7620 matches found
CVE-2 0 1 6-4 6 5 6: Apple Pegasus vulnerability technical analysis explained-vulnerability warning-the black bar safety net
! 0x00 summary Pegasus – for iOS devices APT attacks analysis - PanguTeam the iOS“remote jailbreak”spyware Pegasus technical analysis Concerned about IOS security technicians recently some are concerned that once the security event, without the need to do more description, want to know specific...
Siemens ICS present in the device security validation vulnerability-vulnerability warning-the black bar safety net
! Recently,the German company Siemens to inform the user,due to ICSindustrial control systemdevice there is a security vulnerability,don't be networked use. The U.S. industrial control system computer Emergency Response TeamICS-CERTrecently said,in Siemens SIMATIC WinCCWindows Control...
Hackers exploit CVE-2 0 1 5-2 5 4 5 exploits the global organization-vulnerability warning-the black bar safety net
Kaspersky Labthe global research and analysis teamGReAT in the pastseveral months, for different network attackgangfor the Asia-Pacific（APAC）andthe Far EastregiontheA series of cyber espionage attacks carried out monitoring, found that these attackstheone common feature: in order tousemalware...
Famous hacker and aeration iOS 9.3.2 jailbreak video-based Safari-bug warning-the black bar safety net
Today the Italian hackers Luca Todesco once again in the jailbreak community set off waves, because he discharged for a period running iOS 9.3.2 6th generation iPod touch jailbreak video. It is worth mentioning that Todesco the use of the method is clearly directly from Safari to jailbreak, no...
Adobe issued a warning: cybercriminals are taking advantage of the Flash 0 day vulnerabilities-vulnerability warning-the black bar safety net
! As the title of this article, if the user in Windows, Mac, Linux, or Chrome OSoperating systemon the platform to install the Adobe Flash plugin, then the user will likely be subjected to hacker attacks. Adobe has released a security Bulletin and in the Bulletin to remind the user that the Flash...
Windows 1 0 vulnerability exposure:hackers to remotely control computers-vulnerability warning-the black bar safety net
Recently a new Win10 vulnerability is exposed, the security tools AppLocker there is a serious problem, the attacker can add a program to the black list, the collapse of the user's computer defence, so as to facilitate the control computer, to achieve remote control purposes. ! Win10 aeration...
PayPal remote command execution vulnerability analysis-vulnerability warning-the black bar safety net
2 0 1 5 year 1 2 on, the author in the PayPal of a sub-station in found a to be able to remotely execute arbitrary shell commands java deserialization vulnerability, and can impact PayPal products database. I'll be the bug was submitted to PayPal, and was quickly repaired. Vulnerability details !...
Technical analysis: Apple syslogd to mention the right vulnerability, affecting numerous iOS and OSX version of the CVE-2 0 1 6-1 7 2 2-a vulnerability warning-the black bar safety net
! This iOS 9.2.1 the latest update, Apple fixes a code execution vulnerability, and is by Zimperium zLabs two fellows Nikias Bassen and Joshua J. Drake in syslogd in the discovery. In this article, we will share how to determine the vulnerability and the vulnerability behind can allow an attacker...
NVIDIA GPU was traced to vulnerabilities, you can view the porn browsing history-bug warning-the black bar safety net
! Chrome's incognito mode in some specific cases not necessarily be able to protect individual privacy, recently a gamer the exposure of the Nvidia GPU of the previous vulnerability, the use of the vulnerability can view Chrome incognito mode to browse porn sites picture. Evan Andersen once loade...
Lenovo, Dell and Toshiba computers exposure to serious OEM vulnerability-vulnerability warning-the black bar safety net
! Recently, the Association of the device and can be easily hijacked, while Dell and Toshiba PC and also because of the serious vulnerabilities and suffer. Security researcher slipstream/RoL online publishing of the vulnerability and demonstrates how the intrusion of the market on the machine...
Cisco IOS XE privilege elevation Vulnerability(CVE-2 0 1 5-6 3 8 3)-vulnerability warning-the black bar safety net
CVECAN ID: CVE-2 0 1 5-6 3 8 3 Cisco IOS is most Cisco Systems routers and network switches are used on the Internetoperating system. ASR 1 0 0 0 on the device, Cisco IOS XE 15.43S did not load properly package, local users through CLI, enter the configuration file name, use this vulnerability to...
Microsoft to fix the Bitlocker Drive Encryption tool bypass vulnerability-vulnerability warning-the black bar safety net
! Microsoft recently fix for Windows Bitlocker Drive Encryption in a vulnerability, this vulnerability can be used to quickly bypass the encryption function to obtain to the victims of the encryption of important information. Encryption vulnerabilities in software Disk encryption tool is an...
