Cloud Security

EMC Unisphere Central open Redirection Vulnerability (CVE-2015-0512) Release date:Updated on: Affected Systems:EMC uniseries Central Description:Bugtraq id: 72374CVE (CAN) ID: CVE-2015-0512 EMC Unisphere Central can remotely monitor network

GNU glibc gethostbyname Buffer Overflow Vulnerability The gethostbyname function of the GNU glibc standard library has a buffer overflow vulnerability. Vulnerability No.: CVE-2015-0235. For details, see here. Glibc is a C library that provides

Oncake: a malicious code module built into the mobile ROM. The AVL mobile security team recently joined LBE to find a malicious code module built into the mobile ROM. Because the author of the malicious code calls the module running and releasing

Huawei WS318 predictable random number generator Vulnerability Release date:Updated on: Affected Systems:Huawei WS318Huawei WS318Description:Bugtraq id: 71787 Huawei WS318 is a wireless router product. A predictable random number generator

Isc bind Remote Denial of Service Vulnerability (CVE-2014-8500) Release date:Updated on: Affected Systems:Isc bind 9.9.0-> 9.9.6Isc bind 9.10.0-> 9.10.1Isc bind 9.0.x-> 9.8.xDescription:Bugtraq id: 71590CVE (CAN) ID: CVE-2014-8500 BIND is a

Security risks of pictures displayed in email addressesThe code for loading images in html is: where the address of the SRC attribute is the image address, here, I want to write the image address as my website construction to collect the code of

Linux Rootkit detection method based on memory Analysis0x00 Introduction A Linux server finds an exception. For example, it is determined that the Rootkit has been implanted, but the routine Rootkit detection method by O & M personnel is invalid.

Nine Most common security errors made by Web application developers (1) Web application development is a broad topic. This article only discusses security errors that Web application developers should avoid. These errors involve basic security

ElasticSearchGroovy script Remote Code Execution Vulnerability emergency SummaryI. Vulnerability description ElasticSearch is a JAVA-developed search and analysis engine. 2014, once exposed a Remote Code Execution Vulnerability (CVE-2014-3120), the

Optimistic about your portal-data transmission from the client-insecure cookies1. http cookie is a common mechanism for transmitting data through a client. Like hiding form fields, http cookies are generally not displayed on the screen. Compared

Dedecms v5.7 File Inclusion causes Arbitrary Code Execution The security box Team (www.secbox.cn) today discovered a code execution vulnerability in zhimeng decms, which can execute arbitrary code and cause getshell,   Affected Versions: ≤V5.7sp1

The process of successfully penetrating an authorized website Cause One of our customers wants us to perform penetration tests on their websites to discover their weaknesses and help improve security. After obtaining the penetration test

One email can control the future emails of China Telecom users' mailboxes (or even change the email name to be more concealed) One email can control the future emails of 21cn user mailboxes for personal mailboxes. Here, a 21CN enterprise mailbox is

Intrusion penetration sell envelope scam Station  Last night, a friend suddenly sent an envelope-selling scam station in the group. before dinner, he was bored. He copied the guy and checked it with my friend. This guy probably lied to many people.

If a service of Tongcheng tourism is improperly configured, getshell enters the Intranet and the Intranet Structure is leaked. Http: // 61.155.159.159/cacti/ Cacti System61.155.159.159 ftp blank password access  ftp> ls229 Entering Extended Passive

[Web security practices] XSS Article Points: 1. Understand XSS 2. XSS attacks 3. XSS defense (important)I. Understanding XSS first Let's start with a story. In the previous article, I also want to talk about this case. In fact, what is attack is

The getshell function of a website affects multiple business sites. The getshell function of a website affects multiple business sites. #1 in the wood ant's seventh media http://mobile7.cn registered a developer account, in the developer information

Hang Seng JRES platform Registration Vulnerability (crack Registration) The registration mechanism of Hang Seng JRES platform uses plug-ins. Its jar package is easily decompiled to construct correct registration files.   Run the com. hundsun. ares.

Netease mail XSS vulnerability on mobile phones (affects emails such as 163 and 126) Well, according to the previous brain hole, I tried again and found that both 163 and 126 had it ~ Change the recipient's name to   Then, when I checked the

The MyBB unset_globals () function is bypassed, causing remote code execution and analysis. Yesterday, we saw a remote code execution vulnerability in exploit-db. The analysis was very detailed. Unfortunately, it was written in English. Here is a