Cloud Security

Code exposure using the Android Stagefright Vulnerability When Google and its partners are busy pushing patches to devices of end users, attackers can control the attack code of Android devices without their knowledge. The high-risk vulnerability

Multiple stack buffer overflow vulnerabilities in Yokogawa (CVE-2015-5627)Multiple stack buffer overflow vulnerabilities in Yokogawa (CVE-2015-5627) Release date:Updated on:Affected Systems: Yokogawa Exaopc Yokogawa centum vp EntryYokogawa CENTUM

OpenLDAP ber_get_next Denial of Service Vulnerability (CVE-2015-6908)OpenLDAP ber_get_next Denial of Service Vulnerability (CVE-2015-6908) Release date:Updated on:Affected Systems: OpenLDAP OpenLDAP Description: CVE (CAN) ID: CVE-2015-6908OpenLDAP

Kirby cms csrf upload and PHP Script Execution VulnerabilityKirby cms csrf upload and PHP Script Execution Vulnerability Release date:Updated on:Affected Systems: Kirby CMS Kirby CMS Description: Kirby CMS is a file-based content management

JSPMySQL Administrador Cross-Site Scripting Vulnerability (CVE-2015-6945)JSPMySQL Administrador Cross-Site Scripting Vulnerability (CVE-2015-6945) Release date:Updated on:Affected Systems: JSPMySQL Administrador JSPMySQL Administrador

FortiClient Antivirus unauthorized operation Vulnerability (CVE-2015-5735)FortiClient Antivirus unauthorized operation Vulnerability (CVE-2015-5735) Release date:Updated on: 2015-09-06Affected Systems: FortiGuard forticlient 5.2.4 Description:

MediaWiki reset Function Denial of Service Vulnerability (CVE-2015-6735)MediaWiki reset Function Denial of Service Vulnerability (CVE-2015-6735) Release date:Updated on: 2015-09-02Affected Systems: MediaWiki MediaWiki MediaWiki Description:

FreeBSD TCP Denial of Service Vulnerability (CVE-2015-1417)FreeBSD TCP Denial of Service Vulnerability (CVE-2015-1417) Release date:Updated on:Affected Systems: FreeBSD Description: CVE (CAN) ID: CVE-2015-1417VNET is a network stack

Adobe Flash Player/AIR integer overflow vulnerability in APSB15-19)Adobe Flash Player/AIR Integer Overflow Vulnerability (APSB15-19) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player Description:

GNU Coreutils '/lib/fts. c' local competitive Condition VulnerabilityGNU Coreutils '/lib/fts. c' local competitive Condition Vulnerability Release date:Updated on:Affected Systems: GNU Coreutils Description: Bugtraq id: 76073CVE (CAN) ID: CVE-2

Linux Kernel indirect IO path Handling Integer Overflow VulnerabilityLinux Kernel indirect IO path Handling Integer Overflow Vulnerability Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 76148Linux Kernel is

Multiple IBM product Denial of Service Vulnerabilities (CVE-2015-4936)Multiple IBM product Denial of Service Vulnerabilities (CVE-2015-4936) Release date:Updated on:Affected Systems: IBM WebSphere eXtreme Scale 8.6-8.6.0.8 Description: Bugtraq

Wireshark WaveAgent Dissector DoS Vulnerability (CVE-2015-6246)Wireshark WaveAgent Dissector DoS Vulnerability (CVE-2015-6246) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq id: 76381CVE (CAN) ID: CVE-2015-

How to use ASP. NET to encrypt passwords and asp.net to encrypt passwordsWhen we create databases on our websites, it is necessary to protect user information security. Most users do not want to let others know their own information, and the network

How can enterprises defend against weak cloud passwords? Weak passwords are a common threat for enterprises that rely on cloud services. Expert Dejan Lukan summarized some best practices on passwords. Cloud services have sprung up in the past few

In Linux, how does one encrypt cloud storage files and folders? Most of us use cloud storage services such as Dropbox, Gdrive, or Copy to use synchronized files from any of our devices anytime and anywhere. However, no one can safely put their

In-depth analysis of Cross-Site Request Forgery from the perspective of hackers When testing Web applications, the automated tools we use sometimes miss some very serious security vulnerabilities. Cross-Site Request Forgery is one of them. Therefore,

XSS Challenges WriteUp0x01: Description Recently I found a good XSS exercise level ---- XSS Challenges. If you are interested, you can do it ==> portal Here I will share with you the writeup of some levels to learn from each other.0x02:

In a Typecho Blog system, xss can be stored in the background shell. Write an article and comment on it.   Insert xss code. Then it is found to be hidden, which is obviously not filtered out.Reply to the code containing xss  Assume that the

P2p Financial Security: A system vulnerability in Credit Suisse List the system problems:1. The business system is open to the public network2. weak passwords and no brute-force cracking mechanism3. The system has an excessive permission