7620 matches found
Apache is exposure suspected mod_status module of 0day-vulnerability warning-the black bar safety net
A summary of the instructions: ! On Twitter there are security personnel @crowdshield found 2 0 1 6 years 1 months 1 days later, on the Internet there are a large number of hosts to be scanned, and brought into a strange scanning features, suspected an Apache modstatus module 0day: "GET...
Joomla deserialization vulnerability is the leak filled-vulnerability warning-the black bar safety net
2 0 1 5 year 1 2 on 1 5, the domestic security vendors are from abroad on the site attention to an article on Joomla remote code execution vulnerability content, the original can be seen here. After the opening round of the vulnerability analysis of the war, than faster, than the quasi, than the...
Rips Scanners（0.5）aeration a local file inclusion vulnerability-vulnerability warning-the black bar safety net
RIPS is a php source code analysis tool, which uses static analysis technology to automate the mining of the PHP source code for potential security vulnerabilities. Penetration testers can directly easily review the results of the analysis, without review of the entire program code. Since static...
SearchBlox denial of service vulnerability, CVE-2 0 1 5-7 9 1 9-a vulnerability warning-the black bar safety net
Affected system: SearchBlox SearchBlox 8.3 Description: CVECAN ID: CVE-2 0 1 5-7 9 1 9 SearchBlox is a Web-based property search engine. SearchBlox 8.3-8.3.1 version there is a file leakage vulnerabilities, without administrator privileges, the attacker can cause the profile override configuratio...
Sqlmap code execution vulnerability report-vulnerability warning-the black bar safety net
Author: Nixawk know Chong Yu 4 0 4 Security lab Date: 2015-12-09 A vulnerability overview In 2 0 1 5 years 0 1 months 2 7 day, I read in the latest version of Sqlmap code, found its existing code enforcement issues. Security by python's pickle cause. pickle module implements a basic but powerful...
VTech Tablet: a plurality of data breach risks hidden-vulnerability warning-the black bar safety net
! In a recent VTech data leak after the event, everyone might think that VTech electronic toy safety won't be better than now worse. However, in this case, we found two vulnerabilities, a hacker can be from the children of their innotab tablet in grabbing data. Brush mode to steal data For lost,...
Node.js facing two important security vulnerabilities, plans next week to repair-vulnerability warning-the black bar safety net
Node.js the Foundation disclosed a denial of service and a bounds access vulnerabilities, plan next week to provide a patch upgrade fixes two critical vulnerabilities. Node.js Foundation today released the announcement, the most popular server-side JavaScript platform contains "a high-strength...
Cisco AsyncOS denial of service vulnerability(CVE-2 0 1 5-6 2 9 1)-vulnerability warning-the black bar safety net
CVECAN ID: CVE-2 0 1 5-6 2 9 1 The Cisco AsyncOS operating system is you can upgrade the Cisco email security appliance security and performance. ESA equipment, the Cisco AsyncOS 8.5.7-0 4 3 prior to version 9. x-9.1.1-0 2 3, 9.5. x, 9.6. x-9.6.0-0 4 6 version, the message filter configuration of...
Well-known Forum app for vBulletin 5 exposure remote command execution vulnerability that may have leaked millions of user data-bug warning-the black bar safety net
! On Monday, it is reported that vBulletin developer site suffered a hacker attack and compromised nearly 4 8 million the vBulletin user's sensitive information. In the event a hacker after the attack, the vBulletin official emergency mandatory require the user to reset the password, they warn th...
Android vulnerability detection kit-vulnerability warning-the black bar safety net
Android Vulnerability Test Suite Android vulnerability detection kit, to encourage the open to collect data, help communities work together to maintain Android security. NowSecure has brought an App to check your Android device in the presence of vulnerabilities. ! Overview This tool is meant to ...
Security researcher exposure FireEye core product 0day vulnerabilities-vulnerability warning-the black bar safety net
Recently, researchers Kristian Erik Hermansen from the FireEye core product found a 0day vulnerability will result in unauthorized file disclosure. He also provides a short trigger vulnerability of the examples and the user database file copy. In addition, he also disclosed selling three other...
Hacked the Mozilla Bug Tracking System Library use undisclosed vulnerabilities to attack users-vulnerability warning-the black bar safety net
Hacks from the Mozilla Bug Tracking System Bugzilla successfully steal sensitive vulnerability information, and the use of undisclosed vulnerabilities to attack Firefox users. 1 8 5 not disclosed vulnerability is accessed Mozilla company in the official blog post on the hacking case, and pointed...
