Cloud Security

Linux kernel MDP driver Privilege Escalation Vulnerability (CVE-2014-4323) Release date:Updated on: Affected Systems:Linux kernel 3.xDescription:CVE (CAN) ID: CVE-2014-4323 Linux Kernel is the Kernel of the Linux operating system. Linux kernel 3. in

TYPO3 Questionnaire Extension Vulnerability (CVE-2014-8874) Release date: 2014-12-01Updated on: 2014-3 3 Affected Systems:TYPO3 Questionnaire 2.5.2Description:Bugtraq id: 71390CVE (CAN) ID: CVE-2014-8874 TYPO3 Questionnaire is a survey of the

How to exploit the wins Heap Overflow Vulnerability newheap=HeapCreateadd(HEAP_GENERATE_EXCEPTIONS,0x10000,0); i=*(int *)(0x7ffdf008); // wins.exe address; j=0; for(k=0;k1. How to reuse socket.   Because the server

APP security analysis-taxi hailing Software Recently, I found that the APK of a taxi hailing software is very popular. I heard that they are providing very strict protection to prevent users from packing twice. Today, let's analyze how secure he is.

Play bad vulnerability: Let the CVE-2014-4113 overflow Win8 1. Introduction In October 14, 2014, Crowdstrike and FireEye published an article describing a new Windows Elevation of Privilege Vulnerability.Articles about CrowdstrikeMing: This new

FFmpeg and Libav cross-border Denial of Service Vulnerability (CVE-2014-8545) Release date: 2014-3 3Updated on: Affected Systems:FFmpeg FFmpegDescription:Bugtraq id: 70886CVE (CAN) ID: CVE-2014-8545 FFmpeg is a free software that allows you to

Shellshock analysis CVE-2014-6271 Some time ago, the shell-breaking vulnerabilities made various companies very busy. The vulnerabilities have been around for a while, and the analysis of the Internet has also been transferred. When they stop, it's

OpenSSL no-ssl3 build option Security Bypass Vulnerability (CVE-2014-3568) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:Bugtraq id: 70585CVE (CAN) ID: CVE-2014-3568 OpenSSL is an open-source SSL implementation

Apache POI Denial of Service Vulnerability (CVE-2014-3574) Released on: 2014-09-03Updated on: Affected Systems:Apache Group POI 3.11.xApache Group POI 3.10.xDescription:Bugtraq id: 69648CVE (CAN) ID: CVE-2014-3574 Apache POI is an open-source

Node. js qs module DoS Vulnerability Release date:Updated on: 2014-3 3 Affected Systems:Nodejs NodejsDescription:Bugtraq id: 70115 Node. js is a platform built on Chrome's JavaScript runtime environment for building network applications. The

Arbitrary website Forgery Vulnerability in UC browser (PC) Arbitrary website Forgery Vulnerability in UC browser (packaging)Browser version   #1. Arbitrary website forgeryPOC:  An error will occur after running the POC, but the UC browser helps us

Self-diagnosis and repair of "shell-breaking vulnerabilities" Self-diagnosis and repair of [Shell Cracking vulnerabilities] a Bash vulnerability, also known as a "Shell Cracking Vulnerability", can cause remote attackers to execute arbitrary code on

Linux Kernel Local Privilege Escalation Vulnerability (CVE-2014-0205) Release date:Updated on: Affected Systems:Linux kernelDescription:Bugtraq id: 69725CVE (CAN) ID: CVE-2014-0205 Linux Kernel is the Kernel of the Linux operating system. Linux

A city cartoon system has a severe privilege escalation vulnerability, which may cause a large amount of financial data leakage.   A city cartoon system has a severe privilege escalation vulnerability, which may cause a large amount of financial

Smart Home can remotely control devices of other people's homes. I like your design and admire the magic design of smart config,But it's a little worse.Oribo WiWo s20 smart Outlet Protocol Analysis:Control Switch  Uid = MAC + 0x202020202020MAC

About your battle: simple and beautiful hacking gamesThis is a simple and beautiful little game mounted on Github. It seems nothing special, challenges test your exploration of various programming languages or at a higher level (today I am not low-I

Password bypass in a game warehouse in Kingsoft (directly modify key data) When resetting the warehouse password, you can directly modify the information without confirmation. Send 49 00 F9 46 00 01 41 00 43 32 53 5F 73 74 73 77 64 00 03 00 00 00 2

Past, present, and future of Web attack Log Analysis0x00: Preface When talking about log analysis, most people feel that this is an afterthought behavior. When hackers succeed, the website will be hacked. When an operator finds out, the security

Ecshop csrf defense bypasses the background sensitive function csrf getshell   Supports csrf to execute various background sensitive functions. The analysis here is to use the empty referer method to bypass.This bypass can be used to implement csrf

RPC protocol Learning (3) differences from otherSummary The Web Service is no longer fresh, and the subsequent SOA and Cloud Computing are also emerging until Baidu also proposed its own box Computing, we still don't care how much actual