Cloud Security

Huawei E5332 Webserver memory overflow vulnerability in CVE-2014-5328) Release date:Updated on: Affected Systems:Huawei E5332 21.344.19.00.1080Unaffected system:Huawei E5332 21.344.27.00.1080Description:Bugtraq id: 70405CVE (CAN) ID: CVE-2014-5328

Bash vulnerability latest patch installation tutorial [Download] Bash has recently exposed a serious vulnerability, which affects almost all Linux systems on the market. From the security perspective, the customer requires that the vulnerability be

Linux Kernel 'ext4/file. c' local DoS Vulnerability Release date: 2014-10-09Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 70376CVE (CAN) ID: CVE-2014-8086 Linux Kernel is the Kernel of the Linux operating system. Linux kernel

OpenSSH SFTP Remote Overflow Vulnerability Jann Horn, a security community enthusiast, announced that OpenSSH allows users with SFTP access to use the "ForceCommand internal-sftp" Vulnerability (including POC) without verification ), that is to say,

Check Linux Bash security vulnerabilities and solutions for various environments Today, Red Hat announced that it has discovered a security vulnerability in the Bash Shell. Hackers can exploit the vulnerability to launch attacks. In short, the

LibVNCServer Denial of Service Vulnerability (CVE-2014-6054) Release date:Updated on: 2014-10-05 Affected Systems:LibVNCServerDescription:Bugtraq id: 70094CVE (CAN) ID: CVE-2014-6054 LibVNCServer is a cross-platform C library that can implement

GNU Bash redir_stack out-of-the-box Memory Access Vulnerability (CVE-2014-7186) Release date:Updated on: Affected Systems:GNU Bash Description:Bugtraq id: 70152CVE (CAN) ID: CVE-2014-7186 Bash, a Unix shell, was written by Brian fox for the GNU

PhpMyAdmin script insertion Vulnerability Release date: 2014-10-07Updated on: Affected Systems:PhpMyAdmin 4.xDescription:CVE (CAN) ID: CVE-2014-7217 Phpmyadmin is an online management tool for MySQL databases. Its main functions include creating

CVE2014-6287 Analysis Report0x00 Preface In wooyun zone, I saw the article HFS 2.3x remote command execution (the last day of hacker capture). Previously, I only analyzed binary vulnerabilities. This command injection vulnerability was the first

Injection caused by incomplete DESTOON Patches 2014-07-22. Fill in the key areasDetailed description: $ Post = daddslashes (dstripslashes ($ post ));The patch was used only to perform daddslashes for the $ post file, but the special characters can

Old bird teaches you how to be a good hacker Some may often ask me: "How can I get my first penetration test?" Like most other types of work, the company hopes that employees can bring substantial value to the company as quickly as possible, this

Midea official website GETSHELL Midea master core technologies!Http://www.midea.com/cn/promotion/app/2014/wish/shike.php Upload photoPOST/cn/promotion/app/2014/wish/api. php/upload HTTP/1.1Content-Disposition: form-data; name = "img"; filename = "2

Getshell is configured by default. Official Website: http://www.xiao5u.com/ Http://www.xiao5u.com/Product/Survey.html  The version information is not clear. However, if multiple sites are tested in the successful cases on the official website,

Letv MySQL blind injection, callback reflective XSS and an absolute path Leakage The injection point is located (parameter ID ): Http://joyearcars2014happy.hz.letv.com/php/votenum.php? Callback = jquery171017738118954002857_14087927555 & id = 1 & _ =

Tccms SQL Injection #2 The constant is not defined. View/system/core/controller. class. php  private function forceAttack() { $attack = M('attack'); if (Config::get("blackcheck") == 1 && !defined('IN_ADMIN') && $_GET['ac'] !=

Arbitrary File Deletion caused by Phpyun design defects can cause reinstallation of getshell or injection. Design defects can cause deletion of arbitrary files and lock, which can be directly reinstalled to achieve getshell.Or you can delete an

Ecmall second injection fourth bomb 20140618Although anti-injection is added in 20140618, it can be barely bypassed. First register a member and then apply to open a shop.Change the store nameYu ', user (), 1 and extractvalue (1, concat (0x5c, (user

Other user password vulnerabilities in the host room Modify others' passwordsFirst, we need to register an account on the host and bind the mailbox Then, go to the homepage and find the forgot password feature.  Enter the registered account

Ucenter Home 2.0 SQL injection 2 (Latest Version) I downloaded the latest version from the official website and installed the latest patch to audit several vulnerabilities. First, submit two gpc = off injections. This program also has getshell to

74cms (20140709) the latest version of the second injection 74cms V3.4.20140709Instead of modifying the vulnerability code, you can modify the filter function.Although the filtering Code cannot be bypassed .. However, the data can still be found.On