Cloud Security

High-risk OA vulnerability Repair Process On the 21st, the Deputy Director of the Information Security Department sent an email about the major security risks of OA. One was the issue of unauthorized access, and the other was the struts version, the

Google Chrome PDFium DoS Vulnerability (CVE-2015-6778)Google Chrome PDFium DoS Vulnerability (CVE-2015-6778) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-6778Google Chrome is a Web browser tool

Android Audio component information leakage Vulnerability (CVE-2015-6627)Android Audio component information leakage Vulnerability (CVE-2015-6627) Release date:Updated on:Affected Systems: Android Android 6.0 Description: CVE (CAN) ID: CVE-201

Adobe Flash Player and AIR Security Restriction Bypass Vulnerability (CVE-2015-7662)Adobe Flash Player and AIR Security Restriction Bypass Vulnerability (CVE-2015-7662) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash

Adobe ColdFusion XSS Vulnerability (CVE-2015-8053)Adobe ColdFusion XSS Vulnerability (CVE-2015-8053) Release date:Updated on:Affected Systems: Adobe ColdFusion 〈 11 Update 7Adobe ColdFusion 〈 10 Update 18 Description: CVE (CAN) ID:

SmokePing Arbitrary Code Execution Vulnerability (CVE-2015-0859)SmokePing Arbitrary Code Execution Vulnerability (CVE-2015-0859) Release date:Updated on:Affected Systems: SmokePing Description: CVE (CAN) ID: CVE-2015-0859SmokePing is a latency

Node. js is facing two important security vulnerabilities and is planned to be repaired next week. The Node. js Foundation discloses a denial of service and an out-of-bounds Access Vulnerability, and plans to provide patch updates next week to fix

Joomla exposed SQL injection vulnerability affecting millions of websites Joomla released a patch to fix an SQL injection vulnerability discovered by security researchers. This vulnerability allows malicious users to extract the browser cookies

Xen fixed a high-risk Elevation of Privilege Vulnerability with a history of seven years. The Xen project fixed a high-risk Elevation of Privilege Vulnerability with a history of seven years. This vulnerability allows the malicious

Google Chrome same-Source Policy Bypass Vulnerability (CVE-2015-1302)Google Chrome same-Source Policy Bypass Vulnerability (CVE-2015-1302) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-1302Google

How Android Trojans steal users' mobile banking Mobile banking is a very convenient way for users to complete transactions anytime and anywhere. KPMG predicts that mobile banking users will grow to 2019 in 0.18 billion. However, as the amount of

Siteserver cms uses webshell in the backgroundTarget Site: http://www.xxxxx.gov.cn Default background address: http://www.xxxx.gov.cn/siteserver/login.aspx login into the background to see: see the upper left corner, I suddenly went to Baidu ha this

Futures security-SQL Injection for a futures system in meiya Detailed description: 1. OA is the yonyou NC-IUFO Report System  2. Blind injection of post Data  Code Region

An SQL injection exists at a specific place (it can span 5 databases and contain the Administrator table) An SQL injection exists at a specific place (it can span 5 databases and contain the Administrator table)Detailed description: Objective: To

SQL injection is ill. How can security experts help?SQL Injection Attack Status SQL injection attacks are a very old attack method. Because many applications have SQL Injection Vulnerabilities and SQL injection methods and methods are varied,

SQL injection vulnerability in the APP SQL injection vulnerability in the APP The "good loan APP" of good loan Network detected a time-blind injection on the following URLs. The injection parameter is

Youxin second-hand car ownership management system SQL injection (leakage of a large number of car owner information and ID card front and back photos) A large number of car owner information (name/mobile phone number/license plate

DockerMaze maze challenge write-up November 16 this year ~ On the 17th, in Dockercon eu 2015 held in barsarona, Schibsted Team released a DockerMaze challenge, which is similar to the game running out of the maze in 1990s. In this game, you wake up

XSS rollback Test Although the same-origin policy limits Js access to dom of non-same-origin sites However, we can still use window. name to transmit cookies across domains. In this way, a reflected XSS is encapsulated as a storage XSS. This example

Operator security-China Telecom SQL Injection on a site (involving 9 databases and data leakage of 0.43 million users) Operator security: an SQL injection vulnerability in China Telecom has been injected into URLhttp: // **. **: 9080/home/index.