CLUB.VFOCUS.NET

vfocus.net

Microsoft Internet Explorer CTreeNode::GetCascadedLang Use-After-Free(MS15-079)

http://www.vfocus.net/art/20150813/12314.html

Microsoft Internet Explorer CTreeNode: GetCascadedLang Use-After-Free(MS15-079). 来源 bluefrostsecurity.de 作者 Jodeit 发布时间 2015-08-13. CTreeNode: GetCascadedLang function. The following analysis was performed on Internet Explorer 11 on Windows 8.1 (x64). The following HTML page demonstrates the problem:! CreateCoreWebView 0x1e0234: 6fea5a44 81b828030000506ffb6f cmp dword ptr [eax 328h],offset MSHTML! CreateCoreWebView 0x2f1740 (6ffb6f50) ds:002b:00000328=? AVrfDebugPageHeapAllocate 0x0000023c 779057b7 ntdll!

vfocus.net

安全文章

http://www.vfocus.net/art

FreePBX 13 / 14 - Remote Com. Internet Explorer - MSHTML! NUUO NVRmini 2 3.0.8 - Remot. Netcore Router Udp 53413 Bac. VBulletin 5.2.2 - Preauth Se. Actiontec T2200H Remote Reve. NUUO NVRmini 2 / NETGEAR Rea. Internet Explorer 11 VBScrip. Samsung Security Manager 1.5. Samsung Smart Home Camera SN. EyeLock nano NXT 3.5 - Remot. HelpDeskZ 1.0.2 - Unauthenti. Belkin F9K1122v1 1.00.30 - Buffer Ov. FormatFactory 3.9.0 .task Stack Over. Easy File Sharing Web Server 7.2 SEH. PHP 70 - JsonSerializable: jsonSeri.

vfocus.net

安全文章>文章资料

http://www.vfocus.net/art/index_f.html

FreePBX 13 / 14 - Remote Com. Internet Explorer - MSHTML! NUUO NVRmini 2 3.0.8 - Remot. Netcore Router Udp 53413 Bac. VBulletin 5.2.2 - Preauth Se. Actiontec T2200H Remote Reve. Internet Explorer 11 VBScrip. NUUO NVRmini 2 / NETGEAR Rea. EyeLock nano NXT 3.5 - Remot. Samsung Security Manager 1.5. Samsung Smart Home Camera SN. HelpDeskZ 1.0.2 - Unauthenti. Exim "string vforat()" 溢出漏洞分析. Adobe Reader 'CoolType.dll' TTF字体. CVE: 2014-6271 Bash Specially-crafte. SuperMicro IPMI 49152端口 密码泄漏漏.

vfocus.net

安全文章>黑客文化

http://www.vfocus.net/art/index_hw.html

暗网 有多 暗 有人说，那里是网.

vfocus.net

NeuroServer 0.7.4 Denial Of Service

http://www.vfocus.net/art/20150812/12311.html

NeuroServer 0.7.4 Denial Of Service. 来源 http:/ goo.gl/44r1HH 作者 nitr0us 发布时间 2015-08-12. Print ' - Exception: %s' % (e) else: print ' - NeuroServer is still alive :- , try again.' finally: s.close() sys.exit(0);. CVE-2012-0217 Intel sysret exp. Linux Kernel 2.6.32 Local Root. Array Networks vxAG / xAPV Pri. Novell NetIQ Privileged User M. Array Networks vAPV / vxAG Cod. Excel SLYK Format Parsing Buff. PhpInclude.Worm - PHP Scripts. Messenger Webcam 8.1 Ac. Apache 2.2.0 - 2.2.11 Remote e.

vfocus.net

PDF Shaper Buffer Overflow

http://www.vfocus.net/art/20150812/12312.html

PDF Shaper Buffer Overflow. 来源 metasploit.com 作者 metacom 发布时间 2015-08-12. CVE-2012-0217 Intel sysret exp. Linux Kernel 2.6.32 Local Root. Array Networks vxAG / xAPV Pri. Novell NetIQ Privileged User M. Array Networks vAPV / vxAG Cod. Excel SLYK Format Parsing Buff. PhpInclude.Worm - PHP Scripts. Messenger Webcam 8.1 Ac. Apache 2.2.0 - 2.2.11 Remote e. Joomla Component EasyBook 1.1. HT Editor File openning Stack. NeuroServer 0.7.4 Denial Of Se. Java Secure Socket Extension (. Havij Pro - Crash POC.

vfocus.net

:::VITTERSAFE危特网安:::

http://www.vfocus.net/original

最近遇到些国外的oracle服务器，其中好多系统的内核无法local root，但是有在root权限下跑的java的web服务，有在web目录写权限，但是经常用的jshell是GBK的，在国外 先是. (详情请进). By:vitter@safechina.net blog.securitycn.net 最近在搞oracle，一些小东西记录一下。 Metasploit是一个很好的攻击工具包，当然我们这次不是介绍这个工具包的，主要是大牛 . (详情请进). 本站原创转载注明出处 by:vitter(vitter at safechina.net) My blog: http:/ blog.securitycn.net www.securitycn.net,www.vfocus.net,www.safechina.net 、准备工作 1 下. (详情请进). 下面是针对这个的优化，其中因为article、article extent、article column这. (详情请进). Http:/ sshwindows.sourceforge.net/download/ 2) 、安装。 Blog http:/...

vfocus.net

Pineapple 2.3.0 Autopwn Script

http://www.vfocus.net/art/20150811/12309.html

Pineapple 2.3.0 Autopwn Script. 来源 mailto at zensecurity.su 作者 Mind 发布时间 2015-08-11. I have wrote PoC half a year ago, because i needed to try it on my Chinese router, and it still works on freshly purchased pineapple devices. (hello from Defcon ;) ) And guys, it’s not a talk for the defcon, especially if you have done a botnet based on that shit… ;) See ya tomorrow at WiFi village. POC is below: #! Action=set ssid, ssid={0}&password={1}&password2={1}&set ssid=true.format(settings[ap ssid], settings[...

vfocus.net

Java Secure Socket Extension (JSSE) SKIP-TLS MITM Proxy

http://www.vfocus.net/art/20150813/12313.html

Java Secure Socket Extension (JSSE) SKIP-TLS MITM Proxy. 来源 metasploit.com 作者 Valle 发布时间 2015-08-13. Rex: Service) if @proxy.kind of? Rex: Socket) @proxy.close @proxy.stop end @proxy = nil rescue : Exception end end def prf(secret, label, seed) if secret.empty? CVE-2012-0217 Intel sysret exp. Linux Kernel 2.6.32 Local Root. Array Networks vxAG / xAPV Pri. Novell NetIQ Privileged User M. Array Networks vAPV / vxAG Cod. Excel SLYK Format Parsing Buff. PhpInclude.Worm - PHP Scripts. Havij Pro - Crash POC.