Cloud Security

Cisco TelePresence VCS Expressway Denial of Service Vulnerability (CVE-2015-4315)Cisco TelePresence VCS Expressway Denial of Service Vulnerability (CVE-2015-4315) Release date:Updated on:Affected Systems: Cisco TelePresence Video Communication

Linux Kernel 'virtio-net' fragment Package Processing Buffer Overflow VulnerabilityLinux Kernel 'virtio-net' fragment Package Processing Buffer Overflow Vulnerability Release date:Updated on:Affected Systems: Linux kernel Description: Bugtraq

Improper design of zhongke Shuguang bastion host, various unauthorized Vulnerabilities Create two normal users: test1 administrator: test2Perform the ADD management operation. The sw_login_id of test1 is 105274ViewPage. ssi? _ Type = user & _ id = 2

Use showModalDialog to bypass IE's XSS Filtering Today, I want to share with you an article about Xss filtering that uses showModalDialog to bypass IE.The showModalDialog function has been in existence for many years. Although it is currently

The design defect of Ao you browser may lead to the reading of sensitive information such as user favorites/historical records. A series of problems caused by design defects Considering the user experience, the Browser allows the * .maxthon.cn

Exploitation of formatted strings (Part 1) The formatting string vulnerability is a software defect that allows attackers to perform read or write operations at any memory address. This tutorial focuses on C Programming programs and the use of

Didi taxi OA system can be cracked to obtain internal information No verification code, brute-force cracking.   POST/seeyon/getAjaxDataServlet? S = ajaxOrgManager & M = isOldPasswordCorrect & CL = true & RVT = XML & p_character string = username & P_

A perfect Bug (CVE-2015-3077): Using type obfuscation in Flash For some attackers, it is important that exp can be used stably. In other words, exp can cause code execution every time on a system running a specific flash version of a specific

Introduction to AAA (I) of Elasticsearch) 0x00 Preface Elasticsearch (Elasticsearch) has been widely used by more and more companies, and its own security problems have also attracted much attention. Recently, many security problems have emerged,

Siemens RuggedCom ROS and ROX mitm Information Leakage VulnerabilitySiemens RuggedCom ROS and ROX mitm Information Leakage Vulnerability Release date:Updated on:Affected Systems: Siemens RuggedCom ROS Description: Bugtraq id: 75982CVE (CAN)

TimeDoctor autoupdate Arbitrary Code Execution Vulnerability (CVE-2015-4674)TimeDoctor autoupdate Arbitrary Code Execution Vulnerability (CVE-2015-4674) Release date:Updated on:Affected Systems: TimeDoctor 1.4.72.3 Description: CVE (CAN) ID:

Apple OS X 10.10 0-day Privilege Escalation VulnerabilityApple OS X 10.10 0-day Privilege Escalation Vulnerability Release date:Updated on:Affected Systems: Apple OS X 10.10 Description: OS x (formerly Mac OS X) is the latest version of

Isc bind named Denial-of-Service Vulnerability (CVE-2015-5477)Isc bind named Denial-of-Service Vulnerability (CVE-2015-5477) Release date:Updated on:Affected Systems: Isc bind Isc bind Description: CVE (CAN) ID: CVE-2015-5477BIND is a widely

Get network administrator permissions within 17 seconds Many Security Auditors must obtain the permissions of the network administrator of the target network when conducting security audits on the target network environment. This usually makes us

Dedicated to cybersecurity-anti-Black security guard EvaluationAnti-Black security guard is a security software independently developed by Anwei technology with the dual-engine detection and removal function. It can quickly and accurately identify

Reverse BASICS (13) JAVA (4) 54.15 for an exception, let's modify it a little. The example of monthly processing (in 54.13.4 on page 1) Configuration 54.10: IncorrectMonthException. java public class IncorrectMonthException extends Exception{

How hackers can schedule one-plus cell phones by minute Preface I am a loyal fan of a cell phone. When I got a cell phone, I tried my best to participate in various activities, but I still didn't get an invitation code. Finally, I found someone

Fragment Injection vulnerability Miscellaneous 13 years ago, IBM's security researchers discovered a Google framework layer vulnerability, Fragment injection, which can reset the Android mobile phone PIN code, you should be familiar with figure 1.

Php comparison operator security issues 0x00 comparison operator Php's comparison operators include = (equal to) loose comparison, = (completely equal to) strict comparison, which introduces many interesting questions. In loose comparisons, php

How to apply the authentication module and. htaccess file to ensure Web Security To restrict access to a webpage, you can use the Authentication Modules and methods provided by Apache and a third party to verify the user's creden (such as the user