Cloud Security

AirLive IP monitor Command Injection Vulnerability (CVE-2015-2279)AirLive IP monitor Command Injection Vulnerability (CVE-2015-2279) Release date:Updated on:Affected Systems: Airlive IP Cameras MD-3025Airlive IP Cameras BU-3026Airlive IP Cameras BU-2

Google Chrome bypass access restriction Vulnerability (CVE-2015-1266)Google Chrome bypass access restriction Vulnerability (CVE-2015-1266) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2015-1266Google

Kingsoft new drug overlord "Wukong"/Kingsoft guard Remote Code Execution VulnerabilityKingsoft new drug overlord "Wukong"/Kingsoft guard Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: Kingsoft Corp Kingsoft Antivirus

OpenSSL PKCS7_dataDecode Function Denial of Service Vulnerability (CVE-2015-1790)OpenSSL PKCS7_dataDecode Function Denial of Service Vulnerability (CVE-2015-1790) Release date:Updated on:Affected Systems: OpenSSL Project OpenSSL 〈 0.9.8zgOpenSSL

HP Storage Data Protector Remote Code Execution VulnerabilityHP Storage Data Protector Remote Code Execution Vulnerability Release date:Updated on:Affected Systems: HP Storage Data Protector Description: CVE (CAN) ID: CVE-2015-2116HP Data

WordPress Crayon Syntax Highlighter Arbitrary File leakage VulnerabilityWordPress Crayon Syntax Highlighter Arbitrary File leakage Vulnerability Release date:Updated on:Affected Systems: WordPress Crayon Syntax Highlighter Description: Syntax

Dongle Local Privilege Escalation Vulnerability Local permission escalation Also caused by upgrades1. Place the exeaddresses of accounts in the directory of the dongle Upgrade Center and replace them with update.exe.  2. Open dongle and prompt

OpenSSL man-in-the-middle Security Restriction Bypass Vulnerability Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL OpenSSL Project OpenSSL 1.0.1-1.0.1kOpenSSL Project OpenSSL 1.0.0-1.0.0pDescription:Bugtraq id: 71936CVE (CAN) ID:

Case study-network performance reduction caused by attacksFault description The manager of donghuantuo Mining Network reported that many users in the region had access to the Intranet of the group company or the Internet was slow or inaccessible.

A vro of TPlink can decrypt the configuration file without authorization. A vro of TPlink can decrypt the configuration file without authorization. Firmware Version: 5.0.0 Build 100406 Rel.11262ADSL Firmware version: FwVer: 3.11.2.176 _ TC3086

How to quickly discover Windows viruses without external tools     After several years of emergency response work, I think it is very useful to summarize a "methodology" to quickly determine whether a computer is infected with Trojans and viruses.

Anti-virus attack and defense: A Preliminary Study of malicious program hiding-DLL hidingI. Preface I used three articles to describe how to use DLL to hide processes (For details, refer to Article 009th on anti-virus attack and defense: DLL

Python security coding and code Auditing 1 PrefaceCurrently, the general web development framework security has been quite good. For example, django is commonly used, but some nonstandard development methods will still cause some common security

SQL injection vulnerability in a website under Zhongguancun online Zhongguancun online under a station SQL injection vulnerability http://easyxiu.zol.com.cn/H/ POST/H/action /? Act = order HTTP/1.1Content-Length: 75Content-Type:

A vulnerability in the site Cool Network allows tens of thousands of users to log on to the site at will (see how I log on to the accounts of a large number of gold medal designers) The problem parameter is here: theoretically, only the details of

A serious logical vulnerability in a home hotel allows users to log on to any account, resulting in tens of millions of sensitive information leaks (involving basic personal information and Check-in records of any user account, etc) The book said

SQL SERVER injection Principle Demonstration The operation of the injection scenario in the database is reproduced.Injection'Message 206, level 16, status 2, 9th rowsOperand type conflict: ntext is incompatible with intSELECT * FROM eims_User WHERE

How to bypass space filtering by mysql Injection During SQL injection, spaces are widely used. For example, we use union to obtain the target data:Http://www.xxx.com/index.php? Id = 1 and 0 union select null, null, nullThe preceding statement

Yifu downloads a website from bypassing upload to any file to getshell Yifu downloads a website from bypassing upload to any file to getshell Site: http://kf.bestpay.com.cn Tianyi e-commerce company customer service systemChat with customer service

A SQL injection vulnerability in ThinkSNS (bypass anti-injection) A SQL injection vulnerability exists in ThinkSNS and attackers can bypass anti-injection to obtain arbitrary data. Vulnerability code: \ apps \ public \ Lib \ Action \ TestAction.