Cloud Security

ASUS TM-AC1900 Stack Buffer Overflow Vulnerability (CVE-2015-6949)ASUS TM-AC1900 Stack Buffer Overflow Vulnerability (CVE-2015-6949) Release date:Updated on:Affected Systems: Asus TM-AC1900. Description: CVE (CAN) ID: CVE-2015-6949The ASUS

[Note] Apple OS X has been exposed to major vulnerabilities that affect all versions. Do you think Windows system has many vulnerabilities? In fact, Apple has many OS X vulnerabilities. This is not the case. Apple just fixed the

Microsoft urgently releases patches to fix high-risk Vulnerabilities Microsoft urgently releases a patch to fix a high-risk vulnerability that attackers can remotely execute code. The new vulnerability affects all supported Windows versions, which

ADB backupAgent Privilege Escalation Vulnerability Analysis (CVE-2014-7953) 0x00 AbstractCVE-2014-7953 is an Elevation of Privilege Vulnerability in android backup agent. The bindBackupAgent method in ActivityManagerService fails to validate the

Multiple Asterisk products TLS Certificate verification Security Restriction Bypass Vulnerability (CVE-2015-3008)Multiple Asterisk products TLS Certificate verification Security Restriction Bypass Vulnerability (CVE-2015-3008) Release date:Updated

Multiple security vulnerabilities in Apple Mac OS X/iOSMultiple security vulnerabilities in Apple Mac OS X/iOS Release date:Updated on:Affected Systems: Apple Mac OS X Apple iOS Description: Bugtraq id: 73984CVE (CAN) ID: CVE-2015-1089, CVE-2015-10

SIMATIC WinCC device information leakage Vulnerability (CVE-2015-1601)SIMATIC WinCC device information leakage Vulnerability (CVE-2015-1601) Release date:Updated on:Affected Systems: Siemens SIMATIC WinCC (TIA Portal) Description: CVE (CAN)

Ao you Browser Remote Command Execution Vulnerability (browser design defect) When a user accesses a page maliciously constructed by an attacker, it can execute the remote command specified by the attacker. After the browser was submitted several

WordPress Video Player Plugin 'settings. php' SQL Injection Vulnerability Release date:Updated on: Affected Systems:WordPress Spider Video PlayerDescription:Bugtraq id: 70763 WordPress Spider Video Player is a Video Player Plug-in. WordPress

Zend Framework Authentication Bypass Vulnerability (CVE-2014-8088) Release date:Updated on: Affected Systems:Zend Framework 2.3.3Zend Framework 2.2.8Zend Framework 1.12.9Description:Bugtraq id: 70378CVE (CAN) ID: CVE-2014-8088 Zend Framework (ZF)

Oracle urgently fixes Bash vulnerabilities, and more than 40 products are still waiting in line The Shellshock vulnerability was initially estimated to have affected dozens of Oracle products. However, the patches released by Oracle only cover a few

Wordpress Game Speed plugin 'timthumb. php' Cross-Site Scripting Vulnerability Release date:Updated on: Affected Systems:WordPress Game SpeedDescription:--------------------------------------------------------------------------------Bugtraq id: 690

Use the intruded vro to enter the Intranet   Last year, we started to use vrouters to penetrate the destination intranet. Before seeing wooyun, there was an article about translation of foreigners about routertraffic hijacking. The use conditions

Five methods to respond to malware A few years ago, in a project, due to targeted malware attacks, I studied more than 10,000 computers involved in botnets. The main problems with these computers are the extremely weak security measures, such as the

PfSense XSS vulnerability analysis PfSense is an open-source network firewall software based on FreeBSD operating system. It has been widely used by companies around the world to protect its infrastructure.Last year, we found some security

SQL Injection for a Baidu business (leakage of Administrator account and password) Http: // 42.62.39.206/wap/fl2 /? Mo = 1 & sortid = 12 & cm = M3140060 & site = 0 Sortid Parameters available databases [4]:[*] baikan[*] information_schema[*] mysql[*]

Website security dog Protection Rule bypass in the latest version Tested the website security dog APACHE and IIS versions 1. download the latest version of Web Dongle (APACHE) V3.1.09924 from the official website of safedog, And the webhorse

Analysis and Consideration on traffic hijacking of an e-commerce website (1) Preface] When I visited the homepage of an e-commerce website at home one day, I was suddenly surprised to find that the browser suddenly jumped to a third-party website

SQL Injection exists in the ThinkPHP framework architecture Many people believe that SQL injection can be perfectly avoided without splicing SQL statements by using the database query method provided by the framework. Then you are wrong. Sometimes

SQL Injection Vulnerability + Arbitrary File Download Vulnerability in N cyberspace office systems 1. Official Instructions are as follows: Http://www.isoffice.cn/Web/Index/WebDetail/customer0x01 Arbitrary File Download Vulnerability (No Logon