/admin.php?frames=yes&action=moderate&operation=threads, the page has a hidden form"title", you can GET submitted, the Management click"Submit"after the trigger. Because it is a Self XSS, bad use, and Discuz the background i...

Talking about my company for security emergency response-vulnerability warning-the black bar safety net

0×0 0 hack to. Company for hack attacks emergency treatment is still very lacking, that there are security issues, is often the customers are also the victims because the customers found that their data be changed, and then complain to the company that the data what is the malicious changes. Then...

espcms wap module search SQL injection-vulnerability warning-the black bar safety net

0×0 vulnerability overview 0×1 vulnerability details 0×2 PoC 0×0 vulnerability overview Easy to think ESPCMS enterprise website management system based on LAMP development to build enterprise website management system, it has simple operation, powerful function, good stability, scalability and...

nginx 1.3.9-1.4.0 DoS PoC-exploit warning-the black bar safety net

The following content is for Server Security testing, and the prohibition of illegal purposes! Exploit Title: nginx v1. 3. 9-1. 4. 0 DOS POC CVE-2 0 1 3-2 0 7 0 Google Dork: CVE-2 0 1 3-2 0 7 0 Date: 16.05.2013 Exploit Author: Mert SARICA - mert . sarica @ gmail . com - http://www.mertsarica.com...

On IPB just out of 0day vulnerabilities due to mysql truncation causes of vulnerability-vulnerability warning-the black bar safety net

First posted about the original: http://www.john-jean.com/blog/securite-informatique/ipb-invision-power-board-all-versions-1-x-2-x-3-x-admin-account-takeover-leading-to-code-execution-742 This is a good vulnerability, not IPB now using how widely although also in my day is used quite widely, sigh...

The horizon of a sub-Station back to bypass-vulnerability warning-the black bar safety net

The horizon of a sub-station in background to bypass leaked some user information! 1. Background privileges to bypass the http://younghainan.tianya.cn/admin888/left.aspx ban js Leaked some information on the Ah Pro! To thehackingto get the user information on what to do. There seemed to be...

The GNU/Linux kernel new features initiator to mention the right vulnerability-vulnerability warning-the black bar safety net

SUSE security research members of the Sebastian Krahmer has published the GNU/Linux kernel to mention the right vulnerability, recent GNU/Linux kernel3.8+have introduced a In order to facilitate the container to achieve the new features: user-namespacesuser-ns, CLONENEWUSER flag, this feature...

QQ bypass the main display account add vulnerability-vulnerability warning-the black bar safety net

Brief description: Should be QQ again and yet another to bypass the main display account add friends bug,you can add some set to:only by the main display account to find the user. But the condition is the need for space is set to a non-any people inside. But now most of the users in order to...

WordPress Asset-Manager PHP file upload vulnerability and fix-vulnerability warning-the black bar safety net

This module uses the Metasploi fragile vulnerability database in the WordPress version of the Asset-Manager plugin 2. 0 and the following version is found. Allow upload of php files, a user can upload a file to a temporary directory without authentication,leading to arbitrary code execution. This...

iwebshop xss 0day code analysis-vulnerability warning-the black bar safety net

Some time ago dedecms, etc. broke a variety of 0day, for a moment, hands itching, so got a small php open source program surgery ! The process of using the tool: phpxref: Windows is to use php code audit assisted tools Grep: linux down to find the key statements Version: iwebshop2. 3. 1 1 1 1 3 0...

Sunny Navigation System cms the background filter is not strict vulnerability-vulnerability warning-the black bar safety net

BY: madmen From 1 6 3 Micro Forum Test URL http://www.xxx.com/admin/log/dispcont.asp admin/log/dispcont. asp View administrator login records where the filter is not strict lead to can view the login record of success Although success is cmd5 encryption, but a large part can be cracked Tasteless ...

phpcms v9. 1. 1 5 sql and XSS exploits-vulnerability warning-the black bar safety net

phpcms v9. 1. 1 5 The official demo site has been updated to 9.1.16: the http://v9.demo.phpcms.cn/ XSS public function publicgetsuggestkeyword $url = $GET'url'.'& q='.$ GET'q'; echo $url; $res = @filegetcontents$url; ifCHARSET != 'gbk' $res = iconv'gbk', CHARSET, $res; echo $res; Use method:...