加载中…
个人资料
紫色的大大号
紫色的大大号
  • 博客等级:
  • 博客积分:0
  • 博客访问:1,006
  • 关注人气:2
  • 获赠金笔:0支
  • 赠出金笔:0支
  • 荣誉徽章:
访客
加载中…
好友
加载中…
评论
加载中…
留言
加载中…
博文
标签:

it

分类: 跨站脚本攻击
New York Times nytimes.com Page Design XSS Vulnerability (Almost all Article Pages Before 2013 are Affected)
 
 

 

Domain:
 
 
 

 

Vulnerability Description:
The vulnerability occurs at New York Times’s URLs. Nytimes (short for New York Times) uses part of the URLs to construct its pages. However, it seems that Nytimes does not filter the content used for the construction at all before 2013.
 
Based on Nytimes’s Design, Almost all URLs before 2013 are affected (All pages of articles). In fact, all article pages that contain “PRINT” button, “SINGLE PAGE” button, “Page *” button, “NEXT PAGE” button are a
阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
标签:

it

分类: CVEs

Exploit Title: Newtelligence dasBlog Dest Redirect Privilege Escalation Vulnerability
Product: dasBlog
Vendor:    Newtelligence
Vulnerable Versions: 2.3 (2.3.9074.18820) 2.2 (2.2.8279.16125) 2.1(2.1.8102.813)
Tested Version: 2.3 (2.3.9074.18820)
Advisory Publication: OCT 15, 2014
Latest Update:    OCT 15, 2014
Vulnerability Type: Open Redirect [CWE-601]
CVSS v2 Base Score: 5.8 (MEDIUM) (AV:N/AC:M/Au:N/C:P/I:P/A:N) (legend)
Impact Subscore: 4.9
Exploitability Subscore: 8.6
Credit: Wang Jing [Mathematics, Nanyang Technological University, Singapore] (@justqdjing)

 

 








Advisory Details:

Newtelligence dasBlog ct.ashx is vulnerable to Open Redirect attacks.

dasBlog supports a feature calle

阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
标签:

it

分类: CVEs

Exploit Title: OpenX Dest Redirect Privilege Escalation Vulnerability
Product: OpenX
Vendor:  OpenX
Vulnerable Versions: 2.8.10 and probably prior
Tested Version: 2.8.10
Advisory Publication: OCT 8, 2014
Latest Update:  OCT 8, 2014
Vulnerability Type: Open Redirect [CWE-601]
CVSS v2 Base Score: 5.8 (MEDIUM) (AV:N/AC:M/Au:N/C:P/I:P/A:N) (legend)
Impact Subscore: 4.9
Exploitability Subscore: 8.6
Exploitability Subscore: 8.6

Credit: Wang Jing [Mathematics, Nanyang Technological University, Singapore]

 

 
 
 
 
 
 

Vulnerability Details:

 
OpenX adclick.php, ck.php, vulnerable to Open Redirect attacks.
 Source code of adclick.php:

$destination = MAX_querystringGetDe

阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
标签:

it

分类: 跨站脚本攻击
Domains:
(The two domains above are almost the same)
 
 
 



Websites information:
lxr.mozilla.org, mxr.mozilla.org are cross references designed to display the Mozilla source code. The sources displayed are those that are currently checked in to the mainline of the mozilla.org CVS server, Mercurial Server, and Subversion Server; these pages are updated many times a day, so they should be pretty close to the latest‑and‑greatest. (from Mozilla)
 
 
&n
阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
(2014-11-01 11:42)
标签:

文化

情感

分类: 情感

 

 

 

落日憔悴了寒风,

 

阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
(2014-11-01 11:20)
标签:

情感

文化

分类: 情感

暮春之初,流水淙淙,蝶舞,莺歌。一片片鹅黄轻挂杨柳,一丛丛嫩绿蔓延大地。


纸鸢轻舞,融入那一抹湛蓝,和者朵朵素云,吮吸着者春天的甘露。纸鸢漫步,恰似一个个跳跃的音符,欢快而愉悦。突然线断,犁破了飞翔的梦!