A serious Wordpress 0 day exploit reverse engineering analysis-vulnerability warning-the black bar safety net
In just the past weekend,I got from my modsecurity logs found an interesting warning,logging a submit to my Wordpress site with one network request. Although this request did not succeed,but I decided to be an in-depth study,and trying to figure out this request information in the end is what,it...
Defense CVE-2 0 1 5-1 7 6 9 vulnerability through a malicious USB device to use this logic vulnerability-vulnerability warning-the black bar safety net
Vulnerability description Yesterday,Microsoft released an update BulletinMS15-0 8 5,and in the Bulletin represents the CVE-2 0 1 5-1 7 6 9 vulnerabilities have been fixed. CVE-2 0 1 5-1 7 6 9 vulnerability is one that exists in the Mount Manager component among the serious security problems. It...
BIOS vulnerability DELL and Apple systems-vulnerability warning-the black bar safety net
! Since the BIOS from sleep mode after Wake-Up due to failure to correctly set write-protected, the attacker may be brush malicious BIOS image, the vulnerability number CVE-2 0 1 5-2 8 9 0, the impact of a large number of DELL systems. Vulnerability details According to the researchers Cornwell,...
An unexpected 0day journey-vulnerability warning-the black bar safety net
Do not know everybody noticed no, after Baidu Cloud Security X-TEAM-authored articles in the technical analysis: on the Android libStagefright series vulnerability analysis, in fact, implies a natural and egg 0day the. This“0day”, the kind we in the construction of the sample of the byproduct...
The Apple APP Store and the iTunes Store exposed high-risk vulnerabilities-vulnerability warning-the black bar safety net
The official Apple App Store and iTunes Store found in a high-risk vulnerability, affecting millions of Apple users. Vulnerability Labs Vulnerability-Lab founder and security researcher Benjamin Kunz Mejri in the Apple App Store shopping list module found in an application-side input validation w...
MS15-0 6 8-Windows Hyper-V remote code execution vulnerability-vulnerability warning-the black bar safety net
! /Article/UploadPic/2015-7/2 0 1 5 7 1 9 1 6 1 4 3 8 1 2 3. png Overview Microsoft THE the release of the security update patches related to Windows operating system vulnerabilities, if in a station by Hyper－V technology to create the virtual machine, there is a proven and there are special...
MetInfo5. 3 the latest version of SQL injection(you can access part of the data)-vulnerability warning-the black bar safety net
MetInfo5. 3 the latest version SQL injection search.php: $module=intval$module; if$class1$module=0; ifintval$module $serchsql.=" where lang='$lang' and recycle='0' or recycle='-1' and displaytype='1' "; else $class1info=$classlist$class1; if!$ class1infookinfo'../',$pagelangnoid; $class1sql="...
Alipay 9. 0 reset password function is defective, you can easily modify any user's password-vulnerability warning-the black bar safety net
As is well known, in the PayPal new upgrade of 9. 0 version cancel a user gesture password settings, the transition to“Big Data, risk control”protection. If the users phone does not have fingerprint unlock function, then on their mobile phones PayPal account can be directly accessed. !...
Hacking Team data discovered the second gold Flash 0day vulnerability-vulnerability warning-the black bar safety net
! Hacking Team is an Italian company specializing in surveillance technology hacking team and the company, was due to the government and intelligence agencies, the sale of spyware and be sued. Karma the final cycle, the company last week was the hack attack, leaked nearly 400GB of data, which in...
Hacking Team Flash New 0Day exploit code analysis-vulnerability warning-the black bar safety net
The weekend early in the morning, you see the know Chong Yu on the microblogging said, the Hacking Team and leaked to the new Flash 0Day in the current measured. Thus the author download a copy of the exploit code, tested indeed in the latest version available, currently the official Adobe did no...
MiTo Xiu Xiu, the gReader, the Foxit PDF reader in the column: 1 4, of Android apps vulnerable to MiTM attacks-vulnerability warning-the black bar safety net
! AppBugs company researchers through the analysis found that there are 1 4 Total Total Download amount up to 8 million times the popular APP in processing social account login when there is a security risk, vulnerable to MiTM hijacking（MITM attack is. Problem application list MeituPic MiTo Xiu...
A large number of Cisco security devices was traced to the presence of a default SSH key-vulnerability warning-the black bar safety net
! Cisco revealed that a large number of Cisco security devices was traced to the presence of a default SSH key, an attacker can use this vulnerability to control the device. The scope of the impact Cisco's security experts found that a lot of Cisco security devices in the presence of a default SS...
Google“zero project”hackers released a serious vulnerability to get all the Windows-vulnerability warning-the black bar safety net
Google“zero project”hack Mateusz Jurczyk（@j00ru）one-time release the 1 5 remote code execution vulnerabilities, which contains a serious vulnerability affecting almost all of the Adobe Reader and the Windows version and will defeat all the defense measures. Jurczyk in the month, held at Recon...
