Cloud Security

Remote Code Execution Vulnerability (CVE-2015-3990) for multiple Dell SonicWALL Products)Remote Code Execution Vulnerability (CVE-2015-3990) for multiple Dell SonicWALL Products) Release date:Updated on:Affected Systems: Dell Sonicwall GMS Virtual

Samba 'parse _ prs. c' Memory Corruption VulnerabilitySamba 'parse _ prs. c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: Samba Samba 3.0.37 Description: Bugtraq id: 74752Samba is a free software that implements the SMB

QEMU 'hw/block/fdc. c' VENOM Remote Memory Corruption Vulnerability (CVE-2015-3456)QEMU 'hw/block/fdc. c' VENOM Remote Memory Corruption Vulnerability (CVE-2015-3456) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 74640

Wireshark Memory leakage Vulnerability (CVE-2015-3813)Wireshark Memory leakage Vulnerability (CVE-2015-3813) Release date:Updated on:Affected Systems: Wireshark 1.12.0-1.12.4 Description: Bugtraq id: 74633CVE (CAN) ID: CVE-2015-3813Wireshark

Linux Kernel Local Privilege Escalation Vulnerability (CVE-2014-9717)Linux Kernel Local Privilege Escalation Vulnerability (CVE-2014-9717) Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq id: 74226CVE (CAN) ID: CVE-20

Python 'ssl. match_hostname () 'Function Security Restriction Bypass VulnerabilityPython 'ssl. match_hostname () 'Function Security Restriction Bypass Vulnerability Release date:Updated on:Affected Systems: Python Description: Bugtraq id: 74707

PHP Buffer Overflow Vulnerability (CVE-2015-3329)PHP Buffer Overflow Vulnerability (CVE-2015-3329) Release date:Updated on:Affected Systems: PHP Description: Bugtraq id: 74240CVE (CAN) ID: CVE-2015-3329PHP is a widely used scripting

GNU glibc Multiple Buffer Overflow Vulnerability (CVE-2015-1781)GNU glibc Multiple Buffer Overflow Vulnerability (CVE-2015-1781) Release date:Updated on:Affected Systems: GNU glibc Description: Bugtraq id: 74255CVE (CAN) ID: CVE-2015-1781Glibc

ProFTPD Information Leakage Vulnerability (CVE-2015-3306)ProFTPD Information Leakage Vulnerability (CVE-2015-3306) Release date:Updated on:Affected Systems: ProFTPD Project ProFTPD Description: Bugtraq id: 74238CVE (CAN) ID:

WebKit Memory Corruption Vulnerability (CVE-2015-1153)WebKit Memory Corruption Vulnerability (CVE-2015-1153) Release date:Updated on:Affected Systems: Apple Safari Apple Safari Apple Safari Description: Bugtraq id: 74523CVE (CAN) ID: CVE-2015-

SQLite 'src/where. c' Memory Corruption VulnerabilitySQLite 'src/where. c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: SQLite Description: Bugtraq id: 74313SQLite is an embedded database.SQLite has the remote

Google Chrome post-release Reuse Vulnerability (CVE-2015-1243)Google Chrome post-release Reuse Vulnerability (CVE-2015-1243) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-1243Google Chrome is a Web

Pillow plugin 2kimageplugin plug-in Denial of Service Vulnerability (CVE-2014-3598)Pillow plugin 2kimageplugin plug-in Denial of Service Vulnerability (CVE-2014-3598) Release date:Updated on:Affected Systems: Python Software Foundation Pillow

Small Backup File Script in CentOS Script description: Back up all directories defined in array a and keep them for 7 days. Data earlier than 7 days will be deleted. Bak_dir is the directory to be moved to after the backup The backup file name

CentOS anti-CC attack shell script #! /Bin/shcd/var/log/httpd/cat access_log | awk '{print $1}' | sort | uniq-c | sort-n-r | head-n 20> acp/dev/null access_logcp/dev/null error_logcp/dev/null limit. shcp/dev/null c # awk '{print $2} 'a | awk-F.

SQL Injection Vulnerability exposure-advanced After reading the introductory and advanced articles, you can practice a little bit to crack common websites. However, if you cannot guess the table name or the program author filters out some special

Baidu repair XSS can be bypassed Baidu repair xss can be bypassed More and more absurd-fixing xss leading to more serious xssFirst, an xssWooYun: Baidu XSSNo filtering, POC:  Http://box.zhangmen.baidu.com/box-jump.html? U = javascript: alert %

Tampering with HTTP requests by bypassing Web authorization and authentication What is an HTTP request?Hypertext Transfer Protocol (HTTP) provides multiple request methods to communicate with web servers. Of course, the original intention of most

Injection learning records in MCIR Environment: xampp-win32-5.6.3-0-VC11 mcirPreface Mcir is also one of the top ten, but how does one feel that no one has written such information about it? This is really hard for a newbie to learn this system, and

An API defect of Youku leads to credential stuffing to obtain VIP accounts (proving that a large number of VIP users can be obtained) A library hit query VIP caused by an API defect in Youku Step 1:Use android-based Youku to log on and capture