Cloud Security

Elasticsearch remote execution vulnerability affects many domestic SERVER CLUSTERS Search for the keyword "You Know, for search country: CN port: 9200" from the Internet of Satan"Portal: Http://www.shodanhq.com/search? Q = You + Know % 2 Cfor +

D-Link DNS-320 Ax Remote Command Injection Vulnerability Release date:Updated on: Affected Systems:D-Link DNS-320 Ax Description:--------------------------------------------------------------------------------Bugtraq id: 68687 D-Link DNS-320 Ax is

OpenCart 'cart: getProducts () 'method PHP Object Injection Vulnerability Release date:Updated on: Affected Systems:OpenCart 1.5.6.4Description:--------------------------------------------------------------------------------Bugtraq id: 68529CVE

Apache HTTP Server Remote Denial of Service Vulnerability (CVE-2014-0117) Release date:Updated on: Affected Systems:Apache Group HTTP Server

Huawei E355 HTML injection vulnerability in CVE-2014-2968) Release date:Updated on: Affected Systems:Huawei E355Description:--------------------------------------------------------------------------------Bugtraq id: 68769CVE (CAN) ID: CVE-2014-2968

Cisco Wireless LAN Controller DoS (CVE-2014-3291) Release date:Updated on: Affected Systems:Cisco Wireless LAN ControllerDescription:--------------------------------------------------------------------------------Bugtraq id: 67926CVE (CAN) ID: CVE-

User Friendly svn xss Vulnerability (CVE-2014-4719) Release date:Updated on: Affected Systems:USVN Description:--------------------------------------------------------------------------------Bugtraq id: 68155CVE (CAN) ID:

TweetDeck Cross-Site Scripting Vulnerability Release date:Updated on: Affected Systems:Twitter tweetdeckDescription:--------------------------------------------------------------------------------TweetDeck is a desktop application based on Adobe

Linux Kernel 'Mm/slab. c' Local Denial of Service Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:--------------------------------------------------------------------------------Bugtraq id: 68125CVE (CAN) ID: CVE-201

DirectFB Dispatch_Write Buffer Overflow Vulnerability (CVE-2014-2977) Release date:Updated on: Affected Systems:Directfb 1.4.13Description:--------------------------------------------------------------------------------CVE (CAN) ID:

Samba Memory Corruption Vulnerability (CVE-2014-3493) Release date:Updated on: Affected Systems:Samba Samba Samba Description:--------------------------------------------------------------------------------Bugtraq id: 68150CVE (CAN) ID: CVE-2014-3493

FreeBSD iconv (3) NULL pointer indirect reference and cross-border array Access Vulnerability Release date:Updated on: Affected Systems:FreeBSDDescription:--------------------------------------------------------------------------------CVE (CAN) ID:

Introduction to Android Trojan Analysis This article introduces Android-based mobile malware as a basic introduction. It provides an analysis and Tool Guide for beginners. The Trojan Horse to be analyzed is the syssecapp.apk in 2013. The Trojan

Encrypt Your email through AES or DES Recently, due to the PRISM program, many people are considering the security of email. There are also many ways to encrypt emails such as Gmail. The following method uses the AES or DES encryption standard for

Xss + csrf: How can I upload a sentence?I hope it will be useful to you. Title: xss + csrf prerequisites for uploading a sentence: you must know the background upload point. 1. Find the place where xss exists to submit the code: for example: 2.

WebLogicV10.0 using shell in the backgroundToday, I tested a site. The JSP environment is weblogic, and the system has a weak password. weblogic/weblogic does not use shell when logging on to the background. The online search is based on the 8.0

PPTV design defects can cause leakage of users' email addresses PPTV users' email addresses are leaked, allowing users to directly obtain important user information in attacks. Access the password retrieval page: Use test to test the account and

Test and verify common WEB Security Vulnerabilities[File Upload Vulnerability] 1. the user does not properly verify the uploaded files. As a result, the uploaded Trojans and other malicious files may be verified in the following ways: client JS

TinyShop v1.0.1 SQL injection can cause database information leakageTinyShop v1.0.1 SQL injection can cause database information leakage (Official Website demonstration + source code analysis) Ignoring gpc details:/protected/controllers/ajax. php //

DedeCMS latest foreground SQL injection and repairSee also SQL injection, a small problem caused by multiple cases... dedeCMS imposes severe restrictions on user names and email addresses during registration, but does not impose any restrictions on