Cloud Security

Release date:Updated on: Affected Systems:Isc dhcp Server 4.xDescription:--------------------------------------------------------------------------------Bugtraq id: 55530Cve id: CVE-2012-3955 ISC is Intel's server management software. Isc dhcp is

Release date:Updated on: 2012-10-02 Affected Systems:Neturf eCommerce Shopping CartDescription:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2011-5198 Neturf eCommerce Shopping Cart is a network

Release date:Updated on: Affected Systems:WordPress Easy WebinarDescription:--------------------------------------------------------------------------------Bugtraq id: 56305 Easy Webinar is Wordpress's Automatic Network conferencing software. The

Release date:Updated on: Affected Systems:Symfony Description:--------------------------------------------------------------------------------CVE (CAN) ID: CVE-2012-6431 Symfony is a PHP framework based on the MVC Architecture. It is a free software

Release date:Updated on: Affected Systems:IBM Lotus Domino 8.5.3IBM Lotus Domino 8.5.2IBM Lotus Domino 8.5.1IBM Lotus Domino 8.5Description:--------------------------------------------------------------------------------Bugtraq id: 58652CVE (CAN)

Release date:Updated on: 2013-06-20 Affected Systems:Microsoft OutlookDescription:--------------------------------------------------------------------------------Bugtraq id: 60591 Microsoft Outlook is the mail client bound to the Office suite. All

Release date:Updated on: 2013-09-06 Affected Systems:Sap net Weaver 7.30Description:--------------------------------------------------------------------------------Bugtraq id: 62147 SAP NetWeaver is the integrated technology platform of SAP and

Release date: 2013-09-02Updated on: Affected Systems:MikroTik RouterOSDescription:--------------------------------------------------------------------------------Bugtraq id: 62110 MikroTik RouterOS is a routing operating system developed based on

Release date:Updated on: Affected Systems:WiresharkDescription:--------------------------------------------------------------------------------Bugtraq id: 66755 Wireshark is the most popular network protocol parser. Wireshark 1.10.0-1.10.3 has a

The Heartbleed problem is actually worse than it can be seen now (it seems to be broken now ). Heartbleed (CVE-2014-0160) is an OpenSSL vulnerability that allows any remote user to dump some of the server's memory. Yes, it's really bad. It is worth

Kristin Paget, a well-known computer security researcher, published an article on the official blog today, criticizing apple for fixing a large number of security vulnerabilities in OS X and failing to release similar security fixes for iOS in time.

Recently, the openssl (heartbleed) vulnerability is quite popular. It seems that some people on Weibo have said there are not many dangers in the past few days. However, according to the test, it is found that the damage is still relatively

By WinsOn @ Cybersword In the classic stack overflow model, the return address of the function is overwritten to control the program execution flow (EIP register). Generally, the return address is overwritten with 0x7FFA4512, this address is a jmp

PS: The following are all tested by myself. It is not a theoretical article. If there is anything wrong, please make an axe. Thank you> _ First, we will introduce how SMB relay attacks work. Assume that the host on the left is A, and the host on

HTTPHeaderThe HTTP request contains many header information. obviously, you can control all the header information, but if you set the header value to something wrong, it is very likely that this request will be abolished, and the server will simply

Prevent them from cracking, let them disguise themselves, and let them think about it slowly! 1. Hide the php version number Hiding method: Add the following code to vimphp. ini: expose_php = Off 2. Hide the nginx version number Hiding method:

I. Overview:After listening to the ASA video from yeslab's instructor QIN Ke, the FTP server is on the Outside and the FTP client is on the Inside. In this case, the active FTP server works normally because: ftp review can enable FTP to normally

On July 15, August 23, Microsoft released the 2269637 Security Bulletin, announcing that writing some nonstandard dll files may lead to execution of arbitrary programs, including virus Trojans. Kingsoft drug overlord security expert said that when

Researchers revealed that Adobe had confirmed that millions of passwords had been stolen in the October data breach, which were initially not saved as the best example in the industry. The password encryption method is easily cracked. In a statement

Unauthorized downloading of plug-ins with "read permission" and downloading of plug-ins without chargeReproduction steps: 1. Use the Administrator account to upload an attachment with a high read permission. 2. Use a low-Permission user account