Jenkins CommonCollections vulnerability perfect to use the tool-vulnerability warning-the black bar safety net
This week is the fire of a vulnerability through this vulnerability can execute arbitrary java code, The impact of Jenkins, WebSphere, WebLogic, etc. a series of popular services. However, foreigners write ysoserial code has bug, can not properly execute the command, readily get rid of. ! Having...
Trinity Chipset line card denial of service vulnerability-vulnerability warning-the black bar safety net
Affected system: Juniper Networks Trinity Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-7 7 4 8 Juniper Networks is a network communications equipment company, a major supplier of IP network and information security solutions...
AirDrop vulnerability: millions of Apple devices can be silently installed malicious application-vulnerability warning-the black bar safety net
AirDrop file transfer feature on a vulnerability exists, a malicious application may be silently installed on millions of Apple device, and replace the legitimate app. AirDrop is Apple developed for inter-device direct technology to transfer files, but security researchers Mark Dowd was in iOS an...
iOS vulnerability can lead to the Apple ID theft-vulnerability warning-the black bar safety net
In yesterday's release of the iOS 9 upgrade, Apple repair Alibaba Mobile Security Team discovered three security vulnerabilities: CVE-2 0 1 5-5 8 3 8, CVE-2 0 1 5-5 8 3 4, CVE-2 0 1 5-5 8 6 8 The. ! Wherein the CVE-2 0 1 5-5 8 3 8 this vulnerability can let hackers in a non-jailbroken iPhone 6 on...
BlackHat topics: SMBS not only to share your files-bug warning-the black bar safety net
In this paper, we show a new attack method to crack the Windows SSO Single Sign On feature, affecting all versions of Windows including the latest Windows 10, Microsoft's SMB（Server Message Block Protocol, within the network to attack the SMB technology has appear a long time, this new type of...
UPnP exposure Filet-O-Firewall vulnerabilities, millions of home routers at risk of attack-vulnerability warning-the black bar safety net
UPnP exposure security vulnerability Filet-O-Firewall, the millions of home network devices in the network attack risk. Cause the UPnP vulnerability the main reason is that its lack of adequate authentication mechanisms. myhack58 Wikipedia: UPnP UPnP is a wide variety of smart devices, wireless...
A null pointer vulnerability protection technology to improve the article-vulnerability warning-the black bar safety net
In the null pointer vulnerability protection technology-the primary article, we introduced a null pointer and a null pointer vulnerability concept, in this advanced article describes a null pointer use and the corresponding protection mechanisms. Author: sun Jian slope Directory 1 to improve the...
Metasploit CVE-2 0 1 5-5 1 2 2 Flash exploit tutorials-vulnerability warning-the black bar safety net
Some time ago, the Hacking Team Arsenal leaked much noise hubbub of the big security companies are also scrambling to release a variety of attack code analysis, but features as a WEB Dog, simply can't read binary. With vulnerability analysis, understanding the vulnerability details, but is to tel...
Android and then exposed the new vulnerability: remote causing the user can not receive calls-vulnerability warning-the black bar safety net
! This week is is the Android device the“Black week”, a few days ago has just been broke Stagefight media library on there worth a“heart blood”of high-risk vulnerabilities, this two-day security researchers then aeration may be the remote cause of the Android device is not properly connected to t...
SysAid Help Desk Administrator Portal Arbitrary File Upload-vulnerability warning-the black bar safety net
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SysAid Help Desk Administrator Portal Arbitrary File Upload', 'Description' = %q This module exploits a file upload vulnerability in...
The social security system, The exposed proximal 2 0 0 vulnerabilities, a hacker can obtain sensitive information-vulnerability warning-the black bar safety net
In recent years, because of the leakage of personal information causes of telecommunications fraud, crooks know of the victims unit, name, ID number, level of income. The social security system vulnerability to cause the leakage of personal information, may be one of the sources. 2 0 1 3 year to...
Away from the Flash, away from the dangerous: from Flash 0day vulnerability disclosure to the integrated penetration tools package, only used 4-day-vulnerability warning-the black bar safety net
6 on 2 7 January, a penetration testing Toolkit Magnitude has been successfully Adobe Flash Player 0day vulnerability, and this time only in the Adobe release fix vulnerabilities patch after four days, kit software the author recently become the fastest to achieve the use of the Flash Player...
maxcms movie CMS injection-vulnerability warning-the black bar safety net
Vulnerability file/inc/ajax. asp 33-40 line Sub getscoreac dim id,ary,ret : id=getForm"id","get" if isNulid then die "err" if ac="newsscore" then ary=conn. db"SELECT mdigg,mtread,mscore FROM prenews WHERE mid correspondence between="&id,"array" else ary=conn. db"SELECT mdigg,mtread,mscore FROM...
