Cloud Security

Apache James Server System Command Execution Vulnerability (CVE-2015-7611)Apache James Server System Command Execution Vulnerability (CVE-2015-7611) Release date:Updated on:Affected Systems: Apache Group James 2.3.2 Description: CVE (CAN) ID:

Major vulnerabilities of CoreOS Linux Alpha have been fixed A major vulnerability in CoreOS Linux Alpha has been fixed. The security team said this issue only affected the version 104x. 0.0 of the Linux release. In the blog "CoreOS Linux Alpha

Apache OpenMeeting predictable Password Reset token Vulnerability (CVE-2016-0783)Apache OpenMeeting predictable Password Reset token Vulnerability (CVE-2016-0783) Release date:Updated on:Affected Systems: Apache Group OpenMeetings Description:

How to Use System Exception Handling Cases to exploit incredible Vulnerabilities   Author: [email protected]0x00 Introduction The read, write, and execution attributes of memory are one of the most important mechanisms for system security.

PhpMyAdmin XSS Vulnerability (CVE-2016-2560)PhpMyAdmin XSS Vulnerability (CVE-2016-2560) Release date:Updated on:Affected Systems: PhpMyAdmin PhpMyAdmin PhpMyAdmin Description: CVE (CAN) ID: CVE-2016-2560Phpmyadmin is an online management

Wireshark X.509AF parser DoS Vulnerability (CVE-2016-2524)Wireshark X.509AF parser DoS Vulnerability (CVE-2016-2524) Release date:Updated on:Affected Systems: Wireshark Wireshark 2.0.x Description: CVE (CAN) ID: CVE-2016-2524Wireshark is the most

How can I set the shared file access permission and control the Shared File Access to prevent arbitrary access to shared files?The security of shared files is related to enterprises' intangible assets and trade secrets. Therefore, you must properly

Password Reset in Yiyou mail system can be cracked by brute force Rt The Yiyou mail system was used by a large number of users and found that answers to questions in Yiyou password retrieval could be brute-force cracked. If there is a simple

Analysis of Drag and Drop security policies in IE sandbox 0x00 Preface Internet Explorer sandbox escape is an important topic in Internet Explorer security research. One type of vulnerability uses the defects of the white list program in

About the importance of patches and security software from the exploitation of Nday VulnerabilitiesI. Blood cases caused by CVE-2014-6332 At the end of last year, 360 security center monitoring found that the number of webpage Trojans that had been

Key Technical Analysis of malicious fee deduction software: associated with chest Internet-related topics accounted for half of the 315 gala. One of the steps is to make the customer stand up, that is, download a ticket grabbing software, but the

Analysis on the trojan evolution Report of "Dancing moth"I. Overview Recently, the 360 mobile security team detected that a cloud Control Trojan was exploding. The trojan family was first captured by February 2015 mobile security teams in 360, and

How to integrate the SDK (a simple set of REST APIs) into your event response Workflow We believe that malware recognition should be easy, efficient, and powerful. This is what Deepviz wants to achieve. This article shows what our SDK (a simple set

Without a password, you can make the Internet more secure. Most people living in the Internet Age will feel a headache for the "password" issue. Although users need to enter the user name and password when registering an Internet service, many

Weak passwords on the China Resources OLE management platform cause leakage of details of nearly 0.45 million users (including ID card numbers, mobile phone numbers, home addresses, etc) RT.. Management Platform: manager.crvole.com.cn weak

Cross-Domain jsonp interface of a website of China Unicom leads to information leakage (risks arising from additional feature insertion by the operator) Cross-Domain jsonp interface of a website of China Unicom causes information leakage, which may

Execute arbitrary code in the Jinja2 template using the Python feature Whether the Jinja2 template engine can directly execute the original command in SSTI is not described, and it is also described in the official Jinja2 documentation that the

A pseudo-static SQL Injection on a video game Bus A pseudo-static injection on a video game Bus Http://yxsg.tgbus.com: 80/db/jineng/309 xor sleep(52.16.shtmlSqlmap needs to use between. py [21:44:52] [WARNING] changes made by tampering scripts are

A weak password \ SQL injection vulnerability in a website in Digital China Getshell RT: Just stroll around to see if there are any vulnerabilities. Vulnerability URL: http://dckf.digitalchina.comFirst of all, I saw a great God used truncation to

263 using enterprise mail and personal mail to kill arbitrary User Logon Enterprise mail and personal email can be killed.Suffixes of affected mailboxes include: All enterprise mailboxes, net263.com, 263.net, 263.com, 263.net.cn, and x263.net.263