Cloud Security

Huawei FusionCompute information leakage (CVE-2015-8336)Huawei FusionCompute information leakage (CVE-2015-8336) Release date:Updated on:Affected Systems: Huawei FusionCompute Description: CVE (CAN) ID: CVE-2015-8336FusionSphere is a cloud

Huawei Mate S DoS Vulnerability (CVE-2016-1496)Huawei Mate S DoS Vulnerability (CVE-2016-1496) Release date:Updated on:Affected Systems: Huawei P8 Description: CVE (CAN) ID: CVE-2016-1496Huawei P8 is a smartphone made by Huawei.The graphics

Badlock vulnerability details announcement The vulnerability Badlock, which was publicized three weeks in advance, finally announced the details. Although its practices were criticized, the threats it disclosed were true. The Badlock vulnerability

Apache Ranger JavaScript code injection vulnerability (CVE-2015-0265)Apache Ranger JavaScript code injection vulnerability (CVE-2015-0265) Release date:Updated on:Affected Systems: Apache Group Ranger 0.5.x Description: Bugtraq id: 76208CVE

Huawei Quidway Denial of Service Vulnerability (CVE-2016-3678)Huawei Quidway Denial of Service Vulnerability (CVE-2016-3678) Release date:Updated on:Affected Systems: Huawei Quidway S-Series Switches S9700Huawei Quidway S-Series Switches

Apache Ranger access Restriction Bypass Vulnerability (CVE-2015-0266)Apache Ranger access Restriction Bypass Vulnerability (CVE-2015-0266) Release date:Updated on:Affected Systems: Apache Group Ranger 0.5.x Description: Bugtraq id: 76221CVE

Apache OpenMeeting XSS Vulnerability (CVE-2016-2163)Apache OpenMeeting XSS Vulnerability (CVE-2016-2163) Release date:Updated on:Affected Systems: Apache Group OpenMeetings Description: CVE (CAN) ID: CVE-2016-2163Apache OpenMeetings is an

Multiple of the most popular Firefox extensions include available Vulnerabilities Security researchers found that NoScript, Firebug, Video DownloadHelper, Greasemonkey, FlashGot Mass Down, and other most popular Firefox extensions (except Adblock

Canonical fixes six Ubuntu 15.10 and 14.04 kernel Vulnerabilities In April 6, Canonical released Kernel updates for Ubuntu 15.10 (Wily Werewolf), Ubuntu 15.10 for Raspberry Pi 2, and Ubuntu 14.04 LTS (Trusty Tahr) systems, this Kernel update fixes

Libssh type Obfuscation Vulnerability (CVE-2016-0739)Libssh type Obfuscation Vulnerability (CVE-2016-0739) Release date:Updated on:Affected Systems: Libssh Description: CVE (CAN) ID: CVE-2016-0739Libssh is a C language development kit used to

Ca api Gateway CRLF Injection Vulnerability (CVE-2016-3118)Ca api Gateway CRLF Injection Vulnerability (CVE-2016-3118) Release date:Updated on:Affected Systems: Ca api Gateway 8.4 Ca api Gateway 8.0 Ca api Gateway 7.1 Description: CVE (CAN)

C99 php webshell attacks are intensifying, and a large number of WordPress sites are under threat   Recently, the Management Security Service (MSS) Team of IBM issued a warning that it has been monitored for exploitation.C99 php

PHP Utility Belt Code Execution Vulnerability Originally, I only wanted to create a wheel to analyze the article, so I started the code audit process.This is the story of his vulnerability. It's too easy to find.Determine whether to post and then

Fortinet email server can capture account cookies Fortinet mailbox server url: https://mail.fortinet.com.cnVulnerable port: 443The port has a CVE-2014-0160-heartbleed vulnerability that can read 64 KB of server memory each timeThe first is the

Multiple SQL injections (sensitive information/leakage) at a certain site) Recently I like playing basketball and want to buy a pair of basketball shoes. Then, take the test.Http://info.peaksport.com/UpdateLog/UpdateList.aspx? UpdateYearMonth = 20130

P2P financial security-OK loan Multiple SQL injection vulnerabilities on a site & 15 databases & 0.25 million data information P2P financial security-OK loan Multiple SQL injection vulnerabilities on a site & 15 databases & 0.25 million data

No Logon required-Wukong CRM stored XSS The reason why audit Wukong saw a cloud burst into CRM's getshell, so he wanted to dig it out! However, if you have limited yourself, you may want to dig out unlimitedly accessible files.Occurrence point of

Adobe Flash Player has entered the stage  Adobe Flash Player can be smoothly applied to various platforms, but it is because of its extensive application and its own vulnerabilities that it is always favored by hackers. This time is no exception.For

Detailed analysis process of a DOS attack Trojan 0 × 01 causeThe MD5 values of shards are different. We found that only a few bytes are different (for example,). After a few PgDn attempts, it will end up! The size is only 5 kb. I think of a very

Arbitrary File Upload on an important website of the chain leads to getshell (the root permission can be roaming through the Intranet) Arbitrary File Upload on an important website of the chain leads to getshell (the root permission can be roaming