Catastrophic vulnerability: Venom threat most of the data center-vulnerability warning-the black bar safety net
A security research firm alert, referring to a new Bug could allow a hacker from the inside of the ride unscathed in the data center solve most of the machine. The zero-day vulnerability from the extensive application virtualization software of the traditional General-purpose component that can b...
IBM Security AppScan 9.0.2 remote code execution vulnerability-vulnerability warning-the black bar safety net
IBM Security AppScan Standard is the United States, IBM company a Web application security testing tool. The tool is available in the application development life cycle for automated static and dynamic security vulnerability scanning. The vulnerability is based on the Windows OLE Automation array...
ElasticSearch exposure local arbitrary file read vulnerability, impact 1. 4. 5 and 1. 5. Before 2 all versions-bug warning-the black bar safety net
! Recently in exploit-db on the aerator out of the ElasticSearch plug-in functionality directory traversal Path Transversal cause local arbitrary file read vulnerability, impact 1. 4. 5 and 1. 5. Before 2 All version. In zoomeye on casually looking for a few tried, found vulnerabilities in the ar...
Oracle blind injection combined with XXE vulnerability remote data acquisition-vulnerability warning-the black bar safety net
Presumably everyone onSQL injectionhas been familiar for XML entity injection, or XXE, is also. This paper mainly discussed the method in the presence of the ORACLE the blind the case of remote access to the data. In fact, and UTLHTTP Remote Access Method of the same, but the principle is...
The Dell Support Software, Dell System Detect the presence of security vulnerabilities that can be remotely execute malicious code-vulnerability warning-the black bar safety net
Pre-installed in the Dell computer Support Software Dell System Detect is to discover the presence of vulnerabilities, allowing an attacker to remotely execute malicious code. System Detect Dell system bundled a software, as long as the system starts, it will start automatically. The use of the...
Hackers use PDF generator to steal the WEB files on the server-the vulnerabilities and early warning-the black bar safety net
TCPDF PDF generator is the most popular today for creating a PDF document the PHP library one of today's most popular open source projects. It every day with millions of user usage, the carrier generally is a CMS program or other WEB application. However, the hacker using TCPDF's a loophole that...
Kingsoft enterprise terminal protection optimization system Web Console without having to log any file deleted-bug warning-the black bar safety net
Kingsoft enterprise terminal protection optimization system Web Console without having to log arbitrary file deletion Arbitrary file deletion: File:/tools/manage/deletetools.php code area children; $i++ if $xml-tool$i-id == $id @unlink"../".$ xml-tool$i-name; if$xml-tool$i-image != "test. png"...
Microsoft Windows Server 2 0 0 3 SP2 - Privilege Escalation-vulnerability warning-the black bar safety net
KL-0 0 1-2 0 1 5-0 0 1 : Microsoft Windows Server 2 0 0 3 SP2 Arbitrary Write Privilege Escalation Title: Microsoft Windows Server 2 0 0 3 SP2 Arbitrary Write Privilege Escalation Advisory ID: KL-0 0 1-2 0 1 5-0 0 1 Publication Date: 2015.01.28 Publication URL:...
Cacti monitoring system injection vulnerability trigger the bloodshed-vulnerability warning-the black bar safety net
Preface: Security is a whole, any one of the short Board will cause Safety accident, from the border network to the IDC operation and maintenance of the network to the office network, are the whole of each of the network cannot be ignored. Enterprise in for security to do a multi-layer protection...
2 5 2 9 net Union the use of the latest ie vulnerability mandatory installation of light micro-end-bug warning-the black bar safety net
I'm using Baidu browser ie compatible mode to browse http://www.dy2018.com this movie site, and found that somehow run the one called“Shine micro-end”of the game client, then I used smartsniff packet capture analysis, in the view source when the found a 2 5 2 9 net Union js advertising code, whic...
Global mobile security vulnerabilities“for the benefit of the”hack-vulnerability warning-the black bar safety net
German researchers said that global mobile phone operators the use of a system security vulnerabilities allow hackers to large-scale monitoring of mobile phone users traffic as possible. This security issue relates to the distribution standard system Signaling System 7, or SS7 in. The system is...
8 0% Vientiane network management there is a default database password can penetrate the entire cafe-vulnerability warning-the black bar safety net
Internet cafe database there is a default sa password can modify the data can be remotely executed command, and may penetrate the entire cafe It seems like a very old vulnerability, but now most of the Internet cafe or can use Detailed description: Vientiane database default password Account: sa...
Event tracking: Belkin router Belkin router）0day overflow vulnerability analysis-vulnerability warning-the black bar safety net
Vulnerability summary Security researcher Marco Vaz in Belkin n750 the model router found a serious vulnerability that can allow an attacker on the victim's device to get Root access permissions i.e. administrator privileges, the vulnerability of the main attacks is the router's Web...
