May 2024 M T W T F S S 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 -
Recent Posts
- Trying New Things: Risk and Reward – It Is Important in Internet Days (Tetraph Suggestion)
- 关于海的诗句
- CVE-2014-9469 vBulletin XSS (Cross-Site Scripting) Web Security Vulnerabilities
- 带山的经典古文
- Youth – Beautiful Time
- CVE-2015-2563 – Vastal I-tech phpVID 1.2.3 SQL Injection Web Security Vulnerabilities
- CVE-2015-2209 – DLGuard Full Path Disclosure (Information Leakage) Web Security Vulnerabilities
- CVE-2015-2349 – SuperWebMailer 5.50.0.01160 XSS (Cross-site Scripting) Web Security Vulnerabilities
- CXSecurity WLB-2015040034 6kbbs v8.0 Multiple CSRF (Cross-Site Request Forgery) Web Security Vulnerabilities
- OSVDB 120807 NetCat CMS 3.12 HTML Injection Web Security Vulnerabilities
- OSVDB 119342, 119323 NetCat CMS Multiple HTTP Response Splitting (CRLF) Web Security Vulnerabilities
- 6kbbs v8.0 Weak Encryption Cryptography Security Vulnerabilities
- 熱帶雨林 – S.H.E – 青春株式會社 柔美溫和華文歌曲
- CVE-2014-8753 Cit-e-Net Multiple XSS (Cross-Site Scripting) Web Security Vulnerabilities
- CVE-2015-2242 – Webshop hun v1.062S SQL Injection Web Security Vulnerabilities
- CVE-2014-9468 InstantASP InstantForum.NET Multiple XSS (Cross-Site Scripting) Web Security Vulnerabilities
- CVE-2015-2214 – NetCat CMS Full Path Disclosure (Information Disclosure) Web Security Vulnerabilities
- Feed2JS v1.7 XSS (Cross-site Scripting) Web Security Vulnerabilities
- Opoint Media Intelligence Unvalidated Redirects and Forwards (URL Redirection) Security Vulnerabilities
- NetCat CMS 3.12 Multiple Directory Traversal Security Vulnerabilities
- NetCat CMS 3.12 HTML Injection Security Vulnerabilities
- Webs ID Reflected XSS (Cross-site Scripting) Security Vulnerabilities
- Comsenz SupeSite CMS Stored XSS (Cross-site Scripting) Security Vulnerabilities
- CVE-2014-8490 TennisConnect COMPONENTS System XSS (Cross-Site Scripting) Security Vulnerability
- CVE-2014-8752 JCE-Tech “Video Niche Script” XSS (Cross-Site Scripting) Security Vulnerability
- 15條經典愛情語錄：青春的日子，愛情必不可少
- ヤフーYahoo.co.jpオープンリダイレクトセキュリティ脆弱性
- DoubleClick do Google pode ser vulnerável a ataques
- CNN出现XSS及Open Redirect安全漏洞
- CVE-2014-7290 Atlas Systems Aeon XSS (Cross-Site Scripting) Security Vulnerability
- Vigilantes testing security of IT systems
- 隱蔽重定向安全漏洞
- The Weather Channel fixes web app flaws
- Times of India website vulnerable to Cross Site Scripting (XSS) attacks
- 紐約時報所有2013年前舊文章XSS漏洞
- Times of India website vulnerable to Cross Site Scripting (XSS) attacks
- নতুন নিরাপত্তা ত্রুটি, হুমকির সম্মুখীন ফেসবুক গুগল ব্যবহারকারীরা
- 雅虎日本公开重定向安全漏洞
- Alvorlig feil i utbredt innloggingssystem
- CVE-2014-8751 goYWP WebPress Multiple XSS (Cross-Site Scripting) Security Vulnerabilities
- 描寫秋天的古詩 —— 常用古詩詞19首
- CVE-2014-8751 goYWP WebPress Multiple XSS (Cross-Site Scripting) Security Vulnerabilities
- VE-2014-8754 WordPress “Ad-Manager Plugin” Dest Redirect Privilege Escalation Security Vulnerability
- CVE-2014-7291 Springshare LibCal XSS (Cross-Site Scripting) Security Vulnerability
- CVE-2014-7291 Springshare LibCal XSS (Cross-Site Scripting) Security Vulnerability
- CVE-2014-7292 Newtelligence dasBlog Dest Redirect Privilege Escalation Security Vulnerability
- CVE-2014-7292 Newtelligence dasBlog Dest Redirect Privilege Escalation Security Vulnerability
- CVE-2014-2404 Oracle Manager WebGate Subcomponent Unspecified Remote Information Disclosure
- CVE-2014-2404 Oracle Manager WebGate Subcomponent Unspecified Remote Information Disclosure
- Cross-Site Scripting in Two Subdomain of Mozilla Website
Archives
- November 2015
- October 2015
- September 2015
- August 2015
- July 2015
- June 2015
- May 2015
- April 2015
- March 2015
- February 2015
- January 2015
- December 2014
- November 2014
- October 2014
- September 2014
- August 2014
- July 2014
- June 2014
- May 2014
- November 2013
- August 2013
- April 2013
- February 2013
- November 2012
- October 2012
- September 2012
- April 2012
- February 2012
- October 2011
- April 2011
- November 2010
- April 2010
- February 2010
- April 2009
- February 2009
- July 2008
Categories
- 0Day
- Article
- Celebration
- Computer & Web Technology
- Computer Technology
- Computing Science
- Covert Redirect
- CRLF
- CSRF
- CVE
- CXSecurity
- Database Technology
- Directory Traversal
- DOS
- Essay
- FPD
- Happiness
- Health
- HTML Injection
- Information Leakage
- IT Technology
- Life
- Love
- Mathematics & Statistics
- Memory
- Music
- Open Redirect
- OSVDB
- Phishing
- Poem
- Privilege Escalation
- Spam
- SQL Injection
- Weak Encryption
- Web Application
- Web Application Technology
- Web Technology
- XFS
- XSS
Category Archives: Privilege Escalation
Facebook, Google Users Threatened by New Security Flaw, Covert Redirect
A serious flaw in two widely used security standards could give anyone access to your account information at Google, Microsoft, Facebook, Twitter and many other online services. The flaw, dubbed “Covert Redirect” by its discoverer, exists in two open-source … Continue reading
Posted in Covert Redirect, Phishing, Privilege Escalation, Web Application Technology
Tagged 0day Flaw, by New Security, Cnet, Covert Redirect, Exploit Attack, Facebook, Google, hacker-prevention, IT Technology, jing wang, Linkedin, Microsoft, OAuth 2.0, Open Source, OpenID, Phishing Model, Tomsguid, Users Threat, Web News, Yahoo
Leave a comment
Daily Memory 