Cloud Security

Huawei E355s Information Leakage VulnerabilityHuawei E355s Information Leakage Vulnerability Release date:Updated on:Affected Systems: Huawei E355 Description: Bugtraq id: 74397CVE (CAN) ID: CVE-2015-3912Huawei E355 is a wireless network card

Dell SonicWall SonicOS 'macIpSpoofView.html 'Multiple Cross-Site Scripting VulnerabilitiesDell SonicWall SonicOS 'macIpSpoofView.html 'Multiple Cross-Site Scripting Vulnerabilities Release date:Updated on:Affected Systems: Dell SonicOS

Cisco MediaSense Cross-Site Request Forgery (CVE-2015-0736)Cisco MediaSense Cross-Site Request Forgery (CVE-2015-0736) Release date:Updated on:Affected Systems: Cisco MediaSense 10.5 (1) Description: Bugtraq id: 74671CVE (CAN) ID: CVE-2015-0736

Multiple SQL injection vulnerabilities in the WordPress GigPress plug-in 'handlers. php'Multiple SQL injection vulnerabilities in the WordPress GigPress plug-in 'handlers. php' Release date:Updated on:Affected Systems: WordPress GigPress

Samba 'parse _ prs. c' Memory Corruption VulnerabilitySamba 'parse _ prs. c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: Samba Samba 3.0.37 Description: Bugtraq id: 74752Samba is a free software that implements the SMB

QEMU 'hw/block/fdc. c' VENOM Remote Memory Corruption Vulnerability (CVE-2015-3456)QEMU 'hw/block/fdc. c' VENOM Remote Memory Corruption Vulnerability (CVE-2015-3456) Release date:Updated on:Affected Systems: QEMU Description: Bugtraq id: 74640

Python 'ssl. match_hostname () 'Function Security Restriction Bypass VulnerabilityPython 'ssl. match_hostname () 'Function Security Restriction Bypass Vulnerability Release date:Updated on:Affected Systems: Python Description: Bugtraq id: 74707

Microsoft Windows Local Privilege Escalation Vulnerability (CVE-2015-1701) (MS15-051)Microsoft Windows Local Privilege Escalation Vulnerability (CVE-2015-1701) (MS15-051) Release date:Updated on:Affected Systems: Microsoft Windows VistaMicrosoft

PHP Buffer Overflow Vulnerability (CVE-2015-3329)PHP Buffer Overflow Vulnerability (CVE-2015-3329) Release date:Updated on:Affected Systems: PHP Description: Bugtraq id: 74240CVE (CAN) ID: CVE-2015-3329PHP is a widely used scripting

The cmd command set is required. Commands can be divided into three types: network detection (such as ping), network connection (such as telnet), and network configuration (such as netsh ). The previous two are relatively simple. This article only

IBM WebSphere Application Server Privilege Escalation Vulnerability (CVE-2015-1882)IBM WebSphere Application Server Privilege Escalation Vulnerability (CVE-2015-1882) Release date:Updated on:Affected Systems: IBM Websphere Application Server

SQLite 'src/where. c' Memory Corruption VulnerabilitySQLite 'src/where. c' Memory Corruption Vulnerability Release date:Updated on:Affected Systems: SQLite Description: Bugtraq id: 74313SQLite is an embedded database.SQLite has the remote

Powershell rebound posture and forensics (1) Labofapenetrationtester is published in the form of "week of powershell shell", which is an article published every day. There are five articles in total:Day 1-Interactive PowerShell shells over TCPDay

CentOS anti-CC attack shell script #! /Bin/shcd/var/log/httpd/cat access_log | awk '{print $1}' | sort | uniq-c | sort-n-r | head-n 20> acp/dev/null access_logcp/dev/null error_logcp/dev/null limit. shcp/dev/null c # awk '{print $2} 'a | awk-F.

Brazilian bank Trojan lurking in the SQL database   System Administrators and common users have headaches in spam. A considerable number of spam will spread the "sex drug sales" link to entice users to click the link and access malicious

CSRF Cross-Site Request Forgery Attack + Case Analysis I recently read "web Front-end hacker technology secrets", instead of trying to learn three abuse methods, just to prevent myself from being cheated... Because the same-origin policy is adopted,

Wukong CRM Arbitrary File Download Vulnerability (login required) Wukong CRM Arbitrary File Download Vulnerability Wukong CRM 0.5.0 Beta  \ App \ Lib \ Action \ FileAction. class. php row 163 public function filedownload () {$ path = trim (urldecode

Baidu repair XSS can be bypassed Baidu repair xss can be bypassed More and more absurd-fixing xss leading to more serious xssFirst, an xssWooYun: Baidu XSSNo filtering, POC:  Http://box.zhangmen.baidu.com/box-jump.html? U = javascript: alert %

Multiple high-risk vulnerabilities of OK loan support tens of millions of funds in the background Injection 1: GET /?plugins&q=areas&area_id=174 HTTP/1.1Accept-Language: zh-CN,zh;q=0.8,en;q=0.6Accept-Encoding: gzip,deflateCache-Control:

HTML5 offline cache attack test This experiment uses LAN simulation to simulate domain name and DNS spoofing by modifying the local HOSTS file. Valid websites are built using Linux CentOS7 apache server, IP address is 192.168.1.113, HOSTS file add 19