The Windows kernel mention the right Vulnerability, CVE-2 0 1 4-4 1 1 3 analysis report-vulnerability warning-the black bar safety net
0x00 vulnerability background Recently, CrowdStrike team found Win64bit2008 R2 Server on the system there is a suspicious attack behavior and capture to the associated samples. Baidu security attack and Defense laboratories to the outside world release of the poc for the research, the vulnerabili...
SSLv3 Protocol vulnerability‘POODLE’to fix the related concepts-vulnerability warning-the black bar safety net
2 0 1 4 years 1 0 On 1 5 December, Google released a report about the SSLv3 “POODLE”of the high-risk vulnerability vulnerability number CVE-2 0 1 4-3 5 6 6 A brief analysis of the report. According to Google's statement, the vulnerability across all of the SSLv3 version, the use of the...
U.S. vulnerability management library released Bash vulnerability latest summary-vulnerability warning-the black bar safety net
! Introduction NVD National Vulnerability Databaseis the U.S. government based on vulnerability management data of the standard Knowledge Base, these data support the automation of vulnerability management and security testing, and follow Federal Information Security Management act FISMA is...
Sandworm（CVE-2 0 1 4-4 1 1 4 related to the threat of a comprehensive analysis of the report — and to chasing shadows Security Platform detection problem of the complex disk-vulnerability warning-the black bar safety net
1 threat card and introduction ! CVE-2 0 1 4-4 1 1 4 is in the OLE package Manager the INF arbitrary code execution vulnerability, the vulnerability affects Win Vista, Win7 and aboveoperating system, the attackers used PowerPoint as an attack vector, the vulnerability is in the Microsoft Windows...
Linux Bash find significant security vulnerabilities to modify the method-vulnerability warning-the black bar safety net
GMT 9 August 2 5, message, Linux users today and got a“surprise”it! The Red Hat security team on Linux in the widely used Bash shell, found a subtle but dangerous security vulnerabilities. The vulnerability called the“Bash Bug”or“Shellshock”is. When the user normal access, the vulnerability allow...
PHPCMS V9 one pleases vulnerability-vulnerability warning-the black bar safety net
Brief description: Don't know how to describe this vulnerability, anyway, in most cases you can do many things. Website registration is not on, it is not the official website demo. Detailed description: Install phpcms time will be forced to install it pass...
Discuz <= 7.2 SQL injection vulnerability details-vulnerability warning-the black bar safety net
Is said to be a digital company of the emergency response to the release out. The group inside the small partners are shocked, the specific vulnerability analysis see this article Wherein the In the senior PHP application vulnerability auditing techniques of1an article in the"magic quotes brought...
74cms the latest through the kill injection vulnerability-vulnerability warning-the black bar safety net
A iconv raised pork The tested website didn't fill it. ! the md5 solution does not open, but can be used to proof a variety of information, you know. exp:http://demo. 74cms. com/plus/ajaxcommon. php? act=hotword&query=%E9%8C%A6%27union+/!...
Reproduce Struts1 manipulation of the classLoader vulnerability-vulnerability warning-the black bar safety net
Note: this article is only limited technical research, explore, test use. 2 0 1 4 year 4 month 2 9 day burst of struts may be to manipulate the classLoader vulnerability across the struts1 and struts2 all versions. The impact and the severity of the problem can be almost and the heartbleed...
Office”combination”formula exploits the sample analysis-vulnerability warning-the black bar safety net
by hcl, nine8 of code audit labs of vulnhunt.com 1 Overview Online disclosure of a suspected CVE-2 0 1 4-1 7 6 1 RTF sample, hanhai source analysis found that the sample is not a CVE-2 0 1 4-1 7 6 1, but in a RTF sample includes both the two vulnerabilities, respectively, for the CVE-2 0 1 2-0 1 ...
IIS4\IIS5 CGI environment block forged 0day vulnerabilities-vulnerability warning-the black bar safety net
About 1 4 years ago find until now the 0day Is IIS4\IIS5 vulnerabilities, corresponding to theoperating systemis a winnt and win2000 system that Microsoft no longer supports the software, their strategies want to knock out these systems, 1 to 1 of the report, after Microsoft decided to no longer...
2 on 1 7-day Alipay the balance of treasure once again broke a major security vulnerability-vulnerability warning-the black bar safety net
Internet Security Alert on the platform a titled Taobao certification defects can login any Taobao account and Alipay me of the balance of treasure sprinkle of Vulnerability in one shot, one time each BBS, Weibo, wechat, QQ group to expand the fiery discussion, many people expressed concern about...