Cloud Security

Antiword 'wordole. c' Buffer Overflow Vulnerability Release date: 2014-12-01Updated on: 2014-3 3 Affected Systems:Antiword 0.37Description:Bugtraq id: 71386 Antiword is a MS Word document reader. The implementation of Antiword 0.37 and other

WebKit Memory Corruption Vulnerability (CVE-2014-4462) Release date:Updated on: Affected Systems:Apple TVWebKit Open Source Project WebKitUnaffected system:Apple TV Description:Bugtraq id: 71142CVE (CAN) ID: CVE-2014-4462 WebKit is an open-source

Linux Kernel 'espfix64' local DoS Vulnerability Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71250 Linux Kernel is the Kernel of the Linux operating system. Linux Kernel has a local denial of service

GNU patch 'pch.c' Integer Overflow Vulnerability Release date:Updated on: Affected Systems:GNU patchDescription:Bugtraq id: 71307 GNU patch is part of the GNU project. You can update the original file to the version after the patch is installed.

Adobe Flash Player remote code execution vulnerability in CVE-2014-8439) Release date:Updated on: Affected Systems:Adobe Flash Player 15.xAdobe Flash Player 14.xAdobe Flash Player 13.xDescription:Bugtraq id: 71289CVE (CAN) ID: CVE-2014-8439 Adobe

Python dumbdbm "eval ()" Arbitrary Code Execution Vulnerability Release date:Updated on: 2014-12-01 Affected Systems:Python python 3.xPython python 2.7.xDescription:Python is an object-oriented, literal translation computer programming language.

Password refers to DoubleDirect man-in-the-middle attacks on Android and iOS Systems Security researchers have discovered a new man-in-the-middle attack technology targeting smartphones and tablets running Android and iOS systems. This technology,

DCOM before the removal vulnerability MS03-043 exploitation code Because it can go through a dynamic port above udp135 and UDP1024, many machines engaged in APT's daily network firewall and black ice whitelist were also easy to handle. It is the MSG

Linux Kernel sctp null pointer indirect reference Denial of Service Vulnerability (CVE-2014-7841) Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 71081CVE (CAN) ID: CVE-2014-7841 Linux Kernel is the Kernel of the

Juniper JunosE Denial of Service Vulnerability (CVE-2014-6378) Release date: 2014-10-09Updated on: Affected Systems:Juniper Networks JUNOSeDescription:Bugtraq id: 70363CVE (CAN) ID: CVE-2014-6378 JunosE is an operating system used in the e-series

Rising posture: How to make your Google account more secure If you use Gmail as your main email, or rely on services provided by Google for a long time, or if you are "Google brain powder "...... This article is worth reading. This article will

Sample Analysis of CVE-2014-4114 variantsFound a variant of a CVE-2014-4114 sample embedded with malicious code that can be directly triggered locally, without the need to download malicious code from the remote sharing server. Open the sample with

A smart home control system injection vulnerability causes your home and my Permissions On a dark night, you may see lights in your sleep, TV suddenly opens, screens slowly fall, speakers are turned on for no reason, and air conditioners are

People Network Storage XSS + CSRF can obtain user privacy and change store data (problems exist on the main site and all local sub-sites) First of all, the problem is that although the title of a post is limited to 25 characters without filtering

Another unauthorized location on the Registration Network allows you to modify others' information.   This is the management of the visitor.You can modify the information of the contact.Two main parameters, patient_id and user_id, will be passed

PHP code audit vulnerability fuzzy Testing Preparations before auditing:   1. Install the php Program (phpStudy is recommended) 2. Highlight Editor (Sublimetext Notepad ++ is recommended) 3. Create a new text file and copy the following variables.

Web scanning crawler Optimization 0x01 background The company needs to develop automated scanning tools. Currently, tools on the market cannot detect services, so they can only be developed by themselves. Hot or not, there is a problem. crawlers

Protection and bypass for repeated packet sending 0x00. Preface Currently, the primary problems caused by repeated packet sending include credential stuffing and brute-force cracking. As more and more passwords are leaked, this type of problem has

Discuz 7.2 & discuz x In dz7.2, the vulnerability is located in row 57 of task. php,   $ Query = $ db-> query ("SELECT t. *, mt. csc, mt. dateline FROM {$ tablepre} tasks tLEFT JOIN {$ tablepre} mytasks mt ON mt. taskid = t. taskid AND mt. uid = '$

Qibocms multiple systems bypass patches to continue injection 2 The patch was bypassed before, and now the patch is released.I checked the patch this morning. At first glance, I thought it was awesome.Then I thought the patch was hanging and I put