Cloud Security

LibreOffice '. rtf' File Import DoS Vulnerability Release date:Updated on: Affected Systems:Libreoffice Description:Bugtraq id: 71313CVE (CAN) ID: CVE-2014-9093 LibreOffice is a suite that can be executed on various platforms and is compatible

Vulnerability warning: FTP exposes a severe remote execution vulnerability, affecting multiple versions of Linux (with a detection script) On July 6, October 28, a public email showed the FTP remote command execution vulnerability. The vulnerability

FortiManager and FortiAnalyzer Web ui xss Vulnerability (CVE-2014-2336) Release date:Updated on: Affected Systems:Fortinet FortiAnalyzer Description:CVE (CAN) ID: CVE-2014-2336 FortiAnalyzer is a centralized Log Data Analysis Solution for

Adobe Digital Editions user data leakage Vulnerability Release date:Updated on: Affected Systems:Adobe Digital Editions 4.xDescription:CVE (CAN) ID: CVE-2014-8068 Adobe Digital Editions is A software for reading and managing e-books and other

Oracle Java BytePackedRaster. verify () signature Integer Overflow Release date:Updated on: 2013-08-20 Affected Systems:Oracle Java Description:--------------------------------------------------------------------------------Java is the foundation of

Arbitrary File Upload Vulnerability (CVE-2014-5006) for multiple ManageEngine Products) Release date:Updated on: 2014-09-03 Affected Systems:ManageEngine implements topcentral 8-9 build 90054Description:-----------------------------------------------

Perl Clipboard module 'clipedit. pl' insecure temporary File Processing Vulnerability Release date:Updated on: Affected Systems:Perl Clipboard 0.13

ManageEngine arbitrary topcentral Arbitrary File Upload Vulnerability (CVE-2014-5007) Release date:Updated on: 2014-09-03 Affected Systems:ManageEngine implements topcentral 8-9 build 90054Description:-----------------------------------------------

Remote buffer overflow vulnerability in Oracle Database Export exp.exe Parameters Remote buffer overflow vulnerability in Oracle Database "exp.exe" parameter files Release date:Updated on: Affected Systems:Oracle 10gOracle Oracle11gDescription:------

How to Implement text message interception on Android 4.4 As we all know, Android 4.4 has added a lot of security measures. In addition to setting SELinux as enforce, it has also increased restrictions on text messages. After 4.4, a default sms

Apache HttpComponents Host Name authentication man-in-the-middle attack Vulnerability Release date:Updated on: Affected Systems:Apache Group HttpComponents Apache Group HttpComponentsApache Group HttpAsyncClient Description:--------------------------

Less than 5 minutes! Hackers have cracked the world's safest Android phone Blackphone is called the world's safest Android phone. At the recent DefCon hacking conference, the mobile phone was cracked by hackers within five minutes and obtained the

Aruba Networks ClearPass SQL injection vulnerability in CVE-2014-4013) Release date:Updated on: Affected Systems:Aruba Networks ClearPass 5.0.1-6.3Description:--------------------------------------------------------------------------------Bugtraq

PhpMyAdmin libraries/rte/rte_list.lib.php Multiple Cross-Site Scripting Vulnerabilities Release date:Updated on: Affected Systems:PhpMyAdmin 4.2.xPhpMyAdmin 4.1.xPhpMyAdmin 4.0.xDescription:------------------------------------------------------------

How to protect the LAMP server on CentOS or RHEL (1) LAMP is a set of software architecture, including these components: Linux (operating system as the basic layer), Apache (website server located on the operating system), MySQL (or MariaDB, as a

Security risks caused by improper PHP Session serialization and deserialization processor settingsPHP Session serialization and deserialization Processor PHP has a variety of built-in processors used to access $ _ SESSION data, which will be

YXCMS1.2.6 version 1 Arbitrary File Deletion + 6 unauthorized operations   After a simple audit, we found that YXcms has an Arbitrary File Deletion vulnerability and multiple unauthorized operations (only one example is provided as proof)1.

UFIDA software collaborative Office Platform General-purpose Arbitrary File Upload getshell Kill getshellUpload point: /Oaerp/ui/sync/excelUpload. jspIdeas:1. bypass javascript restrictions and upload the pony;2. getshell according to the pony

All query machines and many service terminals of the National Library of China can jump out of sandbox & amp; Privilege Escalation Today, I went to guotu to read a book and checked it by the way ......1. Permission escalation   Non-administrator

Architects need to place HTML5 security first in the form of new attacks The Enterprise Architects we introduced earlier may encounter some problems when starting HTML5. This article will continue to introduce new security attacks as HTML5