PHP careful urldecode triggered SQL injection vulnerability-vulnerability warning-the black bar safety net

Ihipop school Discuz X1. 5 The Forum is black, where the noisy one afternoon. Google“Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit”, you know. Discuz is national very popular Forum system, is black the website should be a lot of it. But I'm against the invasion of someone else's...

SWEET32: TLS 6 4-bit block cipher birthday attack(CVE-2 0 1 6-2 1 8 3)-vulnerability warning-the black bar safety net

The problem of the attack of harsh conditions. The attacker needs to get a lot of ciphertext, the thesis of the author is by 3 0 hours, 610GB of data to achieve. In addition, the need to plaintext in Important Information a lot of repetition which is to eventually be able to decrypt it's content,...

Will Tiger uRouter wireless router discovered multiple security vulnerabilities-vulnerability warning-the black bar safety net

A long story short Will Tiger uRouter wireless router is a by the Chinese will Tiger technology production and sales of enterprise class intelligent routing products. It looks impeccable, but it did not do pretty and intelligent－because this device is the presence of multiple serious security...

FFMpeg 3.1.2 release fixes from 360GearTeam a high-risk vulnerability-vulnerability warning-the black bar safety net

360GearTeamoriginal 3 6 0 smart scan teamsecurity researchers link a Han recent studies FFMpeg security, find the FFMpeg in decoding the swf file when there is a buffer overflow vulnerability number CVE-2 0 1 6-6 6 7 1 The. The vulnerability under certain conditions can lead to arbitrary code...

Vulnerability warning: Struts2 devMode lead to remote code execution vulnerability-vulnerability warning-the black bar safety net

Last month mid Struts2 vulnerability warning was out, this latest remote code execution vulnerability has been non-stop here. But this time, the vulnerability that happens in devMode mode--the previous official has to inform the user, need in the website officially launched prior to the devMode...

Hackers still use the old Office vulnerability for cyber-attacks-vulnerabilities-warning-the black bar safety net

! Recently, the Microsoft company said hackers in many network attacks, is still in use with one to 4 years ago, found that the Office software vulnerabilities. Hackers exploit Office software in the presence of this vulnerability, the use of the production of a good document to spread malware...

Browser exploits Getting Started-vulnerability warning-the black bar safety net

0x00 cve-2 0 1 2-1 8 8 9 IE This article is mainly want to record myself from the small white begin to contact under windows IE vulnerability debugging process, but also to think of is give more newbies a reference of the tutorial. Large cow light spray! The beginning is want to do this hole in x...

cisco wireless kit there is a serious vulnerability, so far no fix-bug warning-the black bar safety net

Cisco recently released a security Advisory to announce the three Cisco wireless packet is subjected to a severe bug effects,but there is still no solution available. SOHO equipment is mainly used in most of the goals between network components,and often in the wild, they often lack the protectiv...

Qualcomm secure execution environment of high-risk vulnerabilities affecting the global six into outstanding device-the vulnerability warning-the black bar safety net

! Qualcomm secure execution environment Qualcomm Secure Execution Environment, QSEE in a key mention of the right to exploit Elevation of Privilege, EOP still affect the world about six into the Android device. While the vulnerability earlier had been a repair. The root of the problem is that...

Cloud computing a core component of QEMU even explosion 1 0 pieces of high-risk vulnerabilities-vulnerability warning-the black bar safety net

Since 5 month so far,as cloud computing is an important underlying component of QEMU has been a continuous burst of 1 0 pieces of high-risk vulnerabilities,from the official website of the vulnerability Description,This 1 0 piece vulnerability, respectively, will cause comprises a“virtual machine...

ImageMagick（CVE-2 0 1 6-3 7 1 4 implementation process, vulnerability analysis, and solution-vulnerability warning-the black bar safety net

! What is ImageMagick ImageMagick is a free to create, edit, composite picture software. It can read, convert, write a variety of formats pictures. Picture cut, color replacement, various effects application, image rotation, composition, text, line, polygon, ellipse, curve, attached to a picture ...

Pass to kill the Windows of Badlock? The How to repair? - Vulnerability warning-the black bar safety net

Badlock Bug Badlock Bug description 2 0 1 6 years 4 on 1 on 2, Windows and Samba revealed a very critical security vulnerabilities. Samba 4.4.2, and 4.3.8 and 4.2.11 security updates are available. Please update your system. We are very determined hackers will soon use this vulnerability to attac...

