Cloud Security

FFmpeg ff_get_buffer Function Denial of Service Vulnerability (CVE-2015-8663)FFmpeg ff_get_buffer Function Denial of Service Vulnerability (CVE-2015-8663) Release date:Updated on:Affected Systems: FFmpeg Description: CVE (CAN) ID: CVE-2015-866

A vulnerability in the GPS Positioning System of Ping An can leak a large amount of information (user information/order information/real-time vehicle location) Detailed description: Http://gps.lnwin.com/ Account: testPassword 123456 After

Android reproduce security vulnerabilities, and hackers can use lengthy characters to crack them. Many security vulnerabilities on smartphones are related to screen locking. However, this new vulnerability directly bypasses the vulnerability to

FFmpeg sws_init_context Denial of Service Vulnerability (CVE-2015-6824)FFmpeg sws_init_context Denial of Service Vulnerability (CVE-2015-6824) Release date:Updated on:Affected Systems: FFmpeg FFmpeg Description: CVE (CAN) ID: CVE-2015-6824FFmpeg

Remote code execution vulnerability in multiple Foxit ProductsRemote code execution vulnerability in multiple Foxit Products Release date:Updated on:Affected Systems: Foxit Reader 4.xFoxit Reader Description: Bugtraq id: 76391Foxit Reader is a

A simple test of Lanzhou public transit GPRS monitoring and Scheduling System How can I play with the Lanzhou public transit GPRS monitoring and scheduling system?Can I request the last homepage? How can I play with Lanzhou public transit GPRS

Web vulnerabilities on major automatic card issuance platforms allow you to view card passwords and transaction information You can use the Web vulnerabilities of the automatic card issuance platform to obtain transaction information such as card

Shopex Open Platform SQL injection and Getshell SQL Injection. BBScan scanned a git information leak: http://open.shopex.cn/.git/ Use the rip-git.pl to download the source code.Source code audit finds an SQL injection:Open.shopex.cn \ core \

Tianhong mall app SQL injection (including 380 million + mall user data and 330 million + VIP user data) SQL Injection for APP security Objectives: Tianhong mall red scarf APPCheck that SQL Injection exists in the following places: (injection

China Eastern Airlines Co., Ltd. leaked the user information of the whole site member (birthday/name/mobile phone number/email) It is feasible to give a high rank 1. I was very happy to register a member (East China miles) and found that my personal

A system of jiangtai insurance has SQL injection (supporting union involving millions of data) SQL Injection **. **/Indexlis. jsp    python SQLMap/SQLMap.py -u "**.**.**.**/common/cvar/CExec.jsp" --data

A rare loophole in giants (making you the richest person in the journey) Maybe I'm a little surprised at the moment. Giant Mall journey this can change point card, feel a little interesting, continue to look downThen I was surprised to find out

Database hit caused by improper design of the primary site of Ruili Network Database hit caused by improper design of the primary site of Ruili Network Http://www.rayli.com.cn/No verification code, no limit on the number of timesPOST/apsaradb for

Getshell is caused by a security vulnerability in China Netcom's value-added domain name business management platform. China Netcom's value-added Domain Name Service Management Platform has security vulnerabilities that can cause Getshell, view

Improper configuration of Financial Management fan services leads to leakage of background management system source code Incorrect git ConfigurationHttp: // 42.62.67.117/. git/configAccess http: // 42.62.67.117/wp-admin/jump to

SQL Injection exists in the Online Order System of a pharmaceutical company ~ Spread out your palmLet me see youMysterious and mysterious secretsCheck if I have you.Spread out your palmHold my loveNot so hardThis will shake my heartAlso cut your

SQL injection vulnerability in tongjin cube of financial stocks (affecting the security of stock information leakage) Detailed description: Client.mfniu.com was found to have the SQL injection vulnerability in the earlier version of phpcms v9

Unauthorized access to Redis results in remote access to server Permissions Recently, the Rubik's Cube security team has detected a new type of attacks against unauthorized access to Redis. In specific conditions, remote attacks can cause server

Web server cluster Construction I. Requirement Analysis:1. overall requirement: Build a highly available website server cluster that can withstand high-concurrency requests and defend against general network attacks. The return of any server does

Attacks and defense against abuse of permissions in the IOT age In addition to debugging on the android real machine, the permission Abuse Vulnerability has many other scenarios. It is particularly widely used in the IOT field. For example: A smart