Cloud Security

How to Implement text message interception on Android 4.4 As we all know, Android 4.4 has added a lot of security measures. In addition to setting SELinux as enforce, it has also increased restrictions on text messages. After 4.4, a default sms

Ruby on Rails 'create _ with () 'Function Security Restriction Bypass Vulnerability Release date: Updated on: Affected Systems: Ruby on Rails Description: Bugtraq id: 69265 CVE (CAN) ID: CVE-2014-3514 Ruby on Rails (RoR or Rails) is an

Cisco Unity Connection SQL injection vulnerability in CVE-2014-3336) Release date:Updated on: Affected Systems:Cisco Unity ConnectionDescription:--------------------------------------------------------------------------------Bugtraq id: 69163CVE

OpenSSL SRP Remote Denial of Service Vulnerability (CVE-2014-3512) Release date:Updated on: Affected Systems:OpenSSL Project OpenSSL Description:--------------------------------------------------------------------------------Bugtraq id: 69083CVE

Virtual Machine Escape Vulnerability advanced exploitation of VirtualBox 3D AccelerationPreviousBlogIn, we shared the use technology of a client-to-host (guest-to-host) vulnerability that affects Xen hypervisor. In this new blog, we will focus on

OpenStack Horizon Web Name HTML Injection Vulnerability (CVE-2014-3474) Release date:Updated on: Affected Systems:Openstack OpenStack Dashboard

PhpMyAdmin libraries/rte/rte_list.lib.php Multiple Cross-Site Scripting Vulnerabilities Release date:Updated on: Affected Systems:PhpMyAdmin 4.2.xPhpMyAdmin 4.1.xPhpMyAdmin 4.0.xDescription:------------------------------------------------------------

Google Chrome Heap Buffer Overflow Vulnerability (CVE-2014-3157) Release date:Updated on: Affected Systems:Google Chrome Description:--------------------------------------------------------------------------------Bugtraq id: 67972CVE (CAN) ID: CVE-20

Release date:Updated on: Affected Systems:RedHat Linux Description:--------------------------------------------------------------------------------Bugtraq id: 64125CVE (CAN) ID: CVE-2013-2133 JBoss Enterprise Application Platform (EAP) is a

Release date:Updated on: Affected Systems:Real Networks RealPlayer 16.0.3.51Real Networks RealPlayer 16.0.2.32Description:--------------------------------------------------------------------------------Bugtraq id: 64398CVE (CAN) ID:

Release date:Updated on: Affected Systems:PHP 5.5.xPHP 5.4.xPHP 5.3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 64225CVE (CAN) ID: CVE-2013-6420 PHP is an embedded HTML language. When

Released on: 2013-01-01Updated on: Affected Systems:PHP imdb Classes 2-2.1.5Description:--------------------------------------------------------------------------------Bugtraq id: 64542 PHP is an embedded HTML language. PHP imdb 2-2.1.5 and other

Release date:Updated on: Affected Systems:GnuTLS 3.2.12GnuTLS 3.1.22Description:--------------------------------------------------------------------------------Bugtraq id: 65919CVE (CAN) ID: CVE-2014-0092 GnuTLS is a function library used to

Release date:Updated on: Affected Systems:Google Chrome Google Chrome Description:--------------------------------------------------------------------------------Bugtraq id: 66239CVE (CAN) ID: CVE-2014-1705 Google Chrome is a Web browser tool

Release date:Updated on: Affected Systems:ManageEngine OpStorDescription:--------------------------------------------------------------------------------Bugtraq id: 66499CVE (CAN) ID: CVE-2014-0344 ManageEngine OpStor is a monitoring solution for

Notice on purchasing secure Web gateway: Four deployment options of SWGAfter determining the secure Web gateway that meets your security requirements and knowing which SWG functions you want to use and deploy, there is another question before

Detailed defense against cron attacks (times your cron Security)A few days ago, my friend said that his website consumed a lot of yundou, and then read the logs and found that most of them were cron. php. Then it is not accessed by an intranet IP

Hacker intrusion preliminary work: Collect server/VPS or virtual host information Method 1:You can use webmaster tools to query the website domain name and obtain the IP address to find the virtual host or vps used. For example: http://ip.2cto.com/,

Amazing technology: using php socket5 proxy for Intranet penetration testing During penetration testing, we often encounter webshells, but webserver provides web services through web port ing on the Intranet. If you have protection software that

Obtain the webshell method summary in the phpmyadmin backgroundMethod 1: CREATE TABLE `mysql`.`xiaoma` (`xiaoma1` TEXT NOT NULL );INSERT INTO `mysql`.`xiaoma` (`xiaoma1` )VALUES ('');SELECT xiaomaFROM study INTO OUTFILE 'E:/wamp/www/7.php';  ----