Through the ELF dynamic loading of the structure ROP chain Return-to-dl-resolve-the vulnerability warning-the black bar safety net

Play CTF game stick have know that PWN type of vulnerability topic will generally provide an executable program, and provide program run dynamically link the libc library. By the libc. so you can get the library function of the offset address, combined with the leak GOT the table in the libc...

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

OpenSSL high-risk vulnerabilities allow attackers to decrypt HTTPS traffic-bug warning-the black bar safety net

OpenSSL maintainer to fix a high risk vulnerability allows an attacker can obtain the decryption of HTTPS and other encrypted traffic key. Vulnerability the potential impact of While serious, but the need to meet multiple criteria to be used: the vulnerability exists only in OpenSSL 1.0.2; rely o...

Thousands of App Store games and App Store security vulnerability susceptible to hacker attacks-vulnerability warning-the black bar safety net

A leading network security company released research report, Apple's App Store has more than 1 0 0 0 app there is a security vulnerability, susceptible to hack attacks. A product called JSPatch used to help developers modify the application software, a security vulnerability exists, which makes i...

OpenSSH CVE-2 0 1 6-0 7 7 7 private key to steal technical analysis-vulnerability warning-the black bar safety net

Remembered used to write a lot of advertising procedures, estimation also not many people see. Then see“days eye APT the Team”and“3 6 0 security suit team”of people for black output only wrote the phrase“people do, day in see”, a bit of sentiment. Quickly put the sb type of ad deleted, cannot be...

PHP DOS vulnerability new: CVE-2 0 1 5-4 0 2 4 Reviewed-vulnerability warning-the black bar safety net

0x01 bypassing the WAF principle According to the PHP DOS vulnerability principle, in multipartbufferheaders function parses the header of the corresponding value, the value value exists in the n rows. Each line of the string with whitespace at the beginning or does not exist. character':'are...

A common GPS satellite positioning platform vulnerability disaster the user's location information in an emergency-vulnerability warning-the black bar safety net

Recently, in the news of the exposure of the many by the GPS positioning device, tracking the abduction of the event http://news.xinhuanet.com/legal/2015-11/15/c1284295262.htm in. Many users have to consult, there is no method for detecting it? So in the market to buy some GPS positioning...

Security researchers have found that Instagram vulnerability by the FaceBook executives, the threat-vulnerability warning-the black bar safety net

! An independent security researcher claimed that he had discovered Instagram in a series of security vulnerabilities and configuration flaws, by using these loopholes, he managed to get access stored on the Instagram servers sensitive data on the permissions; in him, to the relevant vendor...

Baidu Department of Applied WormHole vulnerability details analysis-vulnerability warning-the black bar safety net

Baidu moplus SDK is called a wormhole（Wormhole of vulnerability was reported after the“a ripple”, it is implanted into 1 4 0 0 0 app, these apps have close to 4 0 0 0 A are by Baidu produced. The vulnerability is a vulnerability reporting platform black bar safety net vulnerability bulletins foun...

APT organization PawnStorm take advantage of the latest Flash zero-day attack States, the Ministry of Foreign Affairs-vulnerability warning-the black bar safety net

Recently, Trend Micro researchers discovered a new Flash vulnerability being PawnStorm cyber espionage operations use around the world the Ministry of Foreign Affairs to expand the attack. The Ministry of Foreign Affairs to attack the target PawnStorm is one of both depth and breadth of persisten...

iOS core application design vulnerability that exposed the user's Apple ID credentials-vulnerability warning-the black bar safety net

! Check Point alert of the Apple iOS to the core application may be exposed to user credentials. Fortunately iOS 9 contains the relevant patch. Apple ID the ios operating system specifically for user provides convenience to users themselves through an Apple ID to manage the device. Now, iOS marke...

Google AdMob filter vulnerabilities, malicious ads sneak into the application-vulnerability warning-the black bar safety net

! There are Android app developers complained, because the official advertising network poorly regulated, resulting in this pollution-free Android application infected with malicious ads. Android app strange is implanted in the third-party advertising From Sydney, two bus the Android app Arrivo a...

New vulnerability: the use of a browser Cookie to bypass HTTPS and steal private information-bug warning-the black bar safety net

! Recently, a presence in the major browsers Web cookies in a serious vulnerability is found, it enables secure browsing mode HTTPS is vulnerable to MiTM attacks. In addition, most of the Web sites and popular open source applications may contain Cookie injection vulnerabilities, including: Googl...