00b1OOOPICa1



残阳如血,寒风又泼,那一抹余光染红苍穹,残鸢轻飘,宛若一朵啼血玫瑰,又如一片破碎的梦,跌跌撞撞,心在喋血,



 弦断,琴瑟有谁听。
 


阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
标签:

文化

分类: 情感

Love, Affection, Sweet, Sleep - Pure Music - Ghost, Final Fantasy

 
The book of songs Bei Feng drum

Hear the roll of our drums! See how we leap about, using our weapons! Those do the fieldwork in the state, or fortify Cao, while we alone March to the south.

From Sun Zizhong, Ping Chen and song. [but] he did not lead us back, and our sorrowful hearts are very sad.

Here will he reside ; here will he sit? Here we lose our horses? And we seek for them? Among the trees of the forest.

For life or for death, however separated, to our wives we pledged our word. Hold your hand and grow old together with you.

Alas for our separation! We have no prospect of life. Alas for our stipulation! We cannot make it good.

 

 

 

diebiyi:
http://www.diebiyi.com/
http://www.diebiyi.com/articles/

阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
标签:

文化

情感

教育

分类: 情感

The butterfly counts not months but moments, and has time enough.  ~Rabindranath Tagore



May the wings of the butterfly kiss the sun
And find your shoulder to light on,
To bring you luck, happiness and riches
Today, tomorrow and beyond.
~Irish Blessing


Butterflies are self propelled flowers.  ~R.H. Heinlein


If nothing ever changed, there'd be no butterflies.  ~Author Unknown


The caterpillar does all the work but the butterfly gets all the publicity.  ~Attributed to George Carlin


What the caterpillar calls the end of the world, the master calls a butterfly.  ~Richard Bach


But these are flowers that fly and all but sing:
And now from having ridden out desire
They lie closed over in the wind and cling
Where wheels have freshly sliced the April mire.
~Robert Frost, 'Blue-Butterfly Day'

阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
标签:

教育

分类: 情感

我曾七次鄙视自己的灵魂:它本可进取却故作谦卑;它在空虚时用爱欲来填充;在困难和容易之间它选择容易;它犯了错,却借由别人也会犯错来宽慰自己; 它自由软弱,却把它认为是生命的坚韧;它鄙夷一张丑恶的嘴脸,却不知那正是自己面具中的一副;它侧身于生活的污泥,虽不甘心却又畏首畏尾。——纪伯伦



你很好,做你自己就好,谁让你是独一无二的呢

悄悄话别怕得罪人,有原则的人谁都敬他三分。时代不同了,老好人不吃香了。有脾气,也是一份真性情。把嘴边的话咽回去,纵然是成熟,但把该说的话说出来,才是一种担当。——苏芩


生活只有在平淡无味的人看来才是空虚而平淡无味的


古英雄出少年,这是风险投资家们普遍承认的事实。红杉风投的投资家们和我谈过他们选择投 资对象的原则,其中一条就是创业者一定要有饥渴感(Hungry)。很难想象一个腰缠万贯的富翁能比 一个急于脱离贫困现状的缀学生更有把公司办好的可能。因为前者办公司不过是为了锦上添花而后者 则是要置于死地而后生。这就是乔布斯勉励年轻人要保持饥渴感(Keep Hungry)的原因。


什么叫好的平台?就是这

阅读  ┆ 评论  ┆ 转载 ┆ 收藏 




《卜算子》李之仪

我住长江头,君住长江尾。
日日思君不见君,共饮长江水。
此水几时休,此恨何时已。
只愿君心似我心,定不负相思意。    





《诗经邶风击鼓》

击鼓其镗,踊跃用兵。土国城漕,我独南行。
从孙子仲,平陈与宋。不我以归,忧心有忡。
爰居爰处?爰丧其马?于以求之?于林之下。
死生契阔,与子成说。执子之手,与子偕老。
于嗟阔兮,不我活兮。于嗟洵兮,不我信兮。   




《鹊桥仙》秦观

纤云弄巧,飞星传恨,银汉迢迢暗度。金风玉露一相逢,便胜却人间无数。柔情似水,佳期如梦,

阅读  ┆ 评论  ┆ 转载 ┆ 收藏 
  

新浪BLOG意见反馈留言板 不良信息反馈 电话:4006900000 提示音后按1键(按当地市话标准计费) 欢迎批评指正

新浪简介 | About Sina | 广告服务 | 联系我们 | 招聘信息 | 网站律师 | SINA English | 会员注册 | 产品答疑

新浪公司 版权所有