Cloud Security

DoS attack analysis and Defense Analysis of 12 lines of JS Code There is a 12-line JavaScript code that can crash Firefox, Chrome, and Safari browsers, as well as restart the iPhone and crash android, the author of this article analyzes and

Python-RSA Security Restriction Bypass Vulnerability (CVE-2016-1494)Python-RSA Security Restriction Bypass Vulnerability (CVE-2016-1494) Release date:Updated on:Affected Systems: Python-RSA Description: CVE (CAN) ID: CVE-2016-1494Python-RSA

Multiple of the most popular Firefox extensions include available Vulnerabilities Security researchers found that NoScript, Firebug, Video DownloadHelper, Greasemonkey, FlashGot Mass Down, and other most popular Firefox extensions (except Adblock

Another Stagefright vulnerability was fixed in April Security Update of Android. Android's monthly security updates are not uncommon now, but the coming version of April is very important to solve. According to reports, Google fixed a total of

SAP NetWeaver Java as xxe Vulnerability (CVE-2016-3974)SAP NetWeaver Java as xxe Vulnerability (CVE-2016-3974) Release date:Updated on:Affected Systems: SAP NetWeaver Java AS 7.4 Description: CVE (CAN) ID: CVE-2016-3974SAP NetWeaver is the

Patterson Dental Eaglesoft Vulnerability (CVE-2016-2343)Patterson Dental Eaglesoft Vulnerability (CVE-2016-2343) Release date:Updated on:Affected Systems: Patterson Dental Eaglesoft Description: CVE (CAN) ID: CVE-2016-2343Patterson Dental

Cisco TelePresence Server Denial of Service Vulnerability (CVE-2015-6313)Cisco TelePresence Server Denial of Service Vulnerability (CVE-2015-6313) Release date:Updated on:Affected Systems: Cisco TelePresence Server 4.1 (2.29)-4.2 (4.17)

ProFTPD mod_tls module vulnerabilities (CVE-2016-3125)ProFTPD mod_tls module vulnerabilities (CVE-2016-3125) Release date:Updated on:Affected Systems: ProFTPD Project ProFTPD ProFTPD Project ProFTPD 1.3.6 Description: CVE (CAN) ID: CVE-2016-31

Comprehensive Protection of systems, files and programs In the Internet era, computer information security is crucial. System modification, program modification, and file deletion are all things we don't want to encounter. With the help of the

CubeCart "char" parameter SQL Injection VulnerabilityCubeCart "char" parameter SQL Injection Vulnerability Release date:Updated on:Affected Systems: CubeCart Description: CVE (CAN) ID:CubeCart is an open-source shopping software.The SQL

Subgraph OS: system analysis to protect user security and privacy As the first GNU/Linux release for GNU/Linux Desktop Security, Subgraph OS has been well received by many communities, some time ago, the open technology fund provided 12 months of

Cisco IOS/ios xe Smart Install Vulnerability (CVE-2016-1349)Cisco IOS/ios xe Smart Install Vulnerability (CVE-2016-1349) Release date:Updated on:Affected Systems: Cisco IOS Description: CVE (CAN) ID: CVE-2016-1349Cisco IOS is an interconnected

Tom adds Getshell to a server Source Code leak. First, visit http: // 202.108.12.127/to know that this is a TOM site. First, the source code leaks http: // 202.108.12.127/. phphttp: // 202.108.12.127 /. svn/entries second source code leakage: http:

A gps scheduling station of Anhua agricultural insurance has the java deserialization vulnerability, which can directly write a large amount of leaked policy information (name, mobile phone number, and other sensitive information) Http: // 221.8.57.

P2p financial security: SQL Injection in a website of yonglibao (with verification script) It is useless to filter single quotes. Http://m.yonglibao.com/Event/V3ReComment/inviteList? UserId = (select * from (select (sleep (5) x)Delayed Injection is

Fifth Report: China Insurance Radmin weak password control Business Core System/Intranet penetration I am sorry for five consecutive

An Sheng Tianping's other system can use Getshell to cause leakage of sensitive information such as a large number of user identity policies. I accidentally found another one. Previously Submitted a WooYun: the auto insurance system Getshell of

A website of Anhua agricultural insurance has the Java deserialization vulnerability, which causes Getshell to connect to the database. RT Verification: http: // 221.8.57.99: 7002/uddiexplorer/1.jsp? O = vLogin password: MWAsk the vendor to delete

Getshell can be used to write arbitrary files on a site of Beijing xinnet digital.   Beijing xinnet Digital Information Technology Co., Ltd. was established in 1993 and is a subsidiary of China Digital group. It is a top Internet basic application

How to turn Self-XSS from the Uber Bug rewards program into Good-XSS At present, the Uber Bug rewards program has been open to the public, and now I can easily give my suggestions to Uner. On the Uber partner page, a host is used to log on to and