Cloud Security

Adobe Flash Player Stack Buffer Overflow Vulnerability (CVE-2014-9163) (apsb14-27) Release date:Updated on: Affected Systems:Adobe Flash Player Description:Bugtraq id: 71582CVE (CAN) ID: CVE-2014-9163 Adobe Flash Player is an integrated

Mozilla Firefox Security Restriction Bypass Vulnerability (CVE-2014-8631) Release date: 2014-12-02Updated on: Affected Systems:Mozilla Firefox Description:Bugtraq id: 71560CVE (CAN) ID: CVE-2014-8631 Firefox is a WEB browser released by

Multiple security vulnerabilities in Google App Engine Java Security Sandbox Release date: 2014-6 6Updated on: Affected Systems:Google App EngineDescription:Bugtraq id: 71522 Google App Engine allows Web developers to develop their own Web

MantisBT 'Copy _ field. php' Cross-Site Scripting Vulnerability Release date: 2014-12-01Updated on: 2014-4 4 Affected Systems:Mantisbt 1.1.0a3-1.2.17Description:Bugtraq id: 71375 MantisBT is a Web-based bug Tracking System. MantisBT 1.1.0a3-1.2.1

UnRTF File Processing out-of-bounds Memory Corruption Vulnerability Release date: 2014-3 3Updated on: 2014-6 6 Affected Systems:UnRTFDescription:Bugtraq id: 71430 UnRTF is a command line software written in C language. The UnRTF memory

Tcpdump Buffer Overflow Vulnerability (CVE-2014-9140) Release date:Updated on: 2014-6 6 Affected Systems:TcpdumpDescription:Bugtraq id: 71468CVE (CAN) ID: CVE-2014-9140 Tcpdump is a sniffing tool running on the command line. It allows users to

Multiple Denial of Service Vulnerabilities in SEIL series routers (CVE-2014-7256) Release date: 2014-12-01Updated on: 2014-3 3 Affected Systems:SEIL RoutersDescription:Bugtraq id: 71385CVE (CAN) ID: CVE-2014-7256 SEIL Router is a vro from the

Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2014-8989) Release date:Updated on: 2014-3 3 Affected Systems:Linux kernel Description:Bugtraq id: 71367CVE (CAN) ID: CVE-2014-8989 Linux Kernel is the Kernel of the Linux

Summary of Windows penetration and Elevation of Privilege (1) This article summarizes multiple techniques for Windows penetration and Elevation of Privilege, including: MSSQL query analyzer connection record clearing, VNC and Radmin elevation

Windows 8.1 security: enterprise functions and tools Microsoft has released Windows 8.1 Enterprise Edition for several months. What security issues are worth noting? For enterprises, the most attractive security feature of Windows 8.1 is to

Three considerations for protection against malware in the vdi Environment In a VDI environment, administrators need to protect organizations against malware, but this process does not include antivirus software that may cause problems. There are

How to protect the LAMP server on CentOS or RHEL (1) LAMP is a set of software architecture, including these components: Linux (operating system as the basic layer), Apache (website server located on the operating system), MySQL (or MariaDB, as a

Inspur released its first trusted server to fill the gaps in the cloud security field At 2014 China Internet Security Conference, inspur released the industry's first trusted server for cloud data centers. This release means that inspur's host

One SQL Injection in rice CMS Lines 147-163 of the \ Web \ Lib \ Action \ MemberAction. class. php file Function modpage () {self: is_login (); $ aid = intval ($ _ REQUEST ['aid ']); if ($ _ POST) {$ _ POST ['status'] = 0; $ _ POST ['title'] =

A sub-station stored XSS + csrf in Baidu Today, as usual, I had nothing to do. I opened hao123 and looked for Station X. Suddenly I saw Baidu traveling and suddenly found some problems. Then my mother no longer had to worry about not replying to my

Getshell at the front end of ThinkSNS   /Apps/page/Lib/Action/DiyAction. class. php line 330: public function getTpl() {$parseTag = model ( 'ParseTag' );$tpl = $_REQUEST ['tpl'];$sign = $_REQUEST ['sign'];$tagName = $_REQUEST ['tagName'];echo

SQL Injection on a website in Digital China to obtain a large amount of database information SQL Injection on a website in Digital China to obtain a large amount of database information  Vulnerability url:

Getshell is one of the latest SQL injections on the Jiangnan keyou bastion host.   0x01 files with Vulnerabilities/System/VDH_Config.phpThe code that generates the vulnerability is as follows: $ Res_names = $ odb-> getresidbypro ($ value

Self-xss ?) XSS caused by lax filtering of AD emails I have a good habit of using nicknames. I like to use . Maybe it will pop up one day. So one day I opened my QQ mailbox and saw an advertisement email reminding me that my friend's birthday was

US online mail text storage type xss can be played blindly (first in various skills)   The US online mail body storage type xss can be played blindly! A variety of cool first! Affected Version ie6-10Xss code:  Email receiving code:  Example:  Xss: