Cloud Security

OpenSSH sshd monitor component Spoofing Vulnerability (CVE-2015-6563)OpenSSH sshd monitor component Spoofing Vulnerability (CVE-2015-6563) Release date:Updated on:Affected Systems: OpenSSH OpenSSH 〈 7.0OpenSSH OpenSSH Description: CVE (CAN) ID: CVE-

Linux kernel Denial of Service Vulnerability (CVE-2015-7833)Linux kernel Denial of Service Vulnerability (CVE-2015-7833) Release date:Updated on:Affected Systems: Linux kernel 〈 4.2.3 Description: CVE (CAN) ID: CVE-2015-7833Linux Kernel is the

Linux kernel Denial of Service Vulnerability (CVE-2015-7799)Linux kernel Denial of Service Vulnerability (CVE-2015-7799) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2015-7799Linux Kernel is the Kernel

Oracle Retail Applications Remote Security Vulnerability (CVE-2015-4827)Oracle Retail Applications Remote Security Vulnerability (CVE-2015-4827) Release date:Updated on:Affected Systems: Oracle Retail Applications 3.0 Description: CVE (CAN) ID:

Eight NTP vulnerabilities are detected during network time synchronization. Recently, Cisco researchers found eight security vulnerabilities in the Network Time Protocol (NTP). Currently, Linux, Mac, and BSD operating systems are using this

The first remote access trojan targeting Android, Linux, Mac, and Windows Avast researchers reported the first remote access trojan OmniRAT targeting Android, Linux, Mac, and Windows desktops and mobile platforms. The developer sold the trojan at a

Malicious Software infected MySQL servers as part of the global DDoS botnet Symantec has discovered that attackers use malware to hijack the MySQL server, add it to the global DDoS botnet, and then launch a DDoS attack. According to Symantec,

Cisco ASR 5500 SAE gateway Denial of Service Vulnerability (CVE-2015-6351)Cisco ASR 5500 SAE gateway Denial of Service Vulnerability (CVE-2015-6351) Release date:Updated on:Affected Systems: Cisco ASR 5500 19.2.0Cisco ASR 5500 19.1.0.61559

Apache Ambari server side Request Forgery Vulnerability (CVE-2015-1775)Apache Ambari server side Request Forgery Vulnerability (CVE-2015-1775) Release date:Updated on:Affected Systems: Apache Group Ambari Description: CVE (CAN) ID: CVE-2015-17

Janitza UMG Cross-Site Request Forgery Vulnerability (CVE-2015-3967)Janitza UMG Cross-Site Request Forgery Vulnerability (CVE-2015-3967) Release date:Updated on:Affected Systems: Janitza UMG 605Janitza UMG 604Janitza UMG 511Janitza UMG 509Janitza

Konica Minolta FTP Utility Buffer Overflow Vulnerability (CVE-2015-7768)Konica Minolta FTP Utility Buffer Overflow Vulnerability (CVE-2015-7768) Release date:Updated on:Affected Systems: konicaminolta FTP Utility 1.0 Description: CVE (CAN) ID: CVE-2

VMware vCenter Server jmx rmi remote code execution vulnerability in CVE-2015-2342)VMware vCenter Server jmx rmi remote code execution vulnerability in CVE-2015-2342) Release date:Updated on:Affected Systems: VMWare vCenter Server Description:

Any file in the latest version of AfterLogic WebMail contains AfterLogic WebMail contains any file, including the latest version and the old version. The latest version of AfterLogic WebMail 7.6.0 is used as an example for testing.AfterLogic WebMail

Auspicious aviation logic vulnerability allows you to reset any User Password Incorrect Design for password retrieval at the auspicious airlines Main SiteStep 2 send the verification code to capture packetsBecause there is no limit on the number of

Mysql error injection (explicit error injection) sorting 1. floor brute-force Error/* Database version */And (select 1 from (select count (*), concat (select concat (0x7e, version (), 0x7e) from information_schema.tables limit 0, 1 ), floor (rand (0)

The background injection vulnerability of a sub-station in China Resources startup Delayed blind Injection Http://rms.crclogistics.com/login.aspxChina Resources LogisticsPacket Capture POST /login.aspx HTTP/1.1Host:

Operator security-China Telecom SQL Injection on a site (involving 9 databases and data leakage of 0.43 million users) Operator security: an SQL injection vulnerability in China Telecom has been injected into URLhttp: // **. **: 9080/home/index.

A weak password in the background of a system causes Command Execution + unauthorized redis Access Vulnerability. Http: // MAID: 8000/jenkinsIt looks like a magic hero game played by agents in the Age of gatheringThe weak password admin/admin can

Dedecms 20150618 inject one (Anti-DDoS injection \ can be injected into the Administrator account) First, let's take a look. Function XSSClean ($ val) {global $ export _soft_lang; if ($ export _soft_lang = 'gb2312 ') gb2utf8 ($ val); if (is_array ($

58. A design defect in express delivery results in arbitrary user login (Registration and unregistered user/Arbitrary user order/account information leakage) First, let's look at a defect and see what impact it will cause. First, the user's username