Jingdong response to data breaches rumors: from 2013 Struts 2 security vulnerability-vulnerability warning-the black bar safety net

Yesterday the media reported, saying that suspected jingdong 12 G data was leaked, involving the user name, password, email, QQ number, telephone number, ID card, etc. multiple dimensions of information on this, jingdong represented by the preliminary determination, the data from 2013 Struts 2...

Router high-risk vulnerabilities induced the German telecommunications ultra 90 million users suffered network disruption-vulnerability warning-the black bar safety net

! Event overview Last weekend millions of German Internet users suffered a series of network outages, investigate its reason is a failure of the home routers hijacked. Deutsche Telekom's 2000 million users with 90 million users received the interrupt effect from the last Sunday continues to prese...

Chrome memory the bug be exploited by hackers: Google has yet to fix-vulnerability warning-the black bar safety net

According to foreign media reports, recently the IT security and protection company Sophos announced that the Chrome browser there is a Bug currently has hackers use. Worse, Google two years ago are aware of this Bug, but until today not yet repaired. ! Chrome memory the bug be exploited by...

UCloud-2 0 1 6 1 0-0 0 1: kernel‘Dirty Cow’to mention the right vulnerability Security Alert-vulnerability warning-the black bar safety net

The Linux kernel recently the outbreak of the’Dirty Cow’Vulnerability, CVE-2 0 1 6-5 1 9 5, can lead to a low-rights user to achieve the local extraction rights. Please check you are using the kernel is in the affected range, and timely upgrades. The scope of the impact Linux kernel =2.6.22...

D-Link DWR-932B LTE router found multiple Backdoor-vulnerability warning-the black bar safety net

! If you have a similar to the DWR-9 3 2 B LTE D-Link router, don't wait for it to slow a firmware upgrade, or directly to give it is better. Allegedly the D-Link DWR-9 3 2 B LTE has more than 2 0 at risk, including Backdoor accounts, the default certificate, leakage of certificate, the firmware...

From the CVE-2 0 1 4-9 7 0 7 see the unlink exploit-vulnerability warning-the black bar safety net

Foreword Recently been looking at springs, a brother of the vulnerability war: software vulnerability analysis Essentials, I contact binary the time is not long, but I think this book is particularly good, the main reason is this book in the vulnerability covers the vast majority of Common...

DedeCms use Csrf to create a file with the Execute sql statement getshell process with ideas-vulnerability warning-the black bar safety net

I from spring and autumn author: Szdny 00x01 ver. txt version 2 0 1 6 0 8 1 6 Due to the XAl3r submitted a patch day, so the latest version has been can not reproduce, so I specifically asked him to be a previous version of over to write this article ! Here is the Csrf trigger point, we create a...

Many models were found in the presence of a smartphone connected to vulnerability-vulnerability warning-the black bar safety net

Most of the current on-sale models are equipped with some untold Secret. These prototype software function although it is disabled by default, but the malicious person was able to find it to unlock it. ! As the industry's first comprehensive safety analysis conclusions, NYU Tandon College of...

Cloud Security Series: 360GearTeam again found QEMU multiple vulnerabilities-vulnerability warning-the black bar safety net

! 2 0 1 6 years and 8 months or so, the odd Tiger 3 6 0 to the QEMU official report a number of QEMU vulnerabilities in. They allow an attacker to attack a virtual machine or the host machine itself, causing a denial of service or arbitrary code execution. 360GearTeamoriginal 3 6 0 cloud security...

CNNVD: on the Zabbix vulnerability briefings-vulnerability warning-the black bar safety net

! Recently, on the Internet to disclose about Zabbix, there are two at the based on error echoSQl injectionvulnerabilities CNNVD-2 0 1 6 0 8-3 4 0, the CNNVD-2 0 1 6 0 8-3 4 1. The vulnerability is due to zabbix by default guest permissions to their account and the default password is empty, the...

Jenkins RCE 2(CVE-2 0 1 6-0 7 8 8)analysis and use-vulnerability and early warning-the black bar safety net

Foreign security researchers Moritz Bechler in 2 months found a Jenkins remote command execution vulnerability the vulnerability without having to login you can use, that is, the CVE-2 0 1 6-0 7 8 8 is. The official announcement is such description of this vulnerability: A vulnerability in the...

Hackers still use the old Office vulnerability for cyber-attacks-vulnerabilities-warning-the black bar safety net

! Recently, the Microsoft company said hackers in many network attacks, is still in use with one to 4 years ago, found that the Office software vulnerabilities. Hackers exploit Office software in the presence of this vulnerability, the use of the production of a good document to spread malware...

