Cloud Security

MantisBT 'Copy _ field. php' Cross-Site Scripting Vulnerability Release date: 2014-12-01Updated on: 2014-4 4 Affected Systems:Mantisbt 1.1.0a3-1.2.17Description:Bugtraq id: 71375 MantisBT is a Web-based bug Tracking System. MantisBT 1.1.0a3-1.2.1

UnRTF File Processing out-of-bounds Memory Corruption Vulnerability Release date: 2014-3 3Updated on: 2014-6 6 Affected Systems:UnRTFDescription:Bugtraq id: 71430 UnRTF is a command line software written in C language. The UnRTF memory

Tcpdump Buffer Overflow Vulnerability (CVE-2014-9140) Release date:Updated on: 2014-6 6 Affected Systems:TcpdumpDescription:Bugtraq id: 71468CVE (CAN) ID: CVE-2014-9140 Tcpdump is a sniffing tool running on the command line. It allows users to

Antiword 'wordole. c' Buffer Overflow Vulnerability Release date: 2014-12-01Updated on: 2014-3 3 Affected Systems:Antiword 0.37Description:Bugtraq id: 71386 Antiword is a MS Word document reader. The implementation of Antiword 0.37 and other

Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2014-8989) Release date:Updated on: 2014-3 3 Affected Systems:Linux kernel Description:Bugtraq id: 71367CVE (CAN) ID: CVE-2014-8989 Linux Kernel is the Kernel of the Linux

WebKit Memory Corruption Vulnerability (CVE-2014-4462) Release date:Updated on: Affected Systems:Apple TVWebKit Open Source Project WebKitUnaffected system:Apple TV Description:Bugtraq id: 71142CVE (CAN) ID: CVE-2014-4462 WebKit is an open-source

Linux Kernel 'espfix64' local DoS Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71250 Linux Kernel is the Kernel of the Linux operating system. Linux Kernel has a local denial of service

GNU patch 'pch.c' Integer Overflow Vulnerability Release date:Updated on: Affected Systems:GNU patchDescription:Bugtraq id: 71307 GNU patch is part of the GNU project. You can update the original file to the version after the patch is installed.

Password refers to DoubleDirect man-in-the-middle attacks on Android and iOS Systems Security researchers have discovered a new man-in-the-middle attack technology targeting smartphones and tablets running Android and iOS systems. This technology,

Analysis of cve-2014-0569 vulnerability Exploitation0 × 00 Vulnerability description from CVE: Test environment: Win7 SP1 + Flash ActiveX 15.0.0.167  0 × 01 vulnerability exploitation Analysis Before introducing critical vulnerability code, let's

Windows 8.1 security: enterprise functions and tools Microsoft has released Windows 8.1 Enterprise Edition for several months. What security issues are worth noting? For enterprises, the most attractive security feature of Windows 8.1 is to

Rising posture: How to make your Google account more secure If you use Gmail as your main email, or rely on services provided by Google for a long time, or if you are "Google brain powder "...... This article is worth reading. This article will

A sub-station stored XSS + csrf in Baidu Today, as usual, I had nothing to do. I opened hao123 and looked for Station X. Suddenly I saw Baidu traveling and suddenly found some problems. Then my mother no longer had to worry about not replying to my

Supesite foreground injection 4 (select) and a small problem. Integrate the Select Update insert delete injection of supesite  Minor issuesThe path of the supesite backup database isData/backup_SAS2n5/141007_Pwok71Ei-1. SQLBackup _ random

Supesite foreground injection #2 (Insert) Insert ignore GPCSupesite installation has ucenterTry to inject uckey into a pair of trousers.Then ......  To see the Global File if(!(get_magic_quotes_gpc())) {$_GET = saddslashes($_GET);$_POST =

Getshell at the front end of ThinkSNS   /Apps/page/Lib/Action/DiyAction. class. php line 330: public function getTpl() {$parseTag = model ( 'ParseTag' );$tpl = $_REQUEST ['tpl'];$sign = $_REQUEST ['sign'];$tagName = $_REQUEST ['tagName'];echo

People Network Storage XSS + CSRF can obtain user privacy and change store data (problems exist on the main site and all local sub-sites) First of all, the problem is that although the title of a post is limited to 25 characters without filtering

Sina mail storage Vulnerabilities Stored XSS vulnerabilities can be triggered when users send emails Use another email address to send emails to Sina mail usersChange the recipient name to   After sending the email, use Sina mail to receive the

Phpcms latest SQL Injection Phpcms latest SQL Injection Vulnerability files  /Caches/caches_model/caches_data/content_input.class.phpfunction image ($ field, $ value) {$ value = remove_xss (str_replace (array ("'",'"','(',') '), '', $ value);

You can log on to any user account due to improper design of the authentication mechanism. You can log on to any user account due to improper design of the authentication mechanism. Determine that the cookie used for logon is MMUSS, in the format