Cloud Security

Huawei VP9660 Information Leakage Vulnerability (CVE-2015-8227)Huawei VP9660 Information Leakage Vulnerability (CVE-2015-8227) Release date:Updated on:Affected Systems: Huawei VP9660 Description: CVE (CAN) ID: CVE-2015-8227Huawei VP9660 is a

CloudBees Jenkins CSRF mechanism Bypass Vulnerability (CVE-2015-5318)CloudBees Jenkins CSRF mechanism Bypass Vulnerability (CVE-2015-5318) Release date:Updated on:Affected Systems: CloudBees Jenkins CloudBees Jenkins Description: CVE (CAN) ID:

FFmpeg init_tile Function Denial-of-Service Vulnerability (CVE-2015-8219)FFmpeg init_tile Function Denial-of-Service Vulnerability (CVE-2015-8219) Release date:Updated on:Affected Systems: FFmpeg Description: CVE (CAN) ID: CVE-2015-8219FFmpeg

Node. js is facing two important security vulnerabilities and is planned to be repaired next week. The Node. js Foundation discloses a denial of service and an out-of-bounds Access Vulnerability, and plans to provide patch updates next week to fix

Apple iWork Memory Corruption Vulnerability (CVE-2015-7034)Apple iWork Memory Corruption Vulnerability (CVE-2015-7034) Release date:Updated on:Affected Systems: Apple iWork Description: CVE (CAN) ID: CVE-2015-7034Apple iWork is an office

Linux kernel Denial of Service Vulnerability (CVE-2015-7799)Linux kernel Denial of Service Vulnerability (CVE-2015-7799) Release date:Updated on:Affected Systems: Linux kernel Description: CVE (CAN) ID: CVE-2015-7799Linux Kernel is the Kernel

Cisco ASR 5500 SAE gateway Denial of Service Vulnerability (CVE-2015-6351)Cisco ASR 5500 SAE gateway Denial of Service Vulnerability (CVE-2015-6351) Release date:Updated on:Affected Systems: Cisco ASR 5500 19.2.0Cisco ASR 5500 19.1.0.61559

Apache Ambari server side Request Forgery Vulnerability (CVE-2015-1775)Apache Ambari server side Request Forgery Vulnerability (CVE-2015-1775) Release date:Updated on:Affected Systems: Apache Group Ambari Description: CVE (CAN) ID: CVE-2015-17

Youxin second-hand car ownership management system SQL injection (leakage of a large number of car owner information and ID card front and back photos) A large number of car owner information (name/mobile phone number/license plate

Auspicious aviation logic vulnerability allows you to reset any User Password Incorrect Design for password retrieval at the auspicious airlines Main SiteStep 2 send the verification code to capture packetsBecause there is no limit on the number of

The SQL injection vulnerability exists in the official APP of codoon Network (cross-5 databases + with bypass verification scripts) SQL Injection for APP security Target: Official APP of codoonCheck that SQL Injection exists in the following places:

Mysql error injection (explicit error injection) sorting 1. floor brute-force Error/* Database version */And (select 1 from (select count (*), concat (select concat (0x7e, version (), 0x7e) from information_schema.tables limit 0, 1 ), floor (rand (0)

XSS rollback Test Although the same-origin policy limits Js access to dom of non-same-origin sites However, we can still use window. name to transmit cookies across domains. In this way, a reflected XSS is encapsulated as a storage XSS. This example

Mysql blind note tips A new method for improving the efficiency of guessing in MySQL blind injection.This method is better than the binary method and bitwise method,Query request example:AND (SELECT @ a: = MID (BIN (FIND_IN_SET (MID (table_name, 1,

Record the intrusion of ASP. NET websites and how to avoid intrusion First, I want to declare whether the program written in any language is not safe, but how the code writer writes the program. I went to the customer's research a few days ago and

Operator security-China Telecom SQL Injection on a site (involving 9 databases and data leakage of 0.43 million users) Operator security: an SQL injection vulnerability in China Telecom has been injected into URLhttp: // **. **: 9080/home/index.

A weak password in the background of a system causes Command Execution + unauthorized redis Access Vulnerability. Http: // MAID: 8000/jenkinsIt looks like a magic hero game played by agents in the Age of gatheringThe weak password admin/admin can

An OA General SQL Injection Vulnerability 1) General SQL injection vulnerability vendor: Source day SoftwareURL: http://www.visionsoft.com.cn/Vulnerability link: ServiceAction/com. velcro. base. DataActionNote: the OA system uses mssql and oracle

Permission 5 site full site cannot write webshell Method When you see a website (ignore 10 thousand words here), crawlers first. Use this tool I found a info directory suspicious. After opening it, I decided that it was WordPress based on my years

A website of hesheng yuan can use getshell to threaten Intranet Security (disclosing some personnel information and discovering previous footprints) A sub-station of hesheng yuan can shell into the IntranetHttp: // 58.62.201.210/   The integration