Cloud Security

Mozilla Firefox NSS Spoofing Vulnerability (CVE-2015-2730)Mozilla Firefox NSS Spoofing Vulnerability (CVE-2015-2730) Release date:Updated on:Affected Systems: Mozilla Firefox & lt; 39.0Mozilla Thunderbird Mozilla Firefox ESR Description: CVE (

EMC Documentum D2 multiple DQL Injection Vulnerabilities (CVE-2015-0547)EMC Documentum D2 multiple DQL Injection Vulnerabilities (CVE-2015-0547) Release date:Updated on:Affected Systems: EMC Documentum D2 4.5EMC Documentum D2 4.2EMC Documentum D2 4

PCRE 'pcre _ compile2 () 'Function Heap Buffer Overflow VulnerabilityPCRE 'pcre _ compile2 () 'Function Heap Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: PCRE Description: Bugtraq id: 75174CVE (CAN) ID:

Samsung Galaxy mobile phone users note: the solution to the keyboard security vulnerability is here Samsung finally responded positively to a major security vulnerability in its Galaxy mobile phone and tablet keyboard. This vulnerability was

DedeCMS Arbitrary Code Execution Vulnerability (CVE-2015-4553)DedeCMS Arbitrary Code Execution Vulnerability (CVE-2015-4553) Release date:Updated on:Affected Systems: Dedecms Description: Bugtraq id: 75285CVE (CAN) ID: CVE-2015-4553DedeCms is

Linux Kernel 'fs/ext4/extents. c' Local Denial of Service VulnerabilityLinux Kernel 'fs/ext4/extents. c' Local Denial of Service Vulnerability Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 75139CVE (CAN) ID:

Apache Security Configuration (1) Do you know how Apache is configured? This article describes the Security Configuration of Apache and hopes to help you.   1. Security Policy 1.1 Security directory . Htaccess is used for Directory Security

CentOS server security skills Undoubtedly, improving server security is one of the most important tasks for system administrators. Therefore, there are many articles, blogs, and Forum posts for this topic. A server consists of a large number of

Get the account and password of running TeamViewer Dumps TeamViewer ID, Password and account settings from a running TeamViewer instance by enumerating child windows.  #define WIN32_LEAN_AND_MEAN#include #include #pragma comment( lib, "kernel32"

PHPCMS design defects may cause authkey Leakage Kill all v9 versions (conditional ). The swfupload upload page outputs the MD5 (auth_key + sess_id), phpcms \ modules \ attachment \ functions \ global. func. php: initupload Function function

Kingsoft Xiaoyao another site Client-IP header MySQL blind Injection Kingsoft Xiaoyao another site Client-IP header MySQL blind Injection Injection point: GET /v1/admin/ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36

A simple penetration test for CNKI A process from the Internet to the CNKI Intranet, because there were more important things to do in June, so far. If it is known to be ignored, submit the permission as a note. Pai_^ A process of penetrating the

MySQL blind injection for multiple sites MySQL blind injection for multiple sites Q & A: MySQL injection in the background of the background management system. Multiple similar domain names: http://xunjian.club.xywy.comhttp://dangan.app.xywy.comhttp:

Due to a design defect in movie tickets of Wanda film, a coupon can be given to friends for free. Due to a design defect in movie tickets of Wanda film, a coupon can be given to friends for free. It seems that another website, wwwdemo.wandafilm.com,

XSS of a sub-station in Youku After the video name Parameters entered from other websites are submitted to Youku, the input and output are not filtered, resulting in a vulnerability. When I watched a video on Youku, I accidentally clicked the

Command Execution/xss/order traversal at a sub-station in Gome can roam the Intranet     Order traversal: Http://m.multigold.com.cn/page/myjd/addressEdit.jsp? MemberAddressId = memberaddressid behind 3 is not strictly controlled Command

Sohu focal financial wallet multiple CSRF hijacking of arbitrary accounts and Solutions Http://ibank.focus.cn/account/ Token is not set for Multiple sensitive operations in the account.Set the problem csrf poc: 

PHPCMS Latest Version authkey leakage can take shell Injection Authkey leakage can cause a series of security problems PHPCMS V9 a free-of-charge Vulnerability (http://www.bkjia.com/Article/201409/336420.html)You can refer to this article. The

Latest Wecenter Injection Ignore GPC and inject it to the official website In models/online. php  class online_class extends AWS_MODEL{public function online_active($uid, $last_active){if (!$uid OR $last_active + 60 > time()){return false;}$data =

Why are so many websites still vulnerable?Why are there still many website vulnerabilities? This is a concern of many users. Vulnerabilities on most enterprise websites include vulnerabilities in OpenSSL, PHP, and WordPress. These vulnerabilities