Baidu, Alibaba, Tencent in the column: a“watering hole attack”using JSONP hijacking tracking user-vulnerability warning-the black bar safety net
Can you imagine if an authoritarian state to get a way to obtain user privacy information of the tool, and this tool can obtain the user in a specific site on the real name, email address, gender, birthday and phone number, etc., that would be what kind of scene? You can also imagine that an...
From the client game bug looking of security risks-vulnerability warning-the black bar safety net
Although the now app development a growing trend in web applications, large-scale software also makes extensive use of the existing framework with the existing frameworks and engines improve, the vast majority of security issues have been resolved. But encountered some customization needs,...
PHP aeration DOS vulnerability may cause the CPU to fill involving multiple PHP versions-vulnerability warning-the black bar safety net
Recently, PHP is broke there is a remote DOS vulnerability, if the hackers use the vulnerability to construct the PoC to initiate a connection, easily lead to the target host CPU is rapidly consumed. This vulnerability relates to many PHP versions, and thus affect the range greatly. Vulnerability...
VMS users please note:Venom vulnerability than Heartbleed also risk-vulnerability warning-the black bar safety net
Data centers are mostly using the host system management program host hypervisior to isolate a single server to run multiple virtual machine instances, but this is the underlying structure, it is found that the presence of the 1 0 years of“virtual environments neglected of business operation”in t...
Google then exposed Microsoft Windows 8.1 did not fix the vulnerability-vulnerability warning-the black bar safety net
Recently Microsoft's Windows business head Terry Myerson criticized Google Android poor security, today Google once again exposed the Windows 8.1 did not fix the vulnerability, this means that, In be fix before the vulnerability could be exploited by hackers to. According to the description, the...
WordPress < 4.1.2 version there is XSS vulnerability, an attacker can exploit to obtain site permissions-bug warning-the black bar safety net
tldr; mysql → special characters → truncation → input validation → output sanitisation → xss → time to update WordPress. Mysql truncate Mysql utf8 character set only support up to 3-byte characters, if you insert a 4-byte characters, the default configuration of mysql will truncate the character...
Microsoft patch day 2015-4-14: the repair of many high-risk IE, Windows, Office vulnerabilities-vulnerability warning-the black bar safety net
Monthly the second Tuesday, Microsoft fixed the patch to fix the day, Microsoft on Tuesday（2015-4-14 the“patch day”on repairing a large number of vulnerabilities, which includes many IE, Windows, Office, high-risk vulnerabilities. Update announcement MS15-0 3 4 announcement MS15-0 3 4 announcemen...
WP Super Cache <=1.4.2 stored XSS vulnerability analysis-vulnerability warning-the black bar safety net
Foreword Just not expectations, HEE HEE busy busy, North-South without a home, steps from Recalling the beginning of the Arcana, coincided with the addict for heat mapping it. Then he moment, like at this very moment, beloved more than the autumn wood, the trees and grass love return home, rememb...
Watch the video to understand Web application security vulnerabilities TOP 10 IBM internal Video-the vulnerability warning-the black bar safety net
! Accompanied by more and more application development, Web also seems to carry more features, such as the Google Office Suite, Google Docs, a calculator, e-mail, storage space, maps, weather and news, etc... And all this is based on meeting our life's daily needs. Now, we The phone if you can no...
Not found the rear door: open source encryption software TrueCrypt security audit-vulnerability warning-the black bar safety net
TrueCrypt is a popular open source file encryption software, which the user includes a large number of“sensitive persons”, such as businessmen, politicians, journalists, and therefore its safety has been well received by the attention. 2 0 1 4 年 5 months, the open source encryption software...
Format string vulnerability lab-vulnerability warning-the black bar safety net
A, experimental description Format string vulnerability is by like printfuserinputof such code is caused, where userinput is the user input data, having a Set-UID root privileges of such programs at run time, the printf statement will become very dangerous, because it may lead to the following...
Small ants camera commands to perform the patch bypass-vulnerability warning-the black bar safety net
The thing is, last week on the microblogging onlookers a safe laboratory and a factory camera in the tear forced war, saw the publication of an old version vulnerability suddenly shocked Ah, so you want to look at the people in the hands clutching that vulnerability is going around to ask for hel...
Adobe cve-2 0 1 1-2 4 6 1 vulnerability can still be exploited-vulnerability warning-the black bar safety net
A There have been four years of Adobe Flash patch did not correctly resolve the Flex application vulnerable issue, and the attacker still can exploit this vulnerability. Reportedly, this vulnerability affects the world Alexa rank of the top ten most popular sites in the 3 0 percent. Linkedln...