Vulnerability warning: Struts2 devMode lead to remote code execution vulnerability-vulnerability warning-the black bar safety net

Last month mid Struts2 vulnerability warning was out, this latest remote code execution vulnerability has been non-stop here. But this time, the vulnerability that happens in devMode mode--the previous official has to inform the user, need in the website officially launched prior to the devMode...

BMW connected car storage 2 items could be used by hackers to steal the vehicle-vulnerability warning-the black bar safety net

According to the American automotive news website autoevolution reports, the BMW ConnectedDrive portal there are two“zero-day exploit”that could be used by hackers to control the multimedia device associated with the vehicle settings. ! BMW connected car storage 2 items could be used by hackers t...

cisco wireless kit there is a serious vulnerability, so far no fix-bug warning-the black bar safety net

Cisco recently released a security Advisory to announce the three Cisco wireless packet is subjected to a severe bug effects,but there is still no solution available. SOHO equipment is mainly used in most of the goals between network components,and often in the wild, they often lack the protectiv...

Qualcomm secure execution environment of high-risk vulnerabilities affecting the global six into outstanding device-the vulnerability warning-the black bar safety net

! Qualcomm secure execution environment Qualcomm Secure Execution Environment, QSEE in a key mention of the right to exploit Elevation of Privilege, EOP still affect the world about six into the Android device. While the vulnerability earlier had been a repair. The root of the problem is that...

Cloud computing a core component of QEMU even explosion 1 0 pieces of high-risk vulnerabilities-vulnerability warning-the black bar safety net

Since 5 month so far,as cloud computing is an important underlying component of QEMU has been a continuous burst of 1 0 pieces of high-risk vulnerabilities,from the official website of the vulnerability Description,This 1 0 piece vulnerability, respectively, will cause comprises a“virtual machine...

Docker exposure to 2 3 7 5 port, causing security vulnerabilities-vulnerability warning-the black bar safety net

Today there is a small partner found the docker exposed 2 3 7 5 port, causing a security vulnerability. I now introduce to you the whole thing the ins and outs, and tell little friends, and how to fix this vulnerability. In order to implement Cluster Management, Docker provides a remote managemen...

ImageMagick（CVE-2 0 1 6-3 7 1 4 implementation process, vulnerability analysis, and solution-vulnerability warning-the black bar safety net

! What is ImageMagick ImageMagick is a free to create, edit, composite picture software. It can read, convert, write a variety of formats pictures. Picture cut, color replacement, various effects application, image rotation, composition, text, line, polygon, ellipse, curve, attached to a picture ...

Safety warning: the ImageMagick image processing software there is a remote code execution(CVE-2 0 1 6-3 7 1 4)-vulnerability warning-the black bar safety net

ImageMagick is a popular image processing software, there are numerous Web sites use it for image processing, but in the present on Tuesday, ImageMagick disclose a serious 0day vulnerability, and this vulnerability allows an attacker to upload a malicious configuration of the image file on the...

Pass to kill the Windows of Badlock? The How to repair? - Vulnerability warning-the black bar safety net

Badlock Bug Badlock Bug description 2 0 1 6 years 4 on 1 on 2, Windows and Samba revealed a very critical security vulnerabilities. Samba 4.4.2, and 4.3.8 and 4.2.11 security updates are available. Please update your system. We are very determined hackers will soon use this vulnerability to attac...

Through the mouse scroll wheel to move the data to obtain the Tor browser anonymous user fingerprint-vulnerability warning-the black bar safety net

Through the Internet The Secret ability to communicate for different political molecules and radicals is very important. Then again, almost everyone will care about on the network, privacy issues. Although the Tor network itself provides the user with a high privacy level, so most people are almo...

PHP DOS vulnerability new: CVE-2 0 1 5-4 0 2 4 Reviewed-vulnerability warning-the black bar safety net

0x01 bypassing the WAF principle According to the PHP DOS vulnerability principle, in multipartbufferheaders function parses the header of the corresponding value, the value value exists in the n rows. Each line of the string with whitespace at the beginning or does not exist. character':'are...

Security researchers have found that Instagram vulnerability by the FaceBook executives, the threat-vulnerability warning-the black bar safety net

! An independent security researcher claimed that he had discovered Instagram in a series of security vulnerabilities and configuration flaws, by using these loopholes, he managed to get access stored on the Instagram servers sensitive data on the permissions; in him, to the relevant vendor...

