bash 首页 分类阅读 文库 专栏 公开课 商城 漏洞盒子 注册 | 登录 投稿 Bash远程解析命令执行漏洞测试方法 wivndf2014-09-26+10共621815人围观 ，发现 22 个不明物体WEB安全漏洞 从昨天开始，这个从澳大利亚远渡重洋而来的BASH远程命令执行漏洞就沸腾了整个FreeBuf，大家都在谈论，“互联网的心脏又出血了”，可是，亲，到底怎么对网站进行测试？下面这段脚本 $ env x=‘() { :;}; echo vulnerable' bash -c "echo…
中国x黑客小组 首页 分类阅读 文库 专栏 公开课 商城 漏洞盒子 注册 | 登录 投稿 7x24 快讯 Asterisk通讯框架修复3个严重DoS漏洞 23小时前 VMware修复Workstation的提权与DoS漏洞 23小时前 欧洲刑警组织逮捕27人，这些人在欧洲多国进行ATM“黑盒”攻击 23小时前 卡巴斯基：WannaCry感染最多的操作系统是Windows 7，而XP几乎可忽略不计 24小时前 Netgear路由器新固件会收集用户数据？好在可以关闭 24小时前 HTTPS钓鱼站点越来越多 2天前 纽约…
goagent翻墙教程 首页 分类阅读 文库 专栏 公开课 商城 漏洞盒子 注册 | 登录 投稿 让GoAgent通过IPV6科学上网 Tiank2015-08-17+12共632650人围观 ，发现 50 个不明物体其他 闲来无事，想去外面看看，于是打开久违的Goagent，然而祖国山河一片黄，想不到我跟大家的距离已经这么远了！不过既然有距离，我们就要慢慢接近不是，哈哈。好了，废话不多说，我们开始教程吧。 关于Goagent详细配置的教程，烦请大家百度（传送门） 由于担心自己所使用的Goagent客户端过时了，所…
truecrypt使用方法 首页 分类阅读 文库 专栏 公开课 商城 漏洞盒子 注册 | 登录 投稿 未发现后门：开源加密软件TrueCrypt安全审计结束 Sphinx2015-04-06+4共121367人围观 ，发现 8 个不明物体资讯 TrueCrypt是一款流行的开源文件加密软件，该软件用户包括大量的“敏感人士”（如商人、政要、记者），因此其安全性一直广受关注。 2014年5月，开源加密软件TrueCrypt突然在其官网上警告Windows用户改用微软的BitLocker加密磁盘，并用大红字警告使用Tru…
CVE
CVE-2017-6654 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (cisco-sa-20170517-ucm)
漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interf…
CVE
CVE-2017-6650 Cisco Nexus 5000 Series Switches Telnet CLI Command Injection Vulnerability (cisco-sa-20170517-nss1)
漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the Telnet CLI command of Cisco NX-OS System Software running on Cisco Nexus 5000 Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insuffici…
CVE
CVE-2017-6649 Cisco Nexus 5000 Series Switches CLI Command Injection Vulnerability (cisco-sa-20170517-nss)
漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the CLI of Cisco NX-OS System Software running on Cisco Nexus 5000 Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input valid…
漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. 漏洞危害 If a user or automated system using JasPer were tricked into opening a specially crafted image, an attacker could exploit this to cause a den…
漏洞类别：RedHat 漏洞等级： 漏洞信息 The libtirpc packages contain SunLib's implementation of transport-independent remote procedure call (TI-RPC) documentation, which includes a library required by programs in the nfs-utils and rpcbind packages. It was found that due to th…
漏洞类别：RedHat 漏洞等级： 漏洞信息 The rpcbind utility is a server that converts Remote Procedure Call (RPC) program numbers into universal addresses. It was found that due to the way rpcbind uses libtirpc (libntirpc), a memory leak can occur when parsing specially crafte…
漏洞类别：CGI 漏洞等级： 漏洞信息 Tenable virtual appliances deliver power, deployment speed and all around ease of use by virtually eliminating installation, configuration and maintenance problems. The Tenable Appliance contain several vulnerabilities. One exists in the un…
漏洞类别：CGI 漏洞等级： 漏洞信息 Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service (JMS) client. The vulnerability exists because the Apache ActiveMQ client failed to impose sufficient security restrictions on a remo…
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for the linux kernel to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 漏洞危害 This …
漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for git to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP2 SUSE L…
漏洞类别：Web Application 漏洞等级： 漏洞信息 The web application uses http client library for making server-side HTTP requests. The http library used is vulnerable to httpoxy attack. The library uses environment variable "HTTP_PROXY" to configure an outgoing proxy. As spec…
漏洞类别：Web Application 漏洞等级： 漏洞信息 Path traversal vulnerability potentially allows an attacker to access restricted files on a web server, outside of the web server root directory, due to improper access control on the web server's resources. 漏洞危害 This vulnerabil…
漏洞类别：Web Application 漏洞等级： 漏洞信息 Apache Axis2 is a Web Services/SOAP/WSDL engine. The instance of Axis2 on the target allows administrative access with default credentials of username "admin" and password as "axis2". 漏洞危害 A remote attacker could exploit this to…
漏洞类别：Backdoors and trojan horses 漏洞等级： 漏洞信息 EternalRocks is a worm that is reportedly spreading by exploiting a flaw in the SMB protocol. The spreading mechanism is designed on the ETERNALBLUE, ETERNALCHAMPION, ETERNALROMANCE and ETERNALSYNERGY exploits that w…