Cloud Security

Adobe Flash Player Stack Buffer Overflow Vulnerability (CVE-2014-9163) (apsb14-27) Release date:Updated on: Affected Systems:Adobe Flash Player Description:Bugtraq id: 71582CVE (CAN) ID: CVE-2014-9163 Adobe Flash Player is an integrated

Mozilla Firefox Security Restriction Bypass Vulnerability (CVE-2014-8631) Release date: 2014-12-02Updated on: Affected Systems:Mozilla Firefox Description:Bugtraq id: 71560CVE (CAN) ID: CVE-2014-8631 Firefox is a WEB browser released by

MantisBT 'Copy _ field. php' Cross-Site Scripting Vulnerability Release date: 2014-12-01Updated on: 2014-4 4 Affected Systems:Mantisbt 1.1.0a3-1.2.17Description:Bugtraq id: 71375 MantisBT is a Web-based bug Tracking System. MantisBT 1.1.0a3-1.2.1

UnRTF File Processing out-of-bounds Memory Corruption Vulnerability Release date: 2014-3 3Updated on: 2014-6 6 Affected Systems:UnRTFDescription:Bugtraq id: 71430 UnRTF is a command line software written in C language. The UnRTF memory

PhpMyAdmin long password processing DoS Vulnerability Release date: 2014-3 3Updated on: 2014-6 6 Affected Systems:PhpMyAdmin 4.xPhpMyAdminDescription:Bugtraq id: 71434CVE (CAN) ID: CVE-2014-9218 Phpmyadmin is an online management tool for MySQL

Tcpdump Buffer Overflow Vulnerability (CVE-2014-9140) Release date:Updated on: 2014-6 6 Affected Systems:TcpdumpDescription:Bugtraq id: 71468CVE (CAN) ID: CVE-2014-9140 Tcpdump is a sniffing tool running on the command line. It allows users to

Summary of Windows penetration and Elevation of Privilege (1) This article summarizes multiple techniques for Windows penetration and Elevation of Privilege, including: MSSQL query analyzer connection record clearing, VNC and Radmin elevation

Two Linux backdoors: suid shell and inetd Backdoor Prerequisites: You are now a root user and want to leave a backdoor. System Environment: dawg:~# uname -a Linux dawg 2.4.20-1-386 #3 Sat Mar 22 12:11:40 EST 2003 i686 GNU/Linux 1. SUID shell First,

Three considerations for protection against malware in the vdi Environment In a VDI environment, administrators need to protect organizations against malware, but this process does not include antivirus software that may cause problems. There are

Nine common methods to protect Linux System Security In this world, it is very important to ensure the security of Linux-based systems. But you have to know how to do it. A simple anti-malware software is far from enough. You need to take other

How to protect the LAMP server on CentOS or RHEL (1) LAMP is a set of software architecture, including these components: Linux (operating system as the basic layer), Apache (website server located on the operating system), MySQL (or MariaDB, as a

Inspur released its first trusted server to fill the gaps in the cloud security field At 2014 China Internet Security Conference, inspur released the industry's first trusted server for cloud data centers. This release means that inspur's host

One SQL Injection in rice CMS Lines 147-163 of the \ Web \ Lib \ Action \ MemberAction. class. php file Function modpage () {self: is_login (); $ aid = intval ($ _ REQUEST ['aid ']); if ($ _ POST) {$ _ POST ['status'] = 0; $ _ POST ['title'] =

A sub-station stored XSS + csrf in Baidu Today, as usual, I had nothing to do. I opened hao123 and looked for Station X. Suddenly I saw Baidu traveling and suddenly found some problems. Then my mother no longer had to worry about not replying to my

Supesite injection (improves yourself to manage) The passwords injected by Supesite cannot be broken.If you can directly upgrade yourself to an administrator or change the management password, it would be better.In a hurry. In index. php if($_SGET['

Supesite foreground injection #2 (Insert) Insert ignore GPCSupesite installation has ucenterTry to inject uckey into a pair of trousers.Then ......  To see the Global File if(!(get_magic_quotes_gpc())) {$_GET = saddslashes($_GET);$_POST =

Getshell at the front end of ThinkSNS   /Apps/page/Lib/Action/DiyAction. class. php line 330: public function getTpl() {$parseTag = model ( 'ParseTag' );$tpl = $_REQUEST ['tpl'];$sign = $_REQUEST ['sign'];$tagName = $_REQUEST ['tagName'];echo

SQL Injection on a website in Digital China to obtain a large amount of database information SQL Injection on a website in Digital China to obtain a large amount of database information  Vulnerability url:

General SQL Injection exists in a system of Tongda OA (with injection techniques)   Recently learned SQL InjectionIn fact, it's only common. Is there an error-based injection to verify the version?Office Anywhere 2008 network smart Office

Getshell is one of the latest SQL injections on the Jiangnan keyou bastion host.   0x01 files with Vulnerabilities/System/VDH_Config.phpThe code that generates the vulnerability is as follows: $ Res_names = $ odb-> getresidbypro ($ value