JBOSS found Java deserialization remote command execution vulnerability-vulnerability warning-the black bar safety net

Recently, many articles on the jboss java deserialization vulnerability the article vibe in the network. So in the end is not as long as with jboss will the existence of this vulnerability? And this vulnerability in the end how much? What is deserialization vulnerability? In fact, the java...

muymacho---dyld_root_path exploit analysis-exploit warning-the black bar safety net

from: muymachois a vulnerability in the use of tools. Exists in Mac OS X 10.10.5dyldthe bug can be used to extract right to the root. In the latest chief stone of EI Capitan 10.11 in has been patched. This is an interesting bug, the use of the process is also a lot of fun. The present article aim...

Juniper ScreenOS denial of service vulnerability-vulnerability warning-the black bar safety net

Affected system: Juniper Networks ScreenOS 〈 6.3. 0r18-dnc1 Juniper Networks ScreenOS 〈 6.3. 0r13-dnd1 Juniper Networks ScreenOS 6.3. 0r19 Description: -------------------------------------------------------------------------------- CVECAN ID: CVE-2 0 1 5-7 7 5 0 Juniper Networks is a network...

Google AdMob filter vulnerabilities, malicious ads sneak into the application-vulnerability warning-the black bar safety net

! There are Android app developers complained, because the official advertising network poorly regulated, resulting in this pollution-free Android application infected with malicious ads. Android app strange is implanted in the third-party advertising From Sydney, two bus the Android app Arrivo a...

The depth of investigation of CVE-2 0 1 5-5 4 7 7&CloudFlare Virtual DNS how to protect their users-vulnerability warning-the black bar safety net

Last week, the ISC released a patch that fixes the BIND9 DNS server in a remote exploit the vulnerability. This exploit will cause the server during the processing of a data packet when the occurrence of a crash. ! The announcement pointed out, the server in the processing TKEY the type of the...

HackPwn: nine Yang smart soymilk crack the details of the analysis-vulnerability warning-the black bar safety net

Nine male DJ08B-D667SG soymilk is a smart milk machine, you can configure the WIFI connection to the Internet, the user can through the“nine Yang cloud appliances”mobile app for soymilk for remote control, remote turn on, turn off the milk machine and other functions. While in 2 0 1 5 HackPwn,...

Security researcher exposure FireEye core product 0day vulnerabilities-vulnerability warning-the black bar safety net

Recently, researchers Kristian Erik Hermansen from the FireEye core product found a 0day vulnerability will result in unauthorized file disclosure. He also provides a short trigger vulnerability of the examples and the user database file copy. In addition, he also disclosed selling three other...

EMC Atmos XML external entity injection Vulnerability(CVE-2 0 1 5-4 5 3 8)-vulnerability warning-the black bar safety net

Affected system: EMC Atmos = 2.3.0 Description: CVECAN ID: CVE-2 0 1 5-4 5 3 8 EMC Atmos is used to store, archive and access massive unstructured data platform. EMC Atmos 2.3.0 and earlier versions of the XML parser there is XXE injection vulnerability, allows an attacker unauthorized access to...

A null pointer vulnerability Protection Technology-primary-vulnerability warning-the black bar safety net

Safety history due to a null pointer brought the vulnerability and attacks are numerous, but because of its use of the programming skills required for analysis and protective to have higher requirements, so the domestic to the null pointer vulnerability and a discussion of the related art is not...

Technology uncovered“QQ space”to automatically forward adverse information-vulnerability warning-the black bar safety net

We often see the QQ space to automatically forward some of the included links to bad information, even if we QQ password has not been stolen. The recent adoption of a QQ space automatically forwarding the link for analysis, found that the automatic forwarding mechanism through the use of the...

A serious Wordpress 0 day exploit reverse engineering analysis-vulnerability warning-the black bar safety net

In just the past weekend,I got from my modsecurity logs found an interesting warning,logging a submit to my Wordpress site with one network request. Although this request did not succeed,but I decided to be an in-depth study,and trying to figure out this request information in the end is what,it...

Android System Google Admin app exposed 0day vulnerabilities, can bypass the sandbox-vulnerability warning-the black bar safety net

MWR Labs researchers discovered a 0day vulnerability exists in the Android system of the Google Admin app to handle some URL in the way that, by the vulnerability the attacker can bypass the Android sandbox mechanism. The vulnerability principle For the Google Android security team, this month is...

Model S has a security vulnerability? Tesla Fury dig Google head of security-vulnerability warning-the black bar safety net

Earlier today broke the Tesla Model S model electric car, there may be hackers exploit major security vulnerability through this vulnerability hackers can remotely control cars, and even let the car flameout, the media reported this message and of the electric car's safety questioned. Tesla in...

