7620 matches found
New vulnerability: the use of a browser Cookie to bypass HTTPS and steal private information-bug warning-the black bar safety net
! Recently, a presence in the major browsers Web cookies in a serious vulnerability is found, it enables secure browsing mode HTTPS is vulnerable to MiTM attacks. In addition, most of the Web sites and popular open source applications may contain Cookie injection vulnerabilities, including: Googl...
SAP Afaria product exposed a series of serious vulnerabilities that affect a large number of mobile device-bug warning-the black bar safety net
Afaria is the German SAP software company developed a mobile device management MDM solutions that are currently on the market the most popular MDM solutions, there are about 6 3 0 0 a enterprise which manages 1 billion 3 0 0 million of the mobile device. ERPScan is specifically responsible for th...
Symbolic Link vulnerability simple background introduction-vulnerability warning-the black bar safety net
! Symbolic Link is the Microsoft Windows System on one of the key mechanisms, from Windows NT3. 1 Introduction objects, and registry Symbolic Link, Microsoft from the Windows 2000 start also introduced the NTFS Mount Point and Directory Juntions, these mechanisms for familiar with the Windows...
PfSense XSS vulnerability analysis-vulnerability warning-the black bar safety net
PfSense is based on FreeBSD operating system open source network firewall software, has been around the world of company is widely used to protect its infrastructure. In the last year, we in PfSense, found some security vulnerabilities, the black bar safety net has reported, and submitted to the...
Yokogawa multiple products stack buffer overflow vulnerability(CVE-2 0 1 5-5 6 2 7)-vulnerability warning-the black bar safety net
Affected system: yokogawa Exaopc = R3. 7 2. 0 0 yokogawa CENTUM CENTUM VP Entry yokogawa CENTUM CENTUM VP yokogawa CENTUM CENTUM CS 3 0 0 0 Entry yokogawa CENTUM CENTUM CS 3 0 0 0 yokogawa CENTUM CENTUM CS 1 0 0 0 Description: CVECAN ID: CVE-2 0 1 5-5 6 2 7 Yokogawa Japan Yokogawa Electric...
1 0 5 security bulletins: Microsoft 2 0 1 5 published in the vulnerability count far more than last year-vulnerability warning-the black bar safety net
9 on 8 April, Microsoft released the 1 2 new security bulletins, five of which for emergency announcements. Plus This is 1 of 2 new security bulletins so far this year there are already 1 0 5. Microsoft 2 0 1 4 just released a 8 5 a security Bulletin. So why this year there were so many security...
PfSense command injection vulnerability analysis-vulnerability warning-the black bar safety net
In this article, we will introduce in PfSense 2. 1. 3 and the lower version in the CVE-2 0 1 4-4 6 8 8 vulnerability; the higher the version, pfSense has fixed this vulnerability. 0x01 Diagdns. php script command injection vulnerability Shown below is the script diagdns. in php there is a command...
Camera 3 6 0 applications privacy data breach analysis-vulnerability warning-the black bar safety net
A lot of popular Android apps leak privacy data. We found another popular Google Play app,“Camera 3 6 0 Ultimate”,not only for the user's photos are optimized, but also inadvertently leaked the private data that can allow a malicious user is not authenticated access to the user Camera 3 6 0 cloud...
Firefox bookmarks extensions apps Pocket: vulnerability mining not so difficult-vulnerability warning-the black bar safety net
The Pocket application's developers recently fixed a few leaked data a vulnerability, hackers may be from the server to obtain WEB Services, internal IP address, as well as more sensitive information. Pocket profile Pocket formerly known as Read it Later, as the name suggests, is an online...
The Mac OS X operating system, and found 2 pieces of Privilege elevation 0day vulnerabilities-vulnerability warning-the black bar safety net
Apple Mac OS X operating system, and found 2 pieces new, 0day vulnerabilities, if an attacker successfully exploited, may be in the victim's equipment on elevated privileges to get root access. Vulnerability details These two vulnerabilities is by Italian security researcher Luca Todesco found, a...
BlackHat topic analysis: analysis of BGP hijacking exploit-vulnerability warning-the black bar safety net
BGP hijacking in 2 0 0 8 years defcon conference once involved, however, in 2 0 1 5 year's blackhat has been selected as the subject, visible the seriousness of the problem, frozen three feet, a cold, BGP hijacking issues to organizations around the world work together to solve it. 0×0 0 what is ...
CVE-2 0 1 5-3 1 1 3 analysis-vulnerability warning-the black bar safety net
Fireeye in its 6-month 2 3 day post“Operation ceeinject. Gen! g Wolf”are discussed in a cyber-espionage group, known as APT3, in Adobe Flash using a 0day vulnerability. Unit42 also use the UPS tracking APT3 group, it was originated in China the invasion of the toolset, with the earlier of 0day...