Symbolic Link vulnerability simple background introduction-vulnerability warning-the black bar safety net

! Symbolic Link is the Microsoft Windows System on one of the key mechanisms, from Windows NT3. 1 Introduction objects, and registry Symbolic Link, Microsoft from the Windows 2000 start also introduced the NTFS Mount Point and Directory Juntions, these mechanisms for familiar with the Windows...

PfSense XSS vulnerability analysis-vulnerability warning-the black bar safety net

PfSense is based on FreeBSD operating system open source network firewall software, has been around the world of company is widely used to protect its infrastructure. In the last year, we in PfSense, found some security vulnerabilities, the black bar safety net has reported, and submitted to the...

1 0 5 security bulletins: Microsoft 2 0 1 5 published in the vulnerability count far more than last year-vulnerability warning-the black bar safety net

9 on 8 April, Microsoft released the 1 2 new security bulletins, five of which for emergency announcements. Plus This is 1 of 2 new security bulletins so far this year there are already 1 0 5. Microsoft 2 0 1 4 just released a 8 5 a security Bulletin. So why this year there were so many security...

PfSense command injection vulnerability analysis-vulnerability warning-the black bar safety net

In this article, we will introduce in PfSense 2. 1. 3 and the lower version in the CVE-2 0 1 4-4 6 8 8 vulnerability; the higher the version, pfSense has fixed this vulnerability. 0x01 Diagdns. php script command injection vulnerability Shown below is the script diagdns. in php there is a command...

EMC Atmos XML external entity injection Vulnerability(CVE-2 0 1 5-4 5 3 8)-vulnerability warning-the black bar safety net

Affected system: EMC Atmos = 2.3.0 Description: CVECAN ID: CVE-2 0 1 5-4 5 3 8 EMC Atmos is used to store, archive and access massive unstructured data platform. EMC Atmos 2.3.0 and earlier versions of the XML parser there is XXE injection vulnerability, allows an attacker unauthorized access to...

Camera 3 6 0 applications privacy data breach analysis-vulnerability warning-the black bar safety net

A lot of popular Android apps leak privacy data. We found another popular Google Play app,“Camera 3 6 0 Ultimate”,not only for the user's photos are optimized, but also inadvertently leaked the private data that can allow a malicious user is not authenticated access to the user Camera 3 6 0 cloud...

Technology uncovered“QQ space”to automatically forward adverse information-vulnerability warning-the black bar safety net

We often see the QQ space to automatically forward some of the included links to bad information, even if we QQ password has not been stolen. The recent adoption of a QQ space automatically forwarding the link for analysis, found that the automatic forwarding mechanism through the use of the...

Model S has a security vulnerability? Tesla Fury dig Google head of security-vulnerability warning-the black bar safety net

Earlier today broke the Tesla Model S model electric car, there may be hackers exploit major security vulnerability through this vulnerability hackers can remotely control cars, and even let the car flameout, the media reported this message and of the electric car's safety questioned. Tesla in...

The popular DNS server software BIND exposed serious DoS vulnerability-vulnerability warning-the black bar safety net

BIND is the world's most popular DNS server software. The Internet Association, the ISC published Vulnerability CVE-2 0 1 5-5 4 7 7 patch, this is an affected BIND server to a serious denial of service vulnerability. BIND denial of service vulnerability A week ago, the Internet Association, the I...

Microsoft Word remote code execution CVE-2 0 1 5-0 0 9 7 simple the use of the introduction-vulnerability warning-the black bar safety net

0x00 introduction Microsoft Office Word 2 0 0 3, 2 0 0 7 Remote Code Execution Vulnerability 0x01 known successful environment Word 2 0 0 3, 2 0 0 7 SP3 on Windows XP, 7, 8, 8.1 all up to this date. 0x02poc file description Create-Recordset. hta: used to generate the recordset. txt and dldrun. vb...

CVE-2 0 1 5-5 0 9 0 exploit-vulnerability warning-the black bar safety net

0x01 introduction 2 0 1 5 year 7 month, Adobe patched several vulnerabilities, wherein the CVE-2 0 1 5-5 0 9 0 exceptionally conspicuous, it is worth get to the bottom. However, Adobe for these vulnerabilities just according to the level of threat are ranked, and gave no details. In fact, an...

Adobe released official patch: fix Hacking Team leaked Flash 0day vulnerability-vulnerability warning-the black bar safety net

Adobe today released Flash Player update patches for the repair of Hacking Team to steal the 400G data is found in the 0day vulnerability. An attacker can use this vulnerability to make the target machine the system crashes and Access Control permissions. Vulnerability This 0day vulnerability by...

