Cloud Security

Adobe Flash Player remote code execution vulnerability in CVE-2014-8439) Release date:Updated on: Affected Systems:Adobe Flash Player 15.xAdobe Flash Player 14.xAdobe Flash Player 13.xDescription:Bugtraq id: 71289CVE (CAN) ID: CVE-2014-8439 Adobe

An old vulnerability NtUserQueryUserCounters found NtUserQueryUserCounters () is currently only supported by win2k and winxp, and there is an overflow. However, winxp has been patched. I do not know if the last version of win2k has been patched, but

Gitlab-shell is affected by Bash CVE-2014-6271 Vulnerability Today, US-CERT announced a serious Bash Security Vulnerability (CVE-2014-6271) that also affects the OpenSSH daemon. The default git account of the Gitlab server uses Bash to execute

CacheGuard OS Cross-Site Request Forgery (CVE-2014-4865) Release date:Updated on: Affected Systems:CacheGuard OS 5.7.7Description:Bugtraq id: 69731CVE (CAN) ID: CVE-2014-4865 CacheGuard OS is a web traffic management solution. CacheGuard OS v5.7.

78OA Office System Vulnerability Gift Packs (reflected storage xss and SQL injection) 78OA Office System Vulnerability Gift Packs (reflection, storage xss, SQL)First, download the latest version from the official

WordPress Login With Ajax plugin Security Restriction Bypass Vulnerability Release date:Updated on: 2014-09-09 Affected Systems:WordPress Login With Ajax Description:The Login With Ajax plug-in can be used to add ajax Login and registration

Nagios Looking Glass local File Inclusion Vulnerability Release date:Updated on: Affected Systems:Nagios Looking Glass Description:--------------------------------------------------------------------------------Bugtraq id: 63381 Nagios Looking

Linux Kernel vhost cross-origin descriptor length fixed Denial of Service Vulnerability Release date:Updated on: Affected Systems:Linux kernel 2.6.xDescription:--------------------------------------------------------------------------------Bugtraq

FFmpeg 'libavcodec/iff. c' Memory Corruption Vulnerability Release date: Updated on: Affected Systems: FFmpeg Description: Bugtraq id: 69252 CVE (CAN) ID: CVE-2014-5272 FFmpeg is a free software that allows you to perform video, transfer,

Hitron CDE-30364 router Cross-Site Request Forgery Vulnerability Release date:Updated on: Affected Systems:Ono Hitron Technologies Co., CDE-30364. 3.1.0.8-ONODescription:--------------------------------------------------------------------------------

The flying fish star router command can be run as ROOT to control the route It was first found that the fat paper that @ wants to lose weight exists. The version found by this user exists. However, in the later versions, feiyuxing has fixed the

Cloud self-help management enables efficient firewall O & MIn recent years, with the vigorous promotion of many manufacturers, media, and third-party professional consulting institutions, as well as the hands-on practices of numerous enterprise

Updates of Vulnerability Detection Technology for computer software   1. Computer software vulnerabilities and their status quo We often say that computer software vulnerabilities are software security vulnerabilities in a broad sense. They mainly

Self-xss ?) XSS caused by lax filtering of AD emails I have a good habit of using nicknames. I like to use . Maybe it will pop up one day. So one day I opened my QQ mailbox and saw an advertisement email reminding me that my friend's birthday was

Penetration tests you Don't know: Attack and Defense of application Virtualization Web penetration testing is familiar to everyone, but penetration testing for application virtualization may be rarely used by everyone, and there is no relevant

Weaver OA vulnerability set (SQL injection, unauthorized access, etc) 0x00: Some nonsense No one has reported the following vulnerabilities. Do not repeat them with any vulnerabilities (points are definitely different )!WooYun: Weaver E-office OA

PHPOK storage xss The foreground function has a storage-type xss, which can attack the background and obtain administrator privileges.The first xss vulnerability: Message function.One output point in the background is as follows: We can see that

Discuz 7.2 & discuz x In dz7.2, the vulnerability is located in row 57 of task. php,   $ Query = $ db-> query ("SELECT t. *, mt. csc, mt. dateline FROM {$ tablepre} tasks tLEFT JOIN {$ tablepre} mytasks mt ON mt. taskid = t. taskid AND mt. uid = '$

Where does the destoon storage xss address? The member sends a letter and uploads an attachment. Files in swf format can be uploaded, The label is not filtered.We construct a malicious swf. For example  Upload the attachment f12 and view the

Phpyun injection bypass 360 Protection Check member usage during registration Model \ register. class. php23 rows  Function ajax_reg_action () {$ post = array_keys ($ _ POST); $ key_name = $ post [0]; if ($ key_name = "username ") {$ username = @