Cloud Security

PNG Image Processing Library libpng exposed vulnerability, which has been preliminarily fixed The image processing Library libpng has revealed a vulnerability and needs to be repaired as soon as possible. The biggest problem is that, the popularity

13 million 000Webhost plaintext password exposure More than 13 million webhost that provides free Web hosting service was hacked into the system five months ago by exploiting the vulnerability of the old PHP version, stealing the plaintext

Attackers intrude into the Bugzilla to access undisclosed bugs. Mozilla issued a warning that an attacker steals sensitive undisclosed vulnerabilities from its bug Tracking System Bugzilla and may exploit the vulnerability information to attack

WebKit same-source policy Multiple Security Restriction Bypass VulnerabilityWebKit same-source policy Multiple Security Restriction Bypass Vulnerability Release date:Updated on:Affected Systems: WebKit Open Source Project WebKitApple iOS 5.xApple

WordPress Unite Gallery Lite plug-in SQL injection and Cross-Site Request Forgery VulnerabilityWordPress Unite Gallery Lite plug-in SQL injection and Cross-Site Request Forgery Vulnerability Release date:Updated on:Affected Systems: WordPress

Multiple IBM DB2 product file leakage vulnerabilities (CVE-2015-1883)Multiple IBM DB2 product file leakage vulnerabilities (CVE-2015-1883) Release date:Updated on:Affected Systems: IBM DB2 9.8-FP5IBM DB2 9.7-FP10IBM DB2 10.5-FP5IBM DB2 10.1-FP5

SAP Afaria (CVE-2015-4161) Vulnerability)SAP Afaria (CVE-2015-4161) Vulnerability) Release date:Updated on:Affected Systems: SAP Afaria Description: CVE (CAN) ID: CVE-2015-4161SAP Afaria is a mobile device management software product.SAP

Huawei E587 Authentication Bypass Vulnerability (CVE-2015-3911)Huawei E587 Authentication Bypass Vulnerability (CVE-2015-3911) Release date:Updated on:Affected Systems: Huawei E587 11.100.00.00.00 Description: Bugtraq id: 74434CVE (CAN) ID:

WordPress FeedWordPress plugin SQL Injection VulnerabilityWordPress FeedWordPress plugin SQL Injection Vulnerability Release date:Updated on:Affected Systems: WordPress FeedWordPress Description: Bugtraq id: 74712FeedWordPress is an Atom/RSS

WordPress released patches to fix just-exposed Security Vulnerabilities WordPress Content Management System has been exposed to two cross-site scripting vulnerabilities, allowing attackers to embed malicious code in the WordPress Comment area to

Multiple D-Link products, HNAP command, Remote Privilege Escalation VulnerabilityMultiple D-Link products, HNAP command, Remote Privilege Escalation Vulnerability Release date:Updated on:Affected Systems: D-Link Wireless Router Description:

Administrator guide: how to obtain or prevent access to OS X (1) Working as a system administrator is sometimes not an easy task. Because many devices, networks, and users need to be managed, it is easy to get exhausted. Therefore, a certain

Use john to crack the CentOS Password John is a Linux password cracking tool that can crack the shadow password of a Linux system. Official station: http://www.openwall.com/john/ Installation and use: 1234567 # wget

Using some database functions to initiate dns resolution features for SQL Injection First, describe and normalize the description of the SQL injection type. Four SQL injection methods mentioned earlier. In fact, it is not very appropriate.

P2p financial security: Multiple SQL injection vulnerabilities on a platform P2p financial security: Multiple SQL injection vulnerabilities on a platform Qian loan Network (www.moneydai.com), as a professional P2P network lending institution, is

Principles of PHP hash table collision attacks Recently, Hashtable collision attacks (Hashtable collisions as DOS attack) have been mentioned, and many languages have been involved. This article combines the PHP kernel source code to discuss the

PHP security programming suggestionsTo provide Internet services, you must always be aware of security when developing code. Most PHP scripts may not care about security issues. This is largely because a large number of inexperienced programmers are

Orico nas Network Storage Server Remote Arbitrary Command Execution and other vulnerabilities ORICO Technologies Co ., ltd. (Shenzhen yuanchuang times Technology Co., Ltd.) is a world-leading manufacturer of computer/Digital peripheral products. Its

Base64 deformation InjectionWhen we look for the SQL injection vulnerability on Google, the keyword is constructed as follows: inurl:news.php?id=inurl:*.php?id=12inurl:.php?articleid=.... No matter how you search, we usually think that the GET value

Intranet roaming caused by a system command execution by BYD I mentioned earlier that there may be many servers running commands on the BYD Internet, and it can also be used as a boundary server to roam the Intranet. Http://csm.byd.com.cn/homeAction.