The phone did not leave the body but by hacking the lock to blackmail you don't understand the Apple“security vulnerability”-vulnerability warning-the black bar safety net

Yesterday reported that Mr. Xu transfer of second-hand Apple phone, the A 9 0 after the guy borrowed test machine of two-time with a cloud account bound, Mr. Xu phone, and extortion 3 0 0 Yuan unlocking fee. Smartphones bring to our lives a lot of convenience and even lifestyle changes. However,...

Tai Chi jailbreak major security Backdoor-vulnerability warning-the black bar safety net

Tai Chi jailbreak iOS8. 1. 3-8. 4 contains a major security back door, escape after causing any the APP can extract right to the Root, thereby affecting the user data safe. For example to obtain Root permission after full control of system files, and even further to install Trojans and other...

The hacker group APT3 use of the Flash 0day vulnerability to launch large-scale fishing activities-vulnerability warning-the black bar safety net

On Tuesday Adobe released an emergency security update is recommended users and administrators to fix the Flash Player number for the CVE-2 0 1 5-3 1 1 3 0day vulnerability, because the vulnerability is being APT3 hack organizations for use in mass phishing attacks. Vulnerability details If the...

Cash cow Internet cafe management software+chain cafe version are there any files traversal download vulnerability-vulnerability warning-the black bar safety net

From the official website to download the latest version of cash cow Internet cafe management software size: 113M Release: 2 0 1 49 2 0release date: 2014-11-12 and cash cow Internet cafe management software chain Internet cafe Edition size: 121M version: 2 0 1 49 2 0 release date: 2014-11-22 foun...

iPhone vulnerability an SMS makes the phone crash-vulnerability warning-the black bar safety net

iPhone latest vulnerability need only a string of character text message can let the recipient of the phone crash. It is reported that received the SMS on the phone Messages application will crash, eventually cause the phone to reboot. It is reported that the vulnerability exists in most of the i...

Iphone SMS magic: one SMS to make the iPhone crash to restart-vulnerability warning-the black bar safety net

Apple mobileoperating systemappears in a new bug, which can lead to any iPhone to crash and restart. This problem is caused by a simple text message caused. When the Messages received, one particular by character of the string, the iPhone Message app will continue to crash. And if you accept the...

The system allows the upload of the xml file may lead to xss-vulnerability warning-the black bar safety net

the xml file may contain an xml-stylesheet tag is used to specify an xsl file to the xml file format and output. In the xsl output of the process, you can output any html code, including thescriptag。。。。 That you can bomb alert. However, the xml formatted script permissions is relatively small, ma...

ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability-vulnerability warning-the black bar safety net

Recently, ICBC Internet banking assistant and other security controls was traced to the presence of the“disaster-level”vulnerability, the vulnerability can cause remote arbitrary code execution on the user computer, security caused great harm. Baidu security prompts the user as soon as possible o...

The hacker can bypass the validation into a malicious software-vulnerability warning-the black bar safety net

From the last Association is exposure products pre-installed potentially dangerous software last only 3 months, the company again outgoing security. According to security firm IOActive claim that they in the Lenovo System Update software found on the major vulnerabilities, a hacker can bypass the...

Multiple D-Link products HNAP command remote elevation of privilege vulnerability-vulnerability warning-the black bar safety net

Affected system: D-Link Wireless Router Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 7 4 0 5 1 D-link focused on wireless network and Ethernet hardware products design and development. Multiple D-Link products in the HNAP command on the...

Android WiFi Management Component wpa_supplicant presence of high-risk vulnerabilities that can lead to leaked memory information, DoS, denial of service or arbitrary code execution-vulnerability warning-the black bar safety net

Popular WLAN Wireless Network Management Component cwpasupplicant exposed high-risk vulnerabilities CVE-2 0 1 5-1 8 6 3, and can lead to leaked memory information, DoS, denial of service or arbitrary code execution. cwpasupplicant in Android, Linux, BSD, Mac OS X, Windows and some otheroperating...

Magento remote code execution vulnerability analysis report-vulnerability warning-the black bar safety net

Check Point company researchers recently in Magento e-Commerce network platform on which to found a dangerous remote code execution RCE）vulnerabilities, the vulnerabilities could cause the Magento platform on the e-shops of all hackers, including credit card information and some other property an...

From zero to start to learn the Win32 platform buffer overflow（Part1）-bug warning-the black bar safety net

Buffer overflow is a common and we often heard of software security vulnerabilities, buffer overflow, i.e. that the data is too much to write into the memory or buffer, when a buffer within the write data is full, if you continue to write data, the data will overflow into other buffer, it will...