Cloud Security

Elasticsearch remote execution vulnerability affects many domestic SERVER CLUSTERS Search for the keyword "You Know, for search country: CN port: 9200" from the Internet of Satan"Portal: Http://www.shodanhq.com/search? Q = You + Know % 2 Cfor +

Linux Kernel TCP_MAXSEG Local Denial of Service Vulnerability Release date:Updated on: Affected Systems:Linux kernel 2.6.xDescription:--------------------------------------------------------------------------------Bugtraq id: 44830Cve id: CVE-2010-

LiveZilla 'setcookievalue () 'function PHP Object Injection Vulnerability Release date:Updated on: Affected Systems:LiveZilla GmbH LiveZilla Description:--------------------------------------------------------------------------------Bugtraq id: 643

Advantech WebAccess Remote Information Leakage Vulnerability (CVE-2014-2366) Release date:Updated on: Affected Systems:Advantech WebAccess HMI/SCADA

LZ4 'lz4. c' Memory Corruption Vulnerability Release date:Updated on: Affected Systems:LZ4 LZ4 Description:--------------------------------------------------------------------------------Bugtraq id: 68349CVE (CAN) ID: CVE-2014-4715 LZ4 is a fast

Huawei E355 HTML injection vulnerability in CVE-2014-2968) Release date:Updated on: Affected Systems:Huawei E355Description:--------------------------------------------------------------------------------Bugtraq id: 68769CVE (CAN) ID: CVE-2014-2968

Advantech WebAccess Remote Authentication Bypass Vulnerability (CVE-2014-2367) Release date:Updated on: Affected Systems:Advantech WebAccess HMI/SCADA

Multiple Cross-Site Scripting Vulnerabilities in phpMyAdmin libraries/structure. lib. php Release date:Updated on: Affected Systems:PhpMyAdmin 4.2.xPhpMyAdmin 4.1.xPhpMyAdmin 4.0.xDescription:----------------------------------------------------------

Apache HTTP Server Remote Denial of Service Vulnerability (CVE-2014-3523) Release date:Updated on: Affected Systems:Apache Group HTTP Server

Samba Memory Corruption Vulnerability (CVE-2014-3493) Release date:Updated on: Affected Systems:Samba Samba Samba Description:--------------------------------------------------------------------------------Bugtraq id: 68150CVE (CAN) ID: CVE-2014-3493

HP Release Control Vulnerability (CVE-2014-2612) Release date:Updated on: 2014-07-01 Affected Systems:HP Release ControlDescription:--------------------------------------------------------------------------------Bugtraq id: 68244CVE (CAN) ID: CVE-2

Foxit pdf sdk dll "FPDFBookmark_GetTitle ()" Buffer Overflow Vulnerability Release date:Updated on: Affected Systems:Foxit pdf sdk dll Description:--------------------------------------------------------------------------------Foxit pdf sdk dll is

New Android vulnerabilities leak sensitive information IBM researchers found that about 86% of Android phones have a vulnerability. Hackers may obtain sensitive information about users, including keys for banking services and Virtual Private

Automatic sending of emails in CentOS to check whether a process exists Purpose: use shell scripts to check whether the database is running hourly and send an email alert when the database is down. 1. Check if sendmail is running Service sendmail

Analysis of "DNS tunnel" account theft Trojan Trojan Horse stealing is a secret to everyone. With the increasing popularity of the network, the online account and password become more and more important, and the vitality of the Trojan Horse is

Xss + csrf: How can I upload a sentence?I hope it will be useful to you. Title: xss + csrf prerequisites for uploading a sentence: you must know the background upload point. 1. Find the place where xss exists to submit the code: for example: 2.

WebLogicV10.0 using shell in the backgroundToday, I tested a site. The JSP environment is weblogic, and the system has a weak password. weblogic/weblogic does not use shell when logging on to the background. The online search is based on the 8.0

Multiple security vulnerabilities in beinmei can cause the fall of the IntranetLet's see how I penetrated beinmei's intranet.Proof of vulnerability: After looking for a long time, I finally found a breakthrough in Bein's internal network. This

TinyShop v1.0.1 SQL injection can cause database information leakageTinyShop v1.0.1 SQL injection can cause database information leakage (Official Website demonstration + source code analysis) Ignoring gpc details:/protected/controllers/ajax. php //

DedeCMS latest foreground SQL injection and repairSee also SQL injection, a small problem caused by multiple cases... dedeCMS imposes severe restrictions on user names and email addresses during registration, but does not impose any restrictions on