May 2024 M T W T F S S 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 -
Recent Posts
- Trying New Things: Risk and Reward – It Is Important in Internet Days (Tetraph Suggestion)
- 关于海的诗句
- CVE-2014-9469 vBulletin XSS (Cross-Site Scripting) Web Security Vulnerabilities
- 带山的经典古文
- Youth – Beautiful Time
- CVE-2015-2563 – Vastal I-tech phpVID 1.2.3 SQL Injection Web Security Vulnerabilities
- CVE-2015-2209 – DLGuard Full Path Disclosure (Information Leakage) Web Security Vulnerabilities
- CVE-2015-2349 – SuperWebMailer 5.50.0.01160 XSS (Cross-site Scripting) Web Security Vulnerabilities
- CXSecurity WLB-2015040034 6kbbs v8.0 Multiple CSRF (Cross-Site Request Forgery) Web Security Vulnerabilities
- OSVDB 120807 NetCat CMS 3.12 HTML Injection Web Security Vulnerabilities
- OSVDB 119342, 119323 NetCat CMS Multiple HTTP Response Splitting (CRLF) Web Security Vulnerabilities
- 6kbbs v8.0 Weak Encryption Cryptography Security Vulnerabilities
- 熱帶雨林 – S.H.E – 青春株式會社 柔美溫和華文歌曲
- CVE-2014-8753 Cit-e-Net Multiple XSS (Cross-Site Scripting) Web Security Vulnerabilities
- CVE-2015-2242 – Webshop hun v1.062S SQL Injection Web Security Vulnerabilities
- CVE-2014-9468 InstantASP InstantForum.NET Multiple XSS (Cross-Site Scripting) Web Security Vulnerabilities
- CVE-2015-2214 – NetCat CMS Full Path Disclosure (Information Disclosure) Web Security Vulnerabilities
- Feed2JS v1.7 XSS (Cross-site Scripting) Web Security Vulnerabilities
- Opoint Media Intelligence Unvalidated Redirects and Forwards (URL Redirection) Security Vulnerabilities
- NetCat CMS 3.12 Multiple Directory Traversal Security Vulnerabilities
- NetCat CMS 3.12 HTML Injection Security Vulnerabilities
- Webs ID Reflected XSS (Cross-site Scripting) Security Vulnerabilities
- Comsenz SupeSite CMS Stored XSS (Cross-site Scripting) Security Vulnerabilities
- CVE-2014-8490 TennisConnect COMPONENTS System XSS (Cross-Site Scripting) Security Vulnerability
- CVE-2014-8752 JCE-Tech “Video Niche Script” XSS (Cross-Site Scripting) Security Vulnerability
- 15條經典愛情語錄：青春的日子，愛情必不可少
- ヤフーYahoo.co.jpオープンリダイレクトセキュリティ脆弱性
- DoubleClick do Google pode ser vulnerável a ataques
- CNN出现XSS及Open Redirect安全漏洞
- CVE-2014-7290 Atlas Systems Aeon XSS (Cross-Site Scripting) Security Vulnerability
- Vigilantes testing security of IT systems
- 隱蔽重定向安全漏洞
- The Weather Channel fixes web app flaws
- Times of India website vulnerable to Cross Site Scripting (XSS) attacks
- 紐約時報所有2013年前舊文章XSS漏洞
- Times of India website vulnerable to Cross Site Scripting (XSS) attacks
- নতুন নিরাপত্তা ত্রুটি, হুমকির সম্মুখীন ফেসবুক গুগল ব্যবহারকারীরা
- 雅虎日本公开重定向安全漏洞
- Alvorlig feil i utbredt innloggingssystem
- CVE-2014-8751 goYWP WebPress Multiple XSS (Cross-Site Scripting) Security Vulnerabilities
- 描寫秋天的古詩 —— 常用古詩詞19首
- CVE-2014-8751 goYWP WebPress Multiple XSS (Cross-Site Scripting) Security Vulnerabilities
- VE-2014-8754 WordPress “Ad-Manager Plugin” Dest Redirect Privilege Escalation Security Vulnerability
- CVE-2014-7291 Springshare LibCal XSS (Cross-Site Scripting) Security Vulnerability
- CVE-2014-7291 Springshare LibCal XSS (Cross-Site Scripting) Security Vulnerability
- CVE-2014-7292 Newtelligence dasBlog Dest Redirect Privilege Escalation Security Vulnerability
- CVE-2014-7292 Newtelligence dasBlog Dest Redirect Privilege Escalation Security Vulnerability
- CVE-2014-2404 Oracle Manager WebGate Subcomponent Unspecified Remote Information Disclosure
- CVE-2014-2404 Oracle Manager WebGate Subcomponent Unspecified Remote Information Disclosure
- Cross-Site Scripting in Two Subdomain of Mozilla Website
Archives
- November 2015
- October 2015
- September 2015
- August 2015
- July 2015
- June 2015
- May 2015
- April 2015
- March 2015
- February 2015
- January 2015
- December 2014
- November 2014
- October 2014
- September 2014
- August 2014
- July 2014
- June 2014
- May 2014
- November 2013
- August 2013
- April 2013
- February 2013
- November 2012
- October 2012
- September 2012
- April 2012
- February 2012
- October 2011
- April 2011
- November 2010
- April 2010
- February 2010
- April 2009
- February 2009
- July 2008
Categories
- 0Day
- Article
- Celebration
- Computer & Web Technology
- Computer Technology
- Computing Science
- Covert Redirect
- CRLF
- CSRF
- CVE
- CXSecurity
- Database Technology
- Directory Traversal
- DOS
- Essay
- FPD
- Happiness
- Health
- HTML Injection
- Information Leakage
- IT Technology
- Life
- Love
- Mathematics & Statistics
- Memory
- Music
- Open Redirect
- OSVDB
- Phishing
- Poem
- Privilege Escalation
- Spam
- SQL Injection
- Weak Encryption
- Web Application
- Web Application Technology
- Web Technology
- XFS
- XSS
Tag Archives: diebiyi
एक अन्य Heartbleed?वेब सुरक्षा में पाया दोषों, Covert Redirect
Originally posted on INZEED Business Information & Counsel:
एक अन्य Heartbleed?वेब सुरक्षा में पाया दोषों, Covert Redirect इंटरनेट अब भी Heartbleed बग से जूझ रहा है, जबकि सुरक्षा प्रोटोकॉल OAuth 2.0 और OpenID में एक प्रमुख नए भेद्यता खोज की गई है. सिंगापुर में नानयांग प्रौद्योगिकी विश्वविद्यालय की पीएचडी की छात्रा वांग जिंग हैकर्स उपयोगकर्ताओं को जानने के बिना प्रवेश जानकारी चोरी करने की कोशिश में फ़िशिंग तकनीक का उपयोग करने की अनुमति देता है कि एक बग देखा. बग अनिवार्य रूप से साइबर अपराधी के बजाय डोमेन faking के अधिक आम रणनीति का एक फ़िशिंग पॉपअप सत्ता में असली वेबसाइट प्रमाणीकरण का उपयोग करने की अनुमति देता है.इस प्रक्रिया में, हैकर्स उपयोगकर्ता के लॉगिन क्रेडेंशियल प्राप्त होगा. http://essayjeans.lofter.com/post/1cc7459a_43bf99e
Posted in Computer & Web Technology, Web Technology
Tagged 0Day, अनुसंधान, अपराध अनुप्रेषित, आवेदन, इंटरनेट, कंप्यूटर, गणित, गुप्त, जोखिम, दोष, फिशिंग, बग, बुद्धि, यह खबर, यूआरएल पुनर्निर्देशन, रक्षा, वेब, वेबसाइट, सफेद टोपी, समस्या, साइबर, सिंगापुर, हमले, हैकर, diebiyi, inzeed, jing wang, justqdjing, OAuth 2.0, OpenID, tetraph
Leave a comment
Keep calm e fate attenzione: OpenID e OAuth sono vulnerabili