BlackBerry the company's multiple products by FREAK vulnerability-vulnerability warning-the black bar safety net
The BlackBerry company recently issued a notice, saying that its multiple product lines by the FREAK SSL vulnerability, including multiple versions of the BlackBerryoperating system, Enterprise Server and the BlackBerry communication tools. It is worth mentioning that BlackBerry is the initiative...
Security vulnerability is the essence of myth of the battle to compile code-bug warning-the black bar safety net
0x00 Preface Currently more popular but also more efficient mining of vulnerabilities is Fuzzing, of course, this also needs to take the time to write Fuzzing programs. However, not every things are necessary to write Fuzzing programs,not every thing can go to Fuzzing, so still have to continue t...
Popular Wordpress Analytics plugins-WP-Slimstat weak key and the sql injection vulnerability analysis-vulnerability warning-the black bar safety net
! /Article/UploadPic/2015-2/2 0 1 5 2 2 6 1 1 4 2 5 0 6 4 5. png Web Security enterprise Sucuri Tuesday in a blog post said that they in the latest version of Wordpress Analytics plugins-WP-Slimstat found in asql injectionvulnerabilities, exploit the vulnerability, an attacker can perform sql bli...
Linux Glibc library critical security vulnerabilities and repair method-vulnerability warning-the black bar safety net
By Linux, the GNU glibc standard library gethostbyname function of the burst buffer overflow vulnerability, vulnerability number CVE-2 0 1 5-0 2 3 5 to. A hacker can through gethostbyname functions to achieve remote code execution, access to the server control and Shell access, and this...
Knight talent system 7 ultra vires+2 at sql-vulnerability warning-the black bar safety net
wapuser.php: About the ultra vires is no uid involved, cause any modifications to the database any records First place: code area elseif$act == "resumeworkdel" //Override $smarty-cache = false; $id=intval$GET'workid'; $sql="delete from ". table"resumework"." where id=$id"; if$db-query$sql exit"ok...
Knight talent system 2. override the+1 at the sql injection access to sensitive information-vulnerability warning-the black bar safety net
Here I do not do code analysis, looking directly at me operation The first step, we first register a normal business user The second step, we modify enterprise user information ! Company name',jobsname=user -- sdd Then we access the url: POST /74cmsv3. 5...
The Hang Seng JRES platform registration vulnerability, you can hack the registry-the vulnerability warning-the black bar safety net
! plugin.jpg The eclipse-jres\plugins\com. hundsun. ares. studio. jres. register1. 1. 0. 2 0 1 2 0 8 2 9 1 4 0 8. jar to decompile,according to the com\hundsun\ares\studio\jres\register\RegisterUtil. the java file can get the registration file of the encryption way and key. The eclipse-jres\keys...
Malicious software new play: hidden in the Pastebin on the backdoor-vulnerability warning-the black bar safety net
Quickly share text, code, website, Pastebin often used by hackers are used to share their libraries, stolen data and other code, and now it really is for hackers. Recently security researchers actually found hackers is via Gmail drafts, Evernote and other platforms to control the botnet. Security...
An open source CMS to bypass the filtering XSS comfortably+getshell（viagra, the Shaolin Temple official website of the shots-the vulnerability warning-the black bar safety net
Brief description: I haven't at the front Desk too.。。。。 Powered by YIQICMS “Baidu for you to find relevant results about 1 7 2 0 0” Viagra official website shot Detailed description: The latest version 1. 8, The 首先 关注 /comment.php: code area if$action == "save" $msgtitle = $POST"msgtitle"; $msgna...
A message on the crash: in India researchers found that the American version wechat WhatsApp vulnerability-vulnerability warning-the black bar safety net
! Two years only 1 of the 7-year-old Indian security researcher found that the popular application WhatsApp in the presence of the vulnerability, the attacker can send the victim to send a specific message so that the other application crashes. WhatsApp is a popular instant messaging mobile APP,...
Struts2 vulnerability analysis and research S2-0 0 5 vulnerability analysis-vulnerability warning-the black bar safety net
1, Overview S2-0 0 5 is due to the official patch S2-0 0 3 not fully lead to bypass the patch caused. We all know that access Ognl context object must use thesymbol, S2-0 0 3Number for the filter, but does not take into account the unicode encoding, resulting in\u0023 or 8-ary\4 3 bypass. S2-0 0 ...
PHP Session serialization and deserialization processor settings improper use to bring security risks-vulnerability warning-the black bar safety net
PHP Session serialization and deserialization processor PHP has built-in a variety of processors for accessing the $SESSION data when the data is serialized and deserialized, the commonly used are the following three kinds, corresponding to three different processing formats: | Processor |...