superfish vulnerability

This blog post summarizes "Microsoft Security Bulletin 979352-ie 0-day vulnerability risk assessment. For more information or materials, see the bottom-most references in this blog. In the next few days, I will spend some time writing an article about DepArticlePlease wait. Next, let's take a look. Translated from this articleMicrosoft Security Response CenterBlog Post"Further insight into Security Advisory 979352 and the threat landscape" He

0x00 Index Description 6.30 share in owasp, a vulnerability detection model for business security. Further extension of the popular science.0X01 Identity Authentication Security 1 Brute force hackWhere there is no verification code limit or where a verification code can be used multiple times, use a known user to brute force the password or use a generic password to brute force the user. Simple verification Code blasting. url:http://zone.w

Dan Kaminsky appeared in this year's Black Hat conference. He just ended a demonstration meeting with a audience of 1000 people yesterday. In the past 10 years, he made 9th speeches at the Black Hat conference. Dan, 29-year-old self-called a DNS expert, discovered a serious vulnerability in the DNS system earlier today. To prevent the Internet from being hit hard, he has been reluctant to disclose the details of the

Understanding of the Bash environment variable Parsing Vulnerability 1. What are environment variables?Both Windows and Linux programs support environment variables. Generally, environment variables are stored at the beginning of the process memory space as value strings. When you execute a program, you can specify the environment variables to pass information to the program to be executed. On a Windows platform dominated by GUI, generally, users seld

Reverse Shell and Windows multimedia center Remote Execution Vulnerability (CVE-2015-2509) exploits In this article, we will briefly introduce reverse shell and Windows Media Center (CVE-2015-2509) vulnerabilities, and finally detail the methods of this vulnerability.0 × 01 reverse shellThe so-called shell is no stranger to everyone. It is nothing more than a command line interface. If it is classified by p

PfSense XSS vulnerability analysis PfSense is an open-source network firewall software based on FreeBSD operating system. It has been widely used by companies around the world to protect its infrastructure.Last year, we found some security vulnerabilities in PfSense (reported by the red/Black Alliance) and submitted them to the PfSense security team. So far, more than a year has passed. This time is enough for companies and individuals who use PfSense

EMail: rayh4c # 80sec.com Site: www.80sec.com Date: 2011-10-13 0 × 00 Preface As we all know, the risk definitions of XSS vulnerabilities have been vague, and cross-site scripting (XSS) vulnerabilities are both high-risk and low-risk vulnerabilities that have been controversial for a long time. There are two types of XSS vulnerabilities: persistent and non-persistent: 1. The non-persistent XSS vulnerability is generally found in URL parameters. You ne

Just as we entered the 2006, there was a serious flaw in the Windows system, the Microsoft Windows Graphics Rendering engine WMF format Code Vulnerability (MS0601). This vulnerability appears in Windows Graphics Rendering engine, hackers can construct malicious WMF files, luring other users to open, when the system does not update the WMF patch, the hacker will execute the first set of malicious code, to ob

Recently, the researchers found a GRUB2 vulnerability, version 1.98 (released in 2009) to 2.02 (released in 2015) are affected. This vulnerability allows local users to bypass any form of authentication (plaintext password or hashed password), allowing an attacker to gain control of the computer. Most Linux systems use GRUB2 as the boot loader, including some embedded systems. As a result, there will be cou

* This article is from a blog by an American information security researcher and consultant, translated by IDF volunteer Zhao Yang and proofread chapter. When I had to deal with the buffer overflow vulnerability for the first time, I had nothing to know! Although I can build a network and configure a firewall and a proxy server, it is easy to use intrusion detection systems, but for the code, I was the first to come into use. However, just like dealin

For the first poor translation, I would like to thank google translation and youdao Dictionary (word translation ), this vulnerability is triggered because when the CPL icon is loaded using a specially constructed shortcut, the dll file will be loaded directly through the "LoadLibraryW" function (originally, the file resources were only intended to be loaded but not judged ). whether the dll file is a special CPL file, as a result, malicious dll files