Cloud Security

Elasticsearch remote execution vulnerability affects many domestic SERVER CLUSTERS Search for the keyword "You Know, for search country: CN port: 9200" from the Internet of Satan"Portal: Http://www.shodanhq.com/search? Q = You + Know % 2 Cfor +

Linux Kernel TCP_MAXSEG Local Denial of Service Vulnerability Release date:Updated on: Affected Systems:Linux kernel 2.6.xDescription:--------------------------------------------------------------------------------Bugtraq id: 44830Cve id: CVE-2010-

LiveZilla 'setcookievalue () 'function PHP Object Injection Vulnerability Release date:Updated on: Affected Systems:LiveZilla GmbH LiveZilla Description:--------------------------------------------------------------------------------Bugtraq id: 643

Advantech WebAccess Remote Information Leakage Vulnerability (CVE-2014-2366) Release date:Updated on: Affected Systems:Advantech WebAccess HMI/SCADA

LZ4 'lz4. c' Memory Corruption Vulnerability Release date:Updated on: Affected Systems:LZ4 LZ4 Description:--------------------------------------------------------------------------------Bugtraq id: 68349CVE (CAN) ID: CVE-2014-4715 LZ4 is a fast

Huawei E355 HTML injection vulnerability in CVE-2014-2968) Release date:Updated on: Affected Systems:Huawei E355Description:--------------------------------------------------------------------------------Bugtraq id: 68769CVE (CAN) ID: CVE-2014-2968

Advantech WebAccess Remote Authentication Bypass Vulnerability (CVE-2014-2367) Release date:Updated on: Affected Systems:Advantech WebAccess HMI/SCADA

Apache HTTP Server Remote Denial of Service Vulnerability (CVE-2014-3523) Release date:Updated on: Affected Systems:Apache Group HTTP Server

Cisco Wireless LAN Controller DoS (CVE-2014-3291) Release date:Updated on: Affected Systems:Cisco Wireless LAN ControllerDescription:--------------------------------------------------------------------------------Bugtraq id: 67926CVE (CAN) ID: CVE-

Adobe Flash Player and AIR cross-site scripting (CVE-2014-0533) Release date:Updated on: Affected Systems:Adobe Flash Player 13.xAdobe AIR 13.xDescription:--------------------------------------------------------------------------------Bugtraq id: 679

Juniper NetScreen Firewall DNS query Denial of Service Vulnerability Release date:Updated on: Affected Systems:Juniper Networks NetScreen Firewall

Foxit pdf sdk dll "FPDFBookmark_GetTitle ()" Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Foxit pdf sdk dll Description:--------------------------------------------------------------------------------Foxit pdf sdk dll is

New Android vulnerabilities leak sensitive information IBM researchers found that about 86% of Android phones have a vulnerability. Hackers may obtain sensitive information about users, including keys for banking services and Virtual Private

Analysis of "DNS tunnel" account theft Trojan Trojan Horse stealing is a secret to everyone. With the increasing popularity of the network, the online account and password become more and more important, and the vitality of the Trojan Horse is

Xss + csrf: How can I upload a sentence?I hope it will be useful to you. Title: xss + csrf prerequisites for uploading a sentence: you must know the background upload point. 1. Find the place where xss exists to submit the code: for example: 2.

WebLogicV10.0 using shell in the backgroundToday, I tested a site. The JSP environment is weblogic, and the system has a weak password. weblogic/weblogic does not use shell when logging on to the background. The online search is based on the 8.0

Php web website development securityPhp is an easy-to-use and easy-to-use computer programming language. I didn't know much about php security at work, and I have written some programs: the data submitted at the front end is not escaped (html tags

Multiple security vulnerabilities in beinmei can cause the fall of the IntranetLet's see how I penetrated beinmei's intranet.Proof of vulnerability: After looking for a long time, I finally found a breakthrough in Bein's internal network. This

TinyShop v1.0.1 SQL injection can cause database information leakageTinyShop v1.0.1 SQL injection can cause database information leakage (Official Website demonstration + source code analysis) Ignoring gpc details:/protected/controllers/ajax. php //

DedeCMS latest foreground SQL injection and repairSee also SQL injection, a small problem caused by multiple cases... dedeCMS imposes severe restrictions on user names and email addresses during registration, but does not impose any restrictions on