Cloud Security

Google Chrome Security Restriction Bypass Vulnerability (CVE-2016-1638)Google Chrome Security Restriction Bypass Vulnerability (CVE-2016-1638) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID:

Google Chrome Omnibox Spoofing Vulnerability (CVE-2016-1615)Google Chrome Omnibox Spoofing Vulnerability (CVE-2016-1615) Release date:Updated on:Affected Systems: Google Chrome Description: CVE (CAN) ID: CVE-2016-1615Google Chrome is a Web

Samba man-in-the-middle attack Vulnerability (CVE-2015-5296)Samba man-in-the-middle attack Vulnerability (CVE-2015-5296) Release date:Updated on:Affected Systems: Samba Samba 4.x-4.1.22Samba Samba 4.3.x-4.3.3Samba Samba 4.2.x-4.2.7Samba Samba

HP Asset Manager local information leakage (CVE-2015-5448)HP Asset Manager local information leakage (CVE-2015-5448) Release date:Updated on:Affected Systems: HP AssetManager 9.50-9.50.11925 P3HP AssetManager 9.41-9.41.11103 P4-rev1HP AssetManager

HP ArcSight SmartConnectors man-in-the-middle Vulnerability (CVE-2015-2902)HP ArcSight SmartConnectors man-in-the-middle Vulnerability (CVE-2015-2902) Release date:Updated on:Affected Systems: HP ArcSight SmartConnectors Description: CVE (CAN)

Arbitrary File Upload Vulnerability in MediaWiki (CVE-2015-8003)Arbitrary File Upload Vulnerability in MediaWiki (CVE-2015-8003) Release date:Updated on:Affected Systems: MediaWiki MediaWiki 1.25.x-1.25.3MediaWiki 1.24.x-1.24.4 Description:

Redhat's Ceph and Inktank code libraries were hacked RedHat claims that Ceph community projects and Inktank download websites were hacked last week and some code may be damaged. Last week, RedHat suffered a very unpleasant accident. Both the Ceph

Libvdpau trace feature Arbitrary File Write Vulnerability (CVE-2015-5200)Libvdpau trace feature Arbitrary File Write Vulnerability (CVE-2015-5200) Release date:Updated on:Affected Systems: Libvdpau Description: CVE (CAN) ID:

Analysis Report: embedding malicious payload Word documents   A week ago, Mr. Xavier Mertens, sans isc management and freedom security consultant, analyzed a malicious Word document. The following is his analysis report. Event background Last week,

A mobile provincial Business Office System of China Mobile uses java Reverse Sequence upload shell to leak database/application system account and password information >_   Mask Region 1.://**.**.**/zjweb/ Java Reverse Sequence upload

Cool music WWW main site + multiple substations SQL Injection Vulnerability Cool music WWW main site + multiple substations SQL Injection Vulnerability The SQL injection vulnerability exists in the WWW main site and multiple substations, and is

Coda video surveillance system mysql database weak password (involving all devices of China People's property insurance Suzhou Branch) China People's Property Insurance Limited by share Ltd Suzhou Branch-Corda video surveillance system mysql

A large amount of information leaked by drug users purchased by drug network (including/user sign \ User detailed address \ User Name \ User email \ purchase time \ Drug Name \ etc) Rt   Http://www.12yao.com/user/log.txtUser log leakage,

Cool music IDC backend leakage can obtain detailed network topology information (typical case of poor division of network boundaries) A typical case where detailed information about all network assets of the company is disclosed due to poor division

Wurth Chinese SQL injection vulnerability to obtain administrator password The SQL injection vulnerability exists and the dba permission exists. Injection point: http: // **. **/html/NewsView_cn.php? Id = 58You cannot write Trojans using udfs, and

Improper configuration of Financial Management fan services leads to leakage of background management system source code RT Incorrect git Configuration  http://42.62.67.117/.git/config   Access http: // 42.62.67.117/wp-admin/Jump to

The Asia Pacific Daily website has the SQL Injection Vulnerability (sensitive information \ can enter the background Getshell) The Asia Pacific Daily News Agency is sponsored by the Asia Pacific General branch of Xinhua News Agency (Xinhua News

Java deserialization, object injection can cause code execution vulnerability 0x01 PrincipleJava deserialization results in the same principle as PHP deserialization, because user input can control the input objects. If the server program does not

How to Use JWT to defend against CSRF The names are all used to notify people. The following two terms are explained: CSRF and JWT. CSRF (Cross Site Request Forgery) indicates that you open two tabs in a browser, one of which sends forged requests

Arbitrary Password Reset + unauthorized access + SQL Injection Arbitrary Password Reset + unauthorized access + SQL Injection 1. Reset any password ...... The verification code is in the return value (registration is the same, you can register any