PHPCMS user login SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

0x00 description Before manning in the vulnerability of the time, suddenly found a normal landing does not go up, then help with the next phpcms login process. After feeling this process looks like some of the questions, carefully looked under, did not think really a 0day 0x01 vulnerability...

Adobe released official patch: fix Hacking Team leaked Flash 0day vulnerability-vulnerability warning-the black bar safety net

Adobe today released Flash Player update patches for the repair of Hacking Team to steal the 400G data is found in the 0day vulnerability. An attacker can use this vulnerability to make the target machine the system crashes and Access Control permissions. Vulnerability This 0day vulnerability by...

The phone did not leave the body but by hacking the lock to blackmail you don't understand the Apple“security vulnerability”-vulnerability warning-the black bar safety net

Yesterday reported that Mr. Xu transfer of second-hand Apple phone, the A 9 0 after the guy borrowed test machine of two-time with a cloud account bound, Mr. Xu phone, and extortion 3 0 0 Yuan unlocking fee. Smartphones bring to our lives a lot of convenience and even lifestyle changes. However,...

Tai Chi jailbreak major security Backdoor-vulnerability warning-the black bar safety net

Tai Chi jailbreak iOS8. 1. 3-8. 4 contains a major security back door, escape after causing any the APP can extract right to the Root, thereby affecting the user data safe. For example to obtain Root permission after full control of system files, and even further to install Trojans and other...

The hacker group APT3 use of the Flash 0day vulnerability to launch large-scale fishing activities-vulnerability warning-the black bar safety net

On Tuesday Adobe released an emergency security update is recommended users and administrators to fix the Flash Player number for the CVE-2 0 1 5-3 1 1 3 0day vulnerability, because the vulnerability is being APT3 hack organizations for use in mass phishing attacks. Vulnerability details If the...

Cash cow Internet cafe management software+chain cafe version are there any files traversal download vulnerability-vulnerability warning-the black bar safety net

From the official website to download the latest version of cash cow Internet cafe management software size: 113M Release: 2 0 1 49 2 0release date: 2014-11-12 and cash cow Internet cafe management software chain Internet cafe Edition size: 121M version: 2 0 1 49 2 0 release date: 2014-11-22 foun...

PHP aeration DOS vulnerability may cause the CPU to fill involving multiple PHP versions-vulnerability warning-the black bar safety net

Recently, PHP is broke there is a remote DOS vulnerability, if the hackers use the vulnerability to construct the PoC to initiate a connection, easily lead to the target host CPU is rapidly consumed. This vulnerability relates to many PHP versions, and thus affect the range greatly. Vulnerability...

The system allows the upload of the xml file may lead to xss-vulnerability warning-the black bar safety net

the xml file may contain an xml-stylesheet tag is used to specify an xsl file to the xml file format and output. In the xsl output of the process, you can output any html code, including thescriptag。。。。 That you can bomb alert. However, the xml formatted script permissions is relatively small, ma...

SAP encryption algorithm vulnerability can lead to remote code execution or denial of service-vulnerability warning-the black bar safety net

Now, there is a widely used Protocol appeared unexpected vulnerability, SAP encryption algorithm of the data compression software can lead to remote code execution vulnerability and denial of service vulnerabilities. These problems arise because the SAP encryption algorithm of coding uses a popul...

The hacker can bypass the validation into a malicious software-vulnerability warning-the black bar safety net

From the last Association is exposure products pre-installed potentially dangerous software last only 3 months, the company again outgoing security. According to security firm IOActive claim that they in the Lenovo System Update software found on the major vulnerabilities, a hacker can bypass the...

Multiple D-Link products HNAP command remote elevation of privilege vulnerability-vulnerability warning-the black bar safety net

Affected system: D-Link Wireless Router Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 7 4 0 5 1 D-link focused on wireless network and Ethernet hardware products design and development. Multiple D-Link products in the HNAP command on the...

Android WiFi Management Component wpa_supplicant presence of high-risk vulnerabilities that can lead to leaked memory information, DoS, denial of service or arbitrary code execution-vulnerability warning-the black bar safety net

Popular WLAN Wireless Network Management Component cwpasupplicant exposed high-risk vulnerabilities CVE-2 0 1 5-1 8 6 3, and can lead to leaked memory information, DoS, denial of service or arbitrary code execution. cwpasupplicant in Android, Linux, BSD, Mac OS X, Windows and some otheroperating...

Magento remote code execution vulnerability analysis report-vulnerability warning-the black bar safety net

Check Point company researchers recently in Magento e-Commerce network platform on which to found a dangerous remote code execution RCE）vulnerabilities, the vulnerabilities could cause the Magento platform on the e-shops of all hackers, including credit card information and some other property an...