Cloud Security

RSA vulnerabilities expose the private key of an HTTPS website Red Hat security researcher Florian weilian Report (PDF), network hardware sold by multiple manufacturers does not properly implement the RSA public key encryption system, HTTPS

Binutils 'ihex. c' Stack Buffer Overflow VulnerabilityBinutils 'ihex. c' Stack Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: GNU Binutils Description: Bugtraq id: 76321GNU BinUtils is a binary tool set used to perform

FreeBSD TCP Denial of Service Vulnerability (CVE-2015-1417)FreeBSD TCP Denial of Service Vulnerability (CVE-2015-1417) Release date:Updated on:Affected Systems: FreeBSD Description: CVE (CAN) ID: CVE-2015-1417VNET is a network stack

Microsoft Office Memory Corruption Vulnerability (CVE-2015-1642) (MS15-081)Microsoft Office Memory Corruption Vulnerability (CVE-2015-1642) (MS15-081) Release date:Updated on:Affected Systems: Microsoft Office 2013Microsoft Office 2010Microsoft

Adobe Flash Player/AIR integer overflow vulnerability in APSB15-19)Adobe Flash Player/AIR Integer Overflow Vulnerability (APSB15-19) Release date:Updated on:Affected Systems: Adobe Flash Player Adobe Flash Player Adobe Flash Player Description:

Java 0-day vulnerability discovered for the first time in two years Oracle recently announced the first Java 0-day vulnerability in the past two years. It affects the Java Web Start application sandbox and Java applets sandbox. Considering that the

PHP 'unserialize () 'function re-exploits Multiple Memory Corruption Vulnerabilities after being releasedPHP 'unserialize () 'function re-exploits Multiple Memory Corruption Vulnerabilities after being released Release date:Updated on:Affected

Apple Safari Multiple security restriction bypass vulnerabilities (CVE-2015-3755)Apple Safari Multiple security restriction bypass vulnerabilities (CVE-2015-3755) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari

Wireshark ZigBee parser DoS Vulnerability (CVE-2015-6244)Wireshark ZigBee parser DoS Vulnerability (CVE-2015-6244) Release date:Updated on:Affected Systems: Wireshark Wireshark 1.12.x Description: Bugtraq id: 76383CVE (CAN) ID:

Cisco TelePresence VCS Expressway Denial of Service Vulnerability (CVE-2015-4315)Cisco TelePresence VCS Expressway Denial of Service Vulnerability (CVE-2015-4315) Release date:Updated on:Affected Systems: Cisco TelePresence Video Communication

Apple Safari WebKit page loading information leakage VulnerabilityApple Safari WebKit page loading information leakage Vulnerability Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id: 7633

QEMU 'virtio-serial-bus.c 'Local Buffer Overflow VulnerabilityQEMU 'virtio-serial-bus.c 'Local Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 76201CVE (CAN) ID: CVE-2015-5745QEMU is an

Kernel Virtual Machine Memory Corruption Vulnerability (CVE-2015-2877)Kernel Virtual Machine Memory Corruption Vulnerability (CVE-2015-2877) Release date:Updated on:Affected Systems: KVM Description: Bugtraq id: 76256CVE (CAN) ID: CVE-2015-2877

From the compiler backdoor to the JS Backdoor On def con 23, the security researcher reported on Travis Goodspeed that the CLANG compiler with a bug was used to implant the Privilege Escalation backdoor vulnerability at the compilation time to

Cisco ACE 4710 Application Control Engine CLI Privilege Escalation VulnerabilityCisco ACE 4710 Application Control Engine CLI Privilege Escalation Vulnerability Release date:Updated on:Affected Systems: Cisco edas 4710 Description: CVE (CAN)

In Linux, how does one encrypt cloud storage files and folders? Most of us use cloud storage services such as Dropbox, Gdrive, or Copy to use synchronized files from any of our devices anytime and anywhere. However, no one can safely put their

XSS Challenges WriteUp0x01: Description Recently I found a good XSS exercise level ---- XSS Challenges. If you are interested, you can do it ==> portal Here I will share with you the writeup of some levels to learn from each other.0x02:

Dangerous upload dialog boxShare an old article. I read an article "ui-redressing on Html5 new features" on ASRC a few years ago and wrote some improvement solutions.File Dialog Box file upload dialog box is a Web page control that has always

SQL injection quick query table (lower) and Oracle injection quick query table0x00 directory blind note about blind note instances in actual blind note latency blind note waitfor delay [time] (S) instance BENCHMARK () (M) instance pg_sleep (seconds)

SQL injection vulnerability in CmsTop media Edition The problem occurs in the uc. php interface. The key is the default one, but the UC interface is not correctly enabled. Because the GPC is disabled in the code, injection may occur. $ Set = setting