Cloud Security

PostgreSQL Information Leakage Vulnerability (CVE-2015-3166)PostgreSQL Information Leakage Vulnerability (CVE-2015-3166) Release date:Updated on:Affected Systems: PostgreSQL 9.4PostgreSQL 9.3 Description: Bugtraq id: 74790CVE (CAN) ID: CVE-2015

Cisco IP Phone 7861 DoS Vulnerability (CVE-2015-0751)Cisco IP Phone 7861 DoS Vulnerability (CVE-2015-0751) Release date:Updated on:Affected Systems: Cisco IP Phone 7861 Description: CVE (CAN) ID: CVE-2015-0751Cisco IP Phone 7861 is an IP Phone

Cisco TelePresence TC/TE software Authentication Bypass Vulnerability (CVE-2014-2174)Cisco TelePresence TC/TE software Authentication Bypass Vulnerability (CVE-2014-2174) Release date:Updated on:Affected Systems: Cisco TelePresence TC Software

Linux Kernel Local Privilege Escalation Vulnerability (CVE-2015-3339)Linux Kernel Local Privilege Escalation Vulnerability (CVE-2015-3339) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 74243CVE (CAN) ID: CVE-2015-3

Remote Code Execution Vulnerability (CVE-2015-3990) for multiple Dell SonicWALL Products)Remote Code Execution Vulnerability (CVE-2015-3990) for multiple Dell SonicWALL Products) Release date:Updated on:Affected Systems: Dell Sonicwall GMS Virtual

Samba 'parse _ prs. c' Memory Corruption VulnerabilitySamba 'parse _ prs. c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: Samba Samba 3.0.37 Description: Bugtraq id: 74752Samba is a free software that implements the SMB

QEMU 'hw/block/fdc. c' VENOM Remote Memory Corruption Vulnerability (CVE-2015-3456)QEMU 'hw/block/fdc. c' VENOM Remote Memory Corruption Vulnerability (CVE-2015-3456) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 74640

Linux Kernel Local Privilege Escalation Vulnerability (CVE-2014-9717)Linux Kernel Local Privilege Escalation Vulnerability (CVE-2014-9717) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 74226CVE (CAN) ID: CVE-20

Python 'ssl. match_hostname () 'Function Security Restriction Bypass VulnerabilityPython 'ssl. match_hostname () 'Function Security Restriction Bypass Vulnerability Release date:Updated on:Affected Systems: Python Description: Bugtraq id: 74707

Microsoft Windows Local Privilege Escalation Vulnerability (CVE-2015-1701) (MS15-051)Microsoft Windows Local Privilege Escalation Vulnerability (CVE-2015-1701) (MS15-051) Release date:Updated on:Affected Systems: Microsoft Windows VistaMicrosoft

Powershell rebound posture and forensics (1) Labofapenetrationtester is published in the form of "week of powershell shell", which is an article published every day. There are five articles in total:Day 1-Interactive PowerShell shells over TCPDay

Small Backup File Script in CentOS Script description: Back up all directories defined in array a and keep them for 7 days. Data earlier than 7 days will be deleted. Bak_dir is the directory to be moved to after the backup The backup file name

CentOS anti-CC attack shell script #! /Bin/shcd/var/log/httpd/cat access_log | awk '{print $1}' | sort | uniq-c | sort-n-r | head-n 20> acp/dev/null access_logcp/dev/null error_logcp/dev/null limit. shcp/dev/null c # awk '{print $2} 'a | awk-F.

Another source code leakage in DNSPod Another source code leakage in DNSPodI heard that dnspod is a very cool manufacturer. I don't want to leave it alone. Or is git improperly configured to avoid repeated sending of twoBlog.dnspod.cn  /** MySQL

Dimon online loan P2P online loan system reset any user password + User mobile phone number traversal + arbitrary message Deletion Reset any user password 1. Enable password retrieval.2.6-digit verification code. Go to http: // www. *. com/password/

Mysql brute-force database Summary 1. Judge the version and ord (mid (version (), 4.0)> 51 and return normal. It indicates that it is later than version and supports ounion query.2. Number of fields to be guessed,You can also guess with order,You

Google research found that website security issues are not actually safe For enhanced security, multiple websites often have security issues beyond the password. However, Google's in-depth research shows that the last line of defense after the

CSRF Cross-Site Request Forgery Attack + Case Analysis I recently read "web Front-end hacker technology secrets", instead of trying to learn three abuse methods, just to prevent myself from being cheated... Because the same-origin policy is adopted,

SQL Injection Vulnerability exposure-advanced After reading the introductory and advanced articles, you can practice a little bit to crack common websites. However, if you cannot guess the table name or the program author filters out some special

Baidu repair XSS can be bypassed Baidu repair xss can be bypassed More and more absurd-fixing xss leading to more serious xssFirst, an xssWooYun: Baidu XSSNo filtering, POC:  Http://box.zhangmen.baidu.com/box-jump.html? U = javascript: alert %