Cloud Security

Up to 12 million websites may be infiltrated by Drupal vulnerabilities. Drupal, an open-source content management system, issued a warning. If a Patch Is Not Installed within seven hours after the security fix is released, the website using Drupal 7

Cisco IOS and ios xe Software Denial of Service Vulnerability (CVE-2014-3409) Release date:Updated on: Affected Systems:Cisco IOS Description:Bugtraq id: 70715CVE (CAN) ID: CVE-2014-3409 Cisco IOS is an interconnected network operating system

Joomla Akeeba Kickstart deserialization Remote Code Execution Vulnerability Release date:Updated on: Affected Systems:Joomla! AkeebaDescription:CVE (CAN) ID: CVE-2014-7228 Joomla Akeeba is in charge of Joomla! The updated component. Joomla!

Juniper JunosE Denial of Service Vulnerability (CVE-2014-6380) Release date: 2014-10-09Updated on: Affected Systems:Juniper Networks JUNOSeDescription:Bugtraq id: 70369CVE (CAN) ID: CVE-2014-6380 JunosE is an operating system used in the e-series

Multiple security vulnerabilities in Google Chrome versions earlier than 38.0.2125.101 Release date: 2014-10-07Updated on: 2014-10-09 Affected Systems:Google Chrome Description:Bugtraq id: 70273CVE (CAN) ID: CVE-2014-3188, CVE-2014-3189, CVE-2014-319

Shellshock vulnerability analysis from the perspective of Syntax Parsing [CVE-2014-6271] Document Description This time, we will take a look at Bash syntax rules through poc analysis, and help you better understand bash and shellshock

Arbitrary File Upload Vulnerability (CVE-2014-5005) for multiple ManageEngine Products) Release date:Updated on: 2014-09-03 Affected Systems:ManageEngine implements topcentral 8-9 build 90054Description:-----------------------------------------------

Mozilla Firefox/Thunderbird remote code execution vulnerability in CVE-2014-1557) Release date:Updated on: Affected Systems:Mozilla Firefox 31Mozilla Thunderbird 31Description:--------------------------------------------------------------------------

Multiple HTML injection vulnerabilities in TP-LINK TL-WR841N Routers Release date:Updated on: Affected Systems:TP-LINK TL-WR841N 3.13.9 Build 120201 Rel.54965nDescription:-------------------------------------------------------------------------------

HTC Products Wi-Fi credential leakage Vulnerability Release date:Updated on: Affected Systems:HTC Desire HDHTC Desire SHTC Droid IncredibleHtc evo 3DHTC ThunderboltDescription:------------------------------------------------------------------------

V8 JavaScript Engine DoS Vulnerability Release date:Updated on: Affected Systems:Google V8 JavaScript EngineDescription:--------------------------------------------------------------------------------Bugtraq id: 69157 V8 is Google's open-source

Request Tracker 'showpending' parameter SQL Injection Vulnerability Release date:Updated on: 2013-04-13 Affected Systems:Bestpractical RT 4.0.10Description:--------------------------------------------------------------------------------Bugtraq id: 59

Novell Open Enterprise Server Cross-Site Scripting (CVE-2014-0598) Release date:Updated on: Affected Systems:Novell Open Enterprise Server 2 Linux Support PackDescription:-----------------------------------------------------------------------------

The Heartbleed vulnerability is still not fixed on more than 0.3 million servers. Message name from neowin: Unfortunately, this huge security vulnerability seems to have been forgotten too quickly. According to the latest report from Errata

Mozilla Firefox Memory Corruption Vulnerability (CVE-2014-1540) Release date:Updated on: Affected Systems:Mozilla Firefox & lt; 30.0Description:--------------------------------------------------------------------------------Bugtraq id: 67978CVE (CAN)

Cisco IOS Software IPsec Packet Processing Denial of Service Vulnerability Cisco IOS Software IPsec Packet Processing Denial of Service Vulnerability Release date:Updated on: Affected Systems:Cisco IOSDescription:----------------------------------

Phpyun design defects can be paid by other account money, clear other account money to 0 When processing the order, the background directly obtains the uid in the cookie. This uid can be forged into another person's uid, resulting in payment by

Easysite content management system a simple and crude SQL Injection Web services will not lie to anyone ~!A large number of gov sites use the easysite content management system.Detailed description: 1. soap InjectionEasysite webservice

Experiment: Huawei mux vlan configuration and management The following experiment is an experimental video teaching course designed by the author for "Huawei switch Learning Guide". Click here to view details: http://edu.51cto.com/course/course_id-20

Canvas fingerprint Tracking Technology Based on HTML5 Today, there are many ways to track visitors, such as using the cookie technology on the user side, which has been abandoned by most companies, now there is a new way to replace cookies to track