Keep calm e fate attenzione: OpenID e OAuth sono vulnerabili Solo un paio di settimane dopo il preoccupante bug conosciuto comeHeartbleed, un utente di Internet come me e voi ha scoperto una nuova e a quanto pare diffusa vulnerabilità, anche … Continue reading
Posted in Computer & Web Technology, Web Technology
Tagged 0-day, applicazione, attacco, bianco – cappello, bug, computer, cyber, diebiyi, difesa, difetto, hacker, il phishing, il reindirizzamento, intelligenza, internet, inzeed, IT-news, justqdjing, la criminalità, la ricerca, la vulnerabilità, l’URL, matematica, OAuth 2.0, OpenID, problema, reindirizzamento segreta, singapore, sito web, tetraph, web
Leave a comment
Covert Redirect Mengancam OAuth 2.0 dan OpenID
Covert Redirect Mengancam OAuth 2.0 dan OpenID Pada Jumat lalu, Wang Jing, seorang mahasiswa program PhD di Nanyang Technological University di Singapura, menerbitkan sebuah laporan yang memjabarkan tentang metode serangan yang disebut dengan “Covert Redirect” dan memperkenalkannya sebagai kerentanan atau … Continue reading
Posted in Computer & Web Technology, Web Technology
Tagged 0-day, aplikasi, bug, cacat, Covert Redirect, cyber, diebiyi, hacker, internet, inzeed, IT-news, justqdjing, kecerdasan, kejahatan, kerentanan, komputer, masalah, matematika, OAuth 2.0, OpenID, penelitian, pengalihan, pertahanan, Phishing, putih – hat
Leave a comment
하트블리드 이어 ‘오픈ID’와 ‘오쓰(OAuth)’서도 심각한 보안 결함
‘하트블리드(Heartbleed)’ 버그에 이어 가입자 인증 및 보안용 오픈소스 SW인 ‘오픈ID’와‘오쓰(OAuth)’에도 심각한 결함이 발견됐다고 씨넷, 벤처비트 등 매체들이 보도했다. 싱 가폴난양대학교에 재학중인 ‘왕 징(Wang Jing)’ 박사는 수 많은 웹사이트와 구글, 페이스북, 링크드인, MS, 페이팔 등에서 사용하고 있는 로그인 툴인 ‘OAuth’와‘오픈ID’에 … Continue reading
Alvorlig feil i utbredt innloggingssystem
Alvorlig feil i utbredt innloggingssystem Benyttes av Facebook, Google, Yahoo, LinkedIn, Microsoft og mange flere. Wang Jing, en doktorgradstudent ved Nanyang Technological University i Singapore, har oppdaget en alvorlig sårbarhet knyttet til autentiseringssystemene OAuth 2.0 og OpenID. Sårbarheten, som er … Continue reading
Posted in Computer & Web Technology, Web Technology
Tagged 0-day, angrep, bug, cyber, datamaskin, diebiyi, feil, forskning, forsvar, hacker, intelligens, Internett, inzeed, IT-news, justqdjing, kriminalitet, matematikk, nettside, OAuth 2.0, omdirigering
Leave a comment
Xuất hiện lỗ hổng Covert Redirect, bản sao của “Trái tim rỉ máu”
Originally posted on INZEED Business Information & Counsel:
Xuất hiện lỗ hổng Covert Redirect, bản sao của “Trái tim rỉ máu” Một nghiên cứu sinh tại trường Đại học Công nghệ Nanyang (Singapore) vừa phát hiện một lỗ hổng bảo…
Posted in Computer & Web Technology, Web Technology
Tagged 0Day, ứng dụng, chuyển hướng, chuyển hướng lén lút, dễ bị tổn thương, diebiyi, hacker, internet, inzeed, IT-news, jing wang, justqdjing, lỗ hổng, lỗi, lừa đảo, máy tính, mạng, mũ trắng, nghiên cứu, OAuth 2.0, OpenID, phòng thủ, singapore, tình báo, tấn công, tội phạm, tetraph, toán, trang web, URL, vấn đề, web
Leave a comment
Daily Memory 