security vulnerability database

Security personnel discovered the VMware storage permission expansion Vulnerability Recently, information security researchers found that VMware applications have the Privilege Escalation vulnerability. The affected products include ESXi, Fusion, Player, and Workstation. VMware also calls on users to update the serv

360 website security detection tell the truth, but it is not easy to detect some problems, but in some cases, it is still necessary to fix the problems. 360 there is an HTTP Response Splitting vulnerability in website security detection. Description: HTTP Response Splitting vulnerability, also known as CRLF Injection.

PHP "Unserialize ()" Security Vulnerability Release date:Updated on: Affected Systems:PHP Description:CVE (CAN) ID: CVE-2014-8142 PHP is a widely used scripting language. It is especially suitable for Web development and can be embedded into HTML. In PHP versions earlier than 5.4.36, the "process_nested_data ()" function has the vulnerability of re-exploitati

2018-2019-1 20165228 "The foundation of Information security system Design" experimental report on Buffer Overflow Vulnerability Experiment Introduction:Buffer overflow attack: by writing to the program's buffer beyond its length content, causing buffer overflow, thereby destroying the program's stack, causing the program to crash or to make the program to execute other instructions to achieve the purpose o

Apache Struts Security Restriction Bypass Vulnerability (CVE-2015-0899)Apache Struts Security Restriction Bypass Vulnerability (CVE-2015-0899) Release date:Updated on:Affected Systems: Apache Group Struts 1.1 Description: Bugtraq id: 74423CVE (CAN) ID: CVE-2015-0899Struts is the open source code used to build Web appl

Gnu c Library Security Restriction Bypass Vulnerability (CVE-2015-8777)Gnu c Library Security Restriction Bypass Vulnerability (CVE-2015-8777) Release date:Updated on:Affected Systems: Gnu c Library (glibc) Description: CVE (CAN) ID: CVE-2015-8777Glibc is the libc library released by GNU, that is, the c Runtime

=99999999999999999999Case Two: Login page button parameter, in the request body, did not find the reason???Http://localhost:83/login.aspx entity: Imgbtndl.y (Parameter)16. WebResource.axdWebresources.axd?d=xyz.One feature of WebResource.axd is that it generates 500 errors for the wrong ciphertext (that is, XYZ in d=xyz) and 404 errors for the correct ciphertext, which creates enough hintsResources:Http://www.2cto.com/Article/201009/75162.htmlhttp://pan.baidu.com/share/link?shareid=3851057069uk=2

Nettle x86_64/ecc-384-modp.asm Security Vulnerability (CVE-2015-8804)Nettle x86_64/ecc-384-modp.asm Security Vulnerability (CVE-2015-8804) Release date:Updated on:Affected Systems: Nettle nettle> 3.2 Description: CVE (CAN) ID: CVE-2015-8804Nettle is a low-level encryption library.In versions earlier than Nettle 3

Nettle ecc_256_modq Function Security Vulnerability (CVE-2015-8805)Nettle ecc_256_modq Function Security Vulnerability (CVE-2015-8805) Release date:Updated on:Affected Systems: Nettle nettle> 3.2 Description: CVE (CAN) ID: CVE-2015-8805Nettle is a low-level encryption library.In versions earlier than Nettle 3.2,

Multiple Asterisk products TLS Certificate verification Security Restriction Bypass Vulnerability (CVE-2015-3008)Multiple Asterisk products TLS Certificate verification Security Restriction Bypass Vulnerability (CVE-2015-3008) Release date:Updated on:Affected Systems: Asterisk Open Source Asterisk Open Source 13.xAst

Php null pointer Multiple Security Restriction Bypass Vulnerability (CVE-2015-3412)Php null pointer Multiple Security Restriction Bypass Vulnerability (CVE-2015-3412) Release date:Updated on:Affected Systems: PHP PHP PHP Description: Bugtraq id: 75250CVE (CAN) ID: CVE-2015-3412PHP is a widely used scripting lang

CURL/libcURL Cookies handle Remote Security Bypass Vulnerability (CVE-2014-3620) Release date:Updated on: Affected Systems:CURL 7.31.0-7.37.1Description:Bugtraq id: 69742CVE (CAN) ID: CVE-2014-3620 CURL/libcURL is a command line FILE transmission tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE, and LDAP. CURL/libcURL 7.31.0-7.37.1 mistakenly sets cookies for TLD. The Remote