Android Stagefright high-risk vulnerability: a preliminary study-vulnerability warning-the black bar safety net
Order Shocked Stagefright exposed significant vulnerabilities can result in remote code execution, even clockwork MMS, it is possible the invasion of the user mobile device. This sounds but a rare case of a large vulnerability., as security personnel, nature good steak with a steak insider...
Apple Yosemite operating system local to mention the right to: EXP length of not more than a Twitter-bug warning-the black bar safety net
Apple's latestoperating systemYosemite was broke a local mention the right vulnerability, the vulnerability is by the German security researcher Stefan Esser discovered and has been in OS X 10.10-10.10.4 version of the test is successful. If you want to fix the vulnerability, please upgrade to th...
Microsoft Word remote code execution CVE-2 0 1 5-0 0 9 7 simple the use of the introduction-vulnerability warning-the black bar safety net
0x00 introduction Microsoft Office Word 2 0 0 3, 2 0 0 7 Remote Code Execution Vulnerability 0x01 known successful environment Word 2 0 0 3, 2 0 0 7 SP3 on Windows XP, 7, 8, 8.1 all up to this date. 0x02poc file description Create-Recordset. hta: used to generate the recordset. txt and dldrun. vb...
CVE-2 0 1 5-5 0 9 0 exploit-vulnerability warning-the black bar safety net
0x01 introduction 2 0 1 5 year 7 month, Adobe patched several vulnerabilities, wherein the CVE-2 0 1 5-5 0 9 0 exceptionally conspicuous, it is worth get to the bottom. However, Adobe for these vulnerabilities just according to the level of threat are ranked, and gave no details. In fact, an...
flash vulnerabilities:CVE-2 0 1 5-3 1 1 3 and CVE-2 0 1 5-3 0 4 3 comparison-vulnerability warning-the black bar safety net
Before we talk about Flash Player out-of-band data out-of-band problem, which consists of a Adobe release number for APSB-1 5-1 4-in. Now the Flash Player update to 1 8. 0. 0. 1 9 4 in. Our current defect analysis revealed: CVE-2 0 1 5-3 1 1 3 impact similar to the CVE-2 0 1 5-3 0 4 3 in. Are in...
IdeaCMS built Station system universal vulnerability affects thousands of sites-vulnerability warning-the black bar safety net
IdeaCMS based on the ASP+MSSQL/ACCESS technology development from 2 0 0 8 released in the first version since, every year, we are on a program to do a larger version of the update, so far has released six major versions. IdeaCMS in a simple, efficient, flexible, easy to use, open source, template...
Iphone SMS magic: one SMS to make the iPhone crash to restart-vulnerability warning-the black bar safety net
Apple mobileoperating systemappears in a new bug, which can lead to any iPhone to crash and restart. This problem is caused by a simple text message caused. When the Messages received, one particular by character of the string, the iPhone Message app will continue to crash. And if you accept the...
ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net
Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...
The default WordPress Theme the presence of DOM XSS（cross-site scripting vulnerability affecting millions of users-vulnerability warning-the black bar safety net
! The use of the Genericons package of WordPress plugin or theme are likely to be affected by a DOM-basedXSSvulnerability, because of WordPress default theme Twenty Fifteen 及 知名 插件 Jetpack 都 包含 了 存在 漏洞 的 页面 example.html that affect millions of users. Vulnerability causes Any use of the genericons...
Wordpress is continuously explosion two stored XSS, the impact of the latest version-bug warning-the black bar safety net
! /Article/UploadPic/2015-4/201542811437550.jpg The official Wordpress in 4 on 2 1, released new version 4. 1. 2, wherein the mentioned fixes a serious memory typexssvulnerabilities. Soon someone shows vulnerability details. Thisxssstill appear in the wordpress comments, but the problem is caused...
ALi CTF 2 0 1 5 write up-vulnerability warning-the black bar safety net
0x00 Cake Cake is a title of Android Title, The specific process is an input a string and then initialize a length of 1 by 6 Array, then the string with this array of xor. So we just need to xor it ok. Just look at the code in reverse, the key is there are two Key looking for ok direct codes a= 0...
Mastery oa at the secondary injection vulnerability-vulnerability warning-the black bar safety net
Brief description: Paralysis of the software Detailed description: ! QQ 图片 20141215110029.jpg Add the attention of the people, many functions rely on the data code area POST http://121.40.134.14/general/personinfo/concernuser/update.php HTTP/1.1 Host: 121.40.134.14 Connection: keep-alive...
Tencent's wechat is shaking vulnerability, the use of the phone number cause account lost can't get back in!-- Theory of of personal information security and protection-vulnerability warning-the black bar safety net
This article was written today at 2 p.m. much, did not immediately issued because the cock to the clouds first feedback about the cock always felt the clouds are very T, it is desirable to have an account, but the cock is too water, but did not pass the audit, it may present cock of the expressio...
Gold Partner: security researchers discovered Flash 0day vulnerability with BEDEP virus there is a close Association-vulnerability warning-the black bar safety net
2 0 1 5 year at the beginning of the Adobe Flash sequential burst more0dayvulnerability, and has not been repaired when it waslarge-scale malicious usethe. Recently, Trend Micro security researchers in Adobe 0day vulnerabilities in the tracking survey, found BEDEP series virus with the Adobe Flas...
SSRF vulnerability of the mining experience-the vulnerability warning-the black bar safety net
SSRF overview SSRFServer-Side Request Forgery:server side request forgery is a by the attacker structure is formed by the service terminal initiating the request of a security vulnerability. Under normal circumstances, the SSRF attack the target from outside the network cannot access the internal...
Millet smart cameras small ants there is a remote command execution vulnerability-vulnerability warning-the black bar safety net
! t0167153064b2673d18. png Vulnerability description: Small ants Camera application management program the presence of a remote command execution vulnerability through the web interface with root privileges to execute arbitrary system commands without any web permissions, now the official latest...
Friends news router discovery DNS hijacking vulnerability-vulnerability warning-the black bar safety net
Security researchers have found that the Friends of the hearing at least one model of the router is found that the presence of DNS hijacking vulnerability that can be remotely change the DNS settings, hijack the traffic. Ethical hackerEthical Hackerresearch group of Todor Donev said, the...
Phone to grab votes APP“train up”to the presence of high-risk vulnerabilities in the user's personal information and other data leaks-bug warning-the black bar safety net
Data 3 6 0 patch-day vulnerability response platform shows that the domestic popular mobile phone to grab votes APP“train up”to the presence of high-risk vulnerabilities, including millions of tickets, ticket orders user ID number, username, plaintext password, detailed ticket information and oth...
Samsung KNOX remote silent installation vulnerabilities in-depth analysis of the report-vulnerability warning-the black bar safety net
Vulnerability sources 1 1 In mid-May, the Samsung phone is a foreign security researchers exposed a serious security vulnerability,the vulnerability affects the Galaxy S5,S4,S4 mini,Note 4,Note3 and Ace 4 supports knox, a full line of Samsung phones, part of the GalaxyS5, and the Note 4 has been...
Cool official silent install apk features background the presence of high-risk vulnerabilities(demo custom machine is how in your phone silently installed)-bug warning-the black bar safety net
Cool Demo junk software is how to through your mobile phone to silently install Suction fee software what is going on. You charge less? Detailed description: Cool a operation and maintenance improper shell. ! ! ! ok See under background: http://auth.coolyun.com ! Background PUSH features APK sile...
Mac EFI is exposed a major security vulnerability by Thunderbolt devices to spread malicious programs-vulnerability warning-the black bar safety net
Next week, Germany at the Chaos Communication Congress Security Conference, a researcher Trammell Hudson will present a new method, through the unique production of Thunderbolt devices in the Mac EFI boot firmware in the injection almost impossible to not remove the Bootkit virus. The exploits of...
Free open source photo album Piwigo <= v2. 6. 0 SQL injection vulnerability 0day-a vulnerability warning-the black bar safety net
Piwigo is the world's most famous free open source photo album system by PHP+MySQL architecture. Since the framework build easy, by domestic and foreign developers favor recently, Piwigo = v2. 6. 0 burst critical 0day vulnerability. Vulnerability causes,Piwigo photo album system/piwigo/picture. p...
The most"secure”phone coolpad S6 a days even the explosion of the five vulnerability-vulnerability warning-the black bar safety net
Coolpad has recently been in investing in the advocacy of“safe mobile phone”, it's the coolpad S6 is billed as China's first officially certified“safe mobile phone”, but this argument does not seem too be white hat recognition. This phone recently in the black bar vulnerability on the platform wa...
Popular secure chat APP TextSecure presence of“unknown key sharing attack”vulnerability-vulnerability warning-the black bar safety net
! TextSecure is Android platform a encrypted chat APP, this free APP is designed in order to guarantee communication privacy. This APP by Open WhisperSystems developed, the code completelyopen sourcesupport end-to-end SMS encryption. Looks very safe is not? Recently, however, from Germany's Ruhr...
Microsoft's announcement to fix the OLE remote code execution vulnerability-vulnerability warning-the black bar safety net
In last month's“patch Tuesday”in Microsoft's Update Patch for the OLE allow remote code execution were fixed. We had thought that the vulnerability has been fixed, but may in fact be more than we imagined more complicated. Microsoft today once again revolve around the vulnerability issued a safet...
The latest bash vulnerability solution-exploits warning-the black bar safety net
Is today just broke the Bash security vulnerability, and SSH bash emergency security patches is very important. Test whether the presence of the vulnerability you Please execute the following command: root@keepalivenginxmaster / env x=' :;; echo vulnerable" bash-c "echo this is a test" 1 2 3 4 5 ...
phpcms avatar upload vulnerability and the subsequent impact-vulnerability warning-the black bar safety net
Summer vacation writing articles, recent blog didn't dry, issued to entertainment. In response to the love of pot Mramydnei, the line masters of Somali pirates, the fd cattle（/fd's call for the establishment of the parsec team, and fellow teachers over the years of my education, I want to write...
Remember once hijacked hang horse experience-Elasticsearch remote execution vulnerability-vulnerability warning-the black bar safety net
Cause: the The company uses Ucloud cloud hosting services, today morning suddenly told that there is a server of the outlet flow surge in foreign contract amount within a short time reached 1 0 0 million, and all the UDP type, the first feeling was: Gee, could there be dark, is when the broiler!...
Android new vulnerability exposure: hack may fake and authentic applications-vulnerability warning-the black bar safety net
Ticker 7 on 3 0 September morning news, on Tuesday released a study on the display, the Google Android operating system has a security vulnerability that can allow a hacker to fake a trusted formal application, thereby hijacking the user's smartphone or tablet. The security company Bluebox Securi...
A vulnerability can lead to getting letv network-vulnerability warning-the black bar safety net
Improperly configured directly execute the command, you can endanger the entire network system, due to the vulnerability of IP is not a binding domain, that is not. letv.com and all the test say is with the domain name, without a domain name is not received, so sobug does not recognize this...
Dimensions buy 4. 3 the latest version of the sql analysis-vulnerability warning-the black bar safety net
Haven't been on the forum, today sees the release of the top-dimensional buy 4. 3 the latest versionof sql injectionexploit tool Well, according to this primary information, plus before has been analyzed dimensions, soon locating to the \\app\source\goodslist.php 1. 2. //Buy classification 3...
ThinkPHP the Ubb tag vulnerability to read arbitrary contents of the-vulnerability warning-the black bar safety net
Brief description: ThinkPHP the Ubb tags, there is a code highlighting function, that satisfies: xxx/c odeorp hpxxx/p hpwhen it comes to the middle of the xxx to read, and highlight, the xxx is the path, and the non-specific code, as in Figure 1,The input path, when the file exists, the return is...
GoAgent vulnerabilities could lead to man in the middle attacks-vulnerability warning-the black bar safety net
The original http://seclists.org/fulldisclosure/2014/Jun/9 the. For a few sentences, words and punctuation have been adjusted. ------------ GoAgent import public private key of the root certificate problem · Test page · How to guard against risk · How to remove the GoAgent CA certificate GoAgent...
Open source BUG tracking platform JIRA directory traversal vulnerability analysis-vulnerability warning-the black bar safety net
Recently, a new announcement report a Jira 5.0. 1 1 and 6. 0. 3 versions of the directory traversal vulnerability in the last 7 months to be verified, and in the next few months to repair. Attack method is very simple, but the potential impact is very large, the vulnerability could allow an...
Struts2 then exposed S2-0 2 0 patch bypass vulnerability – evil regular expressions-vulnerability warning-the black bar safety net
4 on 2 to 4 November, the network exposed in the article“Security researchers noted that the Apache Struts2 vulnerability Bulletin S2-0 2 0, in process repair CVE-2 0 1 4-0 0 9 4 bug fixes program vulnerability exists, resulting patch is completely bypassed.” Affected products: Struts 2.0.0 –...
Sohu video XSS vulnerability used by hackers Video the user is human flesh-a vulnerability warning-the black bar safety net
Recently availableDDoSprotection firm Incapsula revealed the World No. 2 7 large sites-Sohu oneXSScross-site scripting vulnerabilities become together large-scale botnetDDoSattack the source. ! 1 Pictures from the network The rapid development of Internet, Network Security has been called for...
Adobe warning Flash high-risk vulnerabilities: Mac and PC fast upgrade-vulnerability warning-the black bar safety net
Adobe on Tuesday for the Flash plug-in released a security update that solves allow an attacker to remotely control a user's computer vulnerabilities. According to Adobe, as long as the running version for 1 2. 0. 0. 4 3 or earlier versions of Flash Mac and a Windows machine can be vulnerable to...
National Civil Service Bureau, the suspect had been hacking found webshell traces-vulnerability warning-the black bar safety net
Attention Gov safe! Continue crawling and scanning the directory and found a former cattle over the traces Continue to Scan down··· ! These are all the pony··Malaysia··pictures of horses··horses··· ! The LDAP build ! This pants is not insurance.···